Content-Security-Policy | default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://s.ytimg.com https://script.crazyegg.com https://dnn506yrbagrg.cloudfront.net;style-src 'self' 'unsafe-inline' https://fast.fonts.net;img-src 'self' https://www.google.com https://www.google-analytics.com;frame-src 'self' https://www.youtube.com https://player.vimeo.com https://radboudumc-web.ungerboeck.com;font-src 'self' data: |