| Content-Security-Policy | default-src 'self';;script-src 'self' 'unsafe-inline' use.typekit.net *.google-analytics.com *.cloudflare.com https://apis.google.com http://*.googleapis.com https://*.googleapis.com *.thesyriacampaign.org *.facebook.net *.facebook.com *.twitter.com https://*.google.com http://*.google.com;;object-src;img-src 'self' *.google-analytics.com *.gstatic.com p.typekit.net;;media-src;frame-src 'self' http://*.facebook.com https://*.facebook.com *.twitter.com https://*.google.com http://*.google.com https://apis.google.com https://*.youtube.com http://*.youtube.com;;font-src 'self' data: use.typekit.net;;connect-src 'self' *.thesyriacampaign.org;;style-src 'self' 'unsafe-inline' https://planetsyria.org use.typekit.net cloud.typography.com; |