| Content-Security-Policy | media-src 'self' blob: https://shoppermxassets.blob.core.windows.net https://smxassetsdev.blob.core.windows.net/; default-src rocks.smx: az416426.vo.msecnd.net https://dc.services.visualstudio.com/v2/track http://dc.services.visualstudio.com/v2/track: 'self' icsdev02 *.shoppermx.com webplayer.unity3d.com ssl-webplayer.unity3d.com autoupdate-revision.unity3d.com https://shoppermxassets.blob.core.windows.net https://smxassetsdev.blob.core.windows.net/ https://www.google.com/recaptcha/api2/ https://www.google.com/recaptcha/api/ https://js.hs-scripts.com/ https://js.hs-analytics.net/ https://js.hsleadflows.net/ https://js.hscollectedforms.net/ https://forms.hubspot.com https://track.hubspot.com https://js.hsforms.net/ https://js.usemessages.com/ https://api.hubspot.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com maxcdn.bootstrapcdn.com *.google-analytics.com https://code.jquery.com signalr/connect blueimp.github.io webplayer.unity3d.com https://ssl-webplayer.unity3d.com *.fra.me *.cloudfront.net *.mainframe2.com https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ az416426.vo.msecnd.net https://az416426.vo.msecnd.net/scripts/a/ai.0.js http://az416426.vo.msecnd.net/scripts/a/ai.0.js https://dc.services.visualstudio.com/v2/track http://dc.services.visualstudio.com/v2/track https://cdnjs.cloudflare.com https://npmcdn.com https://code.angularjs.org https://js.hs-scripts.com/ https://js.hs-analytics.net/ https://js.hsleadflows.net/ https://js.hscollectedforms.net/ https://forms.hubspot.com https://track.hubspot.com https://api.usemessages.com/ https://js.hsforms.net/ https://js.usemessages.com/ https://api.hubspot.com/; font-src data: 'self' *.shoppermx.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://code.jquery.com https://fonts.googleapis.com/ maxcdn.bootstrapcdn.com; img-src 'self' http://track.hubspot.com *.incontextsolutions.com blob: *.google-analytics.com https://shoppermxassets.blob.core.windows.net https://ssl.gstatic.com/ *.incontextsolutions.com *.shoppermx.com *.smx.rocks https://code.jquery.com files.unity3d.com data: *.cloudfront.net *.loggly.com; |