| Content-Security-Policy | child-src 'self'; connect-src 'self' ws: https://*.cloudinary.com http://*.cloudinary.com https://deepimpact.eu.auth0.com/ https://sps-dev.eu.auth0.com/ https://sps-prod.eu.auth0.com; img-src 'self' blob: data: https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net https://*.cloudinary.com http://*.cloudinary.com; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net; object-src https://event.mescdn.com https://slidesync.com https://*.slidesync.com; media-src https://event.mescdn.com https://slidesync.com https://*.slidesync.com https://*.cloudinary.com http://*.cloudinary.com; script-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net https://event.mescdn.com https://slidesync.com https://*.slidesync.com; style-src 'self' 'unsafe-inline' blob: https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net https://event.mescdn.com https://slidesync.com https://*.slidesync.com fast.fonts.net; frame-src 'self' https://www.google.com https://www.youtube.com https://plan.soft-nrg.com https://event.mescdn.com https://slidesync.com https://*.slidesync.com https://irs.tools.investis.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net |