| Content-Security-Policy | script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost:50001 http://localhost:50002 http://localhost:50003 http://localhost:50004 http://localhost:50005 http://localhost:50006 http://localhost:50007 http://localhost:50008 http://localhost:50009 http://localhost:50010 https://local.skyfonts.com:51000 https://local.skyfonts.com:51001 https://local.skyfonts.com:51002 https://local.skyfonts.com:51003 https://local.skyfonts.com:51004 https://local.skyfonts.com:51005 https://local.skyfonts.com:51006 https://local.skyfonts.com:51007 https://local.skyfonts.com:51008 https://local.skyfonts.com:51009 https://local.skyfonts.com:51010 *.myfonts.net *.google-analytics.com https://*.adroll.com http://*.adroll.com flex.msn.com https://www.googleadservices.com *.facebook.com *.doubleclick.net connect.facebook.net dev.visualwebsiteoptimizer.com https://js.intercomcdn.com https://widget.intercom.io cdn.heapanalytics.com heapanalytics.com *.adnxs.com *.openx.net ads.yahoo.com *.twitter.com *.bidswitch.net maps.google.com *.google.com maps.googleapis.com *.ricdn.com conversionlogic.net *.conversionlogic.net *.qualtrics.com *.newrelic.com *.nr-data.net https://www.googletagmanager.com *.googleadservices.com static.ads-twitter.com https://ajax.googleapis.com; report-uri /labs/cspReport.php; |