| Content-Security-Policy | default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.addthis.com *.twitter.com *.trafficstars.com *.googleapis.com *.googlesyndication.com *.google-analytics.com *.xhamster.com *.xhcdn.com *.exoclick.com *.comeadvertisewithus.com *.runreproducerow.com *.adsclean.com; object-src *; style-src * 'unsafe-inline' 'unsafe-eval' *; img-src *; media-src *; frame-src 'self' https: paymentico.com bitpay.com *.bitpay.com *.addthis.com *.twitter.com *.trafficstars.com *.traffichaus.com *.xhamster.com *.exoclick.com *.xhamsterpremiumpass.com; font-src *; connect-src * |