"default-src * data: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' api.salemove.com api.salemove.eu ui.customsearch.ai analytics.twitter.com assets.adobedtm.com connect.facebook.net static.ads-twitter.com www.googleadservices.com maps.googleapis.com cdn.tt.omtrdc.net absa.tt.omtrdc.net www.google.com www.gstatic.com analytics.analytics-egain.com abdemo.egain.cloud absablog-dev.disqus.com absablog-sit.disqus.com absablog-uat.disqus.com absablog-prod.disqus.com ajax.googleapis.com platform.twitter.com platform.linkedin.com assets.pinterest.com c.disquscdn.com disqus.com secure.rating-widget.com log.pinterest.com rating-widget.com s.ytimg.com www.youtube.com youtube.com esb.ext.api.uat.absa.co.za client.crisp.chat googleads.g.doubleclick.net www.google.co.za www.google.pl dsp-aud.eskimi.com dsp.eskimi.com dsp-pix.eskimi.com dsp-media.eskimi.com cdn.syndication.twimg.com cse.google.com api-iam.intercom.io api.salemove.eu app.salemove.eu asset-proxy.salemove.eu assets.salemove.eu chunderw-gll.twilio.com chunderw-vpc-gll.twilio.com client-logger.salemove.eu eventgw.twilio.com fonts.googleapis.com fonts.gstatic.com io.salemove.eu js.intercomcdn.com kluster.ws.salemove.eu libs.salemove.com maps.googleapis.com maps.gstatic.com media.twiliocdn.com nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io s3-eu-west-1.amazonaws.com s3.amazonaws.com uplot.salemove.eu widget.intercom.io googletagmanager.com www.googletagmanager.com js-agent.newrelic.com bam.nr-data.net c.la1-c2cs-frf.salesforceliveagent.com d.la1-c2cs-frf.salesforceliveagent.com c.la1-c2-par.salesforceliveagent.com d.la1-c2-par.salesforceliveagent.com fls.doubleclick.net"
"default-src * data: 'unsafe-eval' 'unsafe-inline'"
"frame-ancestors http://www.vistaprint.nl https://www.vistaprint.nl http://vistaprint.nl https://vistaprint.nl
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.interco.io wss://endpoint.twilio.com wss://sdkgw.us1.twilio.com wss://*.twilio.com wss://*.firebaseio.com  https://cdn.firebase.com https://*.firebaseio.com
"default-src data: https: 'unsafe-eval' 'unsafe-inline'
img-src data: https: 'unsafe-eval' 'unsafe-inline'"
"frame-ancestors 'self' https://*.granicus.com http://*.granicus.com https://platform.civicplus.com https://account.civicplus.com
worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'
script-src * about: 'unsafe-inline' 'unsafe-eval'
"default-src https: data: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.cirrusgroup.com/ www.cirrusgroupllc.com/ https://schoolcareworks.com/ https://connect.schoolcareworks.com/ https://ccsd.schoolcareworks.com/ https://ccsdfamily.schoolcareworks.com/ https://aps.schoolcareworks.com/ apsfamily.schoolcareworks.com/ https://aps-beta.schoolcareworks.com/ https://gps-beta.schoolcareworks.com/ http://www.google-analytics.com/ https://*.zoho.com https://*.zohostatic.com
object-src 'self' 'unsafe-inline' 'unsafe-eval' www.cirrusgroup.com/ www.cirrusgroupllc.com/ https://schoolcareworks.com/ https://connect.schoolcareworks.com/ https://ccsd.schoolcareworks.com/ https://ccsdfamily.schoolcareworks.com/ https://aps.schoolcareworks.com/ apsfamily.schoolcareworks.com/ https://aps-beta.schoolcareworks.com/ https://gps-beta.schoolcareworks.com/ http://www.google-analytics.com/ https://*.zoho.com https://*.zohostatic.com"
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com yourconnectivity.net:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
"default-src 'self' http://dpm.demdex.net https://maps.googleapis.com http://fast.standardbank.demdex.net http://accstandardbank.d1.sc.omtrdc.net https://bid.g.doubleclick.net/xbbe/pixel http://8448999.fls.doubleclick.net https://cdn.krxd.net https://bs.serving-sys.com/serving https://secure-ds.serving-sys.com https://standardbank.demdex.net https://www.youtube.com/ https://*.map2.ssl.hwcdn.net
img-src 'self' data: http://accstandardbank.d1.sc.omtrdc.net https://www.google.com https://www.google.co.za http://cm.everesttech.net https://beacon.krxd.net https://jslog.krxd.net https://standardbank.demdex.net https://dpm.demdex.net https://*.map2.ssl.hwcdn.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://assets.adobedtm.com https://secure-ds.serving-sys.com http://cdn.krxd.net http://www.googleadservices.com http://www.googletagmanager.com https://consumer.krxd.net https://googleads.g.doubleclick.net https://beacon.krxd.net https://tribeca.vidavee.com https://*.map2.ssl.hwcdn.net
"default-src 'self' rufilm.tv rufilmtv.org *.pbcde.com pbcde.com *.nshes.ru nshes.ru 6xuar.gdn
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.rufilmtv.club *.pbcde.com *.nshes.ru pbcde.com nshes.ru *.gnezdo.ru news.gnezdo.ru news.2xclick.ru smartpush1.info smartpush11.info smartpush10.info smartpush0.info *.q-sht-zidjk.co q-sht-zidjk.co adbetnet.advertserve.com json.bannersvideo.com fcrgzqkbtgu.co octomarket.com adtrak.org adfill.me advmaker.su yt.advmaker.su json.bannersvideo.com bannersvideo.com 1plus1.video *.adbetclickin.pink http://serving.bepolitee.eu adlmerge.com gynax.com bgrndi.com https://fqtag.com osnn.work hydr.work luxup2.ru http://marvin.pw/ https://c.fqtag.com/ rufilm.tv brokeloy.com widefox.ru slowpoker.ru hgbn.network cdn7.network www.resttort.ru resttort.ru deenomo.com lolaken.com lopireto.com roklerok.com am15.net kadanoda.ru vakadiki.ru tozipoto.com zirifaha.ru kibitaqa.ru kiviraha.ru kilisaqa.ru retaraka.ru tisatama.ru tisataga.ru tozimoto.com tozikoto.com toziroto.com tozitoto.com tozipoto.com vogorana.ru vogozaw.ru vogozae.ru uuidksinc.net imdj.3793369.pix-cdn.org rtb.kadam.ru vogozae.ru aurumforyou.com yandex.ru yandex.st mc.yandex.ru www.google-analytics.com vk.com ulogin.ru luxup.ru *.luxup.ru *.am15.net *.thor-media.ru qepath.info zakoofoo.info zoobynu.info hbkii.xyz nucegu.info duxyve.info qezuqa.info cyjycu.info accommon.info samnioc.info dialected.info *.supuv2.com alphamrkt.com 6xuar.gdn mylma.gdn xml.adbetnet.com *.adbetnet.com m-shes.ru adbetnet.com etcxx.com mxccs.com mdapi.ru mdsrc.ru *.rtbsystem.com *.marketgid.com *.adlabs.ru dodrek.com psma01.com psma02.com psma03.com adservone.com *.onedmp.com *.videoviewer.ru bequri.com gotriki.com cdn.hgdat.com hghit.com
style-src 'self' 'unsafe-inline' rufilm.tv http://fonts.googleapis.com
font-src 'self' rufilm.tv fonts.gstatic.com data:
object-src 'self' rufilm.tv *.am15.net am15.net
frame-src 'self' data: *.pbcde.com pbcde.com *.nshes.ru nshes.ru *.videomore.ru videomore.ru samnioc.info https://ad.anistar.me ad.anistar.me *.adbetnet.com t.co ad.anistar.me stream.reyden-x.com tvzvezda.ru 1plus1.video out.pladform.ru https://fqtag.com allmovie.pro http://allmovie.tv http://player.ictv.ua https://kaztube.kz ren.tv m-shes.ru tvc.ru www.tvc.ru rufilm.tv rufilmtv.org am15.net advmaker.su yt.advmaker.su my.mail.ru uuidksinc.net *.amazonaws.com ok.ru *.ok.ru vk.com veterok.tv www.youtube.com *.ivi.ru *.vgtrk.com *.1ru.tv *.1tv.ru *.ntv.ru *.gnezdo.ru *.am15.net rutube.ru *.videomore.ru *.my.mail.ru ictv.ua rmbn.net psma01.com psma02.com psma03.com *.onedmp.com ovva.tv cdn7.network www.videokub.net *.adbetclickin.pink
connect-src 'self' rufilm.tv ws://brokeloy.com:8040 samnioc.info yt.advmaker.su mc.yandex.ru rtb.kadam.ru"
"frame-ancestors 'self' https://*.facebook.com, frame-ancestors 'self' https://*.facebook.com"
"default-src 'self' https://insights.hotjar.com https://syndication.twitter.com https://graylog.hotjar.com
style-src 'self' 'unsafe-inline' https://bitly.com www.google.com https://cse.google.com https://tagmanager.google.com platform.twitter.com https://ton.twimg.com
img-src 'self' data: clients1.google.com https://static.hotjar.com https://abs.twimg.com www.googleapis.com https://rpm.mennica.com.pl https://facebook.com https://pbs.twimg.com syndication.twitter.com http://user-mrp-ow.ext.e-point.pl stats.g.doubleclick.net https://www.google.pl https://app2.salesmanago.pl https://user-mrp-ow.ext.e-point.pl https://o.twimg.com www.google.com platform.twitter.com http://rpm.mennica.com.pl www.google-analytics.com https://ton.twimg.com
frame-src 'self' https://bitly.com https://*.google.com https://vars.hotjar.com https://www.googletagmanager.com www.google.com www.youtube.com platform.twitter.com https://facebook.com https://www.youtube.com syndication.twitter.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://*.google.com https://script.hotjar.com https://static.hotjar.com https://www.facebook.com www.googleapis.com https://facebook.com *.twitter.com https://bitly.com https://*.google.com http://www.google.com https://app2.salesmanago.pl https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://app2.emlgrid.com https://cdn.syndication.twimg.com https://cdn.jsdelivr.net www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.vak2.ed.gov.ru vak2.ed.gov.ru http://vak2.ed.gov.ru http://perechen.vak2.ed.gov.ru http://*.vak2.ed.gov.ru https://tg.directadvert.ru https://directadvert.ru http://tg.directadvert.ru http://directadvert.ru *.directadvert.ru  https://*.directadvert.ru http://*.directadvert.ru  *.facebook.com https://*.facebook.com *.facebook.net *.tynt.com *.yandex.net https://site.yandex.net https://yastatic.net yastatic.net an.yandex.ru awaps.yandex.ru vk.com https://vk.com mc.yandex.ru clck.yandex.ru yandex.st https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com *.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net
object-src 'self' https://*.googleapis.com www.youtube.com https://www.youtube.com *.gstatic.com
frame-src 'self' *.facebook.com https://*.facebook.com yastatic.net awaps.yandex.ru vk.com https://vk.com https://login.vk.com yandex.st www.youtube.com https://www.youtube.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com *.google.com mc.yandex.ru www.youtube.com
connect-src 'self' mc.yandex.ru www.google-analytics.com ytimg.com https://ytimg.com *.ytimg.com https://*.ytimg.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.chatio-static.com https://*.livechatinc.com https://ajax.googleapis.com *.chat.io
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.chat.io
connect-src 'self' https://maps.googleapis.com https://kdorapi.kdor.org *.chat.io
font-src 'self' fonts.googleapis.com fonts.gstatic.com data:
img-src 'self' https://www.google-analytics.com https://maps.google.com https://*.livechatinc.com *.chat.io
child-src 'self' https://www.google-analytics.com https://maps.google.com *.chat.io
"script-src 'self' *.harbortest.com *.harborfreight.com c.lytics.io api.lytics.io tracker.marinsm.com cdns.brsrvr.com www.google-analytics.com *.adobetag.com ea.harbortest.com:9143 assets.moovweb.net *.gstatic.com cdn.tt.omtrdc.net harborfreight.tt.omtrdc.net ea.harborfreight.com:9143 px.owneriq.net *.res-x.com seal.verisign.com *.google.com *.igodigital.com *.akamaihd.net *.googleadservices.com *.google-analytics.com *.g.doubleclick.net *.powerreviews.com *.demdex.net *.mouseflow.com *.fastly.net *.sitelabweb.com mpsnare.iesnare.com *.googleapis.com *.payeezy.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net *.nmgassets.com *.turnto.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' *.harbortest.com *.harborfreight.com *.powerreviews.com *.moovweb.net *.googleapis.com *.akamaihd.net *.turnto.com 'unsafe-inline'
img-src 'self' blob: data: *.harborfreight22.com *.harbortest.com *.harborfreight.com p.brsrvr.com *.akamaihd.net akamai.mathtag.com *.edgecastcdn.net *.www.turnto.com *.youtube.com *.ytimg.com *.vimeocdn.com px.owneriq.net *.g.doubleclick.net www.google-analytics.com *.ggpht.com *.google.com images.scanalert.com *.powerreviews.com *.facebook.com scontent.xx.fbcdn.net ssl.gstatic.com *.sitelabweb.com *.igodigital.com *.cloudinary.com *.moovweb.net *.googleapis.com *.abmr.net *.gstatic.com *.nr-data.net *.norton.com *.nmgplatform.com *.marinsm.com c.lytics.io cdn.ywxi.net
connect-src 'self' *.harbortest.com *.harborfreight.com www.facebook.com *.nmgplatform.com *.powerreviews.com *.demdex.net *.sitelabweb.com *.nr-data.net *.akamaihd.net *.cloudinary.com *.google-analytics.com *.mouseflow.com *.doubleclick.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.lpages.co/ https://*.doubleclick.net https://api.myjson.com https://translate.googleapis.com https://static.ads-twitter.com https://analytics.twitter.com https://cdn.syndication.twimg.com https://*.zopim.com https://cdn.jsdelivr.net https://*.hotjar.com https://localhost:* wss://localhost:* https://js.center.io https://my.leadpages.net https://cdn.mxpnl.com https://*.google-analytics.com https://*.optimizely.com https://*.bootstrapcdn.com https://*.jquery.com https://*.sharethis.com https://*.haikudeck.com https://*.newrelic.com https://connect.facebook.net https://www.googleadservices.com https://assets.pinterest.com https://*.nr-data.net https://checkout.stripe.com https://js.stripe.com/v2/ https://platform.twitter.com  https://*.surveymonkey.com https://*.googleapis.com https://static.accountdock.com https://*.accountdock.com https://*.cloudfront.net https://*.intercom.io https://*.intercomcdn.com https://tagmanager.google.com https://www.googletagmanager.com https://*.ytimg.com https://cdnjs.cloudflare.com https://*.google.com
frame-src 'self'  https://*.hotjar.com https://*.doubleclick.net https://syndication.twitter.com https://js.center.io https://*.google.com https://twitter.com https://facebook.com https://linkedin.com https://www.haikudeck.com https://*.vimeo.com https://*.parse.com https://*.sharethis.com https://*.filepicker.io https://googleads.g.doubleclick.net https://checkout.stripe.com https://js.stripe.com/v2/ https://twitter.com https://facebook.com https://linkedin.com https://platform.twitter.com https://*.facebook.com https://*.surveymonkey.com https://*.amazonaws.com https://static.accountdock.com https://*.accountdock.com https://accountdock.com https://www.googletagmanager.com https://*.youtube.com  https://surveymonkey.com https://*.cloudfront.net
font-src 'self' data: https://api.myjson.com https://static.accountdock.com https://*.accountdock.com https://*
connect-src 'self' https://l.sharethis.com https://api.leadpages.io https://api.myjson.com https://translate.googleapis.com wss://*.hotjar.com https://*.hotjar.com wss://*.zopim.com https://*.zopim.com https://localhost:* wss://localhost:* https://*.haikudeck.com:* https://*.mixpanel.com https://*.optimizely.com https://*.nr-data.net wss://*.haikudeck.com:* https://*.profitwell.com wss://*.intercom.io https://*.intercom.io http://*.haikudeck.com https://*.stripe.com https://*.cloudfront.net
style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://platform.twitter.com https://static.accountdock.com https://*.accountdock.com https://*.cloudflare.com https://fonts.googleapis.com https://*.bootstrapcdn.com https://*.sharethis.com https://checkout.stripe.com https://js.stripe.com/v2/ https://*.google.com https://*.cloudfront.net
\t\tstyle-src 'self' 'unsafe-inline' https: fonts.googleapis.com
\t\tfont-src 'self' https: fonts.googleapis.com themes.googleusercontent.com
"default-src 'self' https://google.com https://youtube.com https://facebook.com https://fonts.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://www.googletagmanager.com https://www.googleadservices.com https://call.chatra.io https://themes.googleusercontent.com https://techmagic-website.s3.eu-central-1.amazonaws.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https: data:
"script-src 'self'  https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://cdn.exoticads.com https://js-agent.newrelic.com https://ssl.p.jwpcdn.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://bam.nr-data.net https://chaturbateapps.disqus.com https://*.disquscdn.com https://disqus.com https://static.hotjar.com https://script.hotjar.com
style-src 'self' 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com fonts.googleapis.com https://*.disquscdn.com
img-src 'self' data: https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://public.chaturbate.com https://cbpv.chaturbate.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://ssl.p.jwpcdn.com https://jwpltx.com https://cdnjs.cloudflare.com https://www.gstatic.com https://bam.nr-data.net https://*.disquscdn.com https://links.services.disqus.com https://referrer.disqus.com https://insights.hotjar.com https://static.hotjar.com
font-src 'self' data: https://*.highwebmedia.com https://ssl.p.jwpcdn.com https://cdnjs.cloudflare.com fonts.gstatic.com https://static.hotjar.com
connect-src 'self' https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://bam.nr-data.net https://*.chaturbate.com https://chaturbate.com wss://recommend.chaturbate.com:8443 https://www.google-analytics.com https://links.services.disqus.com https://sentry.io https://cbvideoupload.s3-accelerate.amazonaws.com https://public.chaturbate.com https://cbpv.chaturbate.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://*.hotjar.com:* wss://*.hotjar.com
media-src 'self' https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://public.chaturbate.com https://cbpv.chaturbate.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com
object-src 'self' https://*.highwebmedia.com https://download.macromedia.com https://public.chaturbate.com https://cbpv.chaturbate.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com
frame-src 'self' https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://disqus.com https://vars.hotjar.com
child-src 'self' blob: blob https://vars.hotjar.com
worker-src 'self' blob: blob https://vars.hotjar.com
form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://www.coinpayments.net https://wnu.com
default-src 'self' 'unsafe-inline' 'unsafe-eval' *
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *
"child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com www.theweedtube.com emb.d.tube player.twitch.tv www.twitch.tv
connect-src 'self' smoke.io rpc.smoke.io wss://rpc.smoke.io https://rpc.smoke.io pubrpc.smoke.io
default-src 'self' www.youtube.com staticxx.facebook.com player.vimeo.com
script-src 'self' www.google-analytics.com connect.facebook.net assets.mantisadnetwork.com mantodea.mantisadnetwork.com 'sha256-9mdcjgzqoxb6/d816rvlgjt14oumkzptgcfncczfl5k=' secure.quantserve.com rules.quantcount.com
"script-src * 'self' 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' *.skandia.se *.skandiatest.se *.google.com *.cloudfront.net *.google.se *.googleadservices.com *.youtube.com *.google *.msse.se *.creo.se *.cision.com *.d1.sc.omtrdc.net *.gstatic.com *.doubleclick.net *.episerver.net 'unsafe-inline' 'unsafe-eval' data:"
img-src 'self' shield.sitelock.com stats.g.doubleclick.net www.google-analytics.com www.google.com www.googletagmanager.com cdn.ckeditor.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.google-analytics.com www.googletagmanager.com cdn.ckeditor.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.ckeditor.com hello.myfonts.net
"default-src 'self' 'unsafe-inline' *.wistia.dev *.wistia.net embedwistia-a.akamaihd.net/ *.litix.io data: blob:
script-src * 'unsafe-inline' 'unsafe-eval' data: blob:
"script-src * 'self' 'unsafe-inline' 'unsafe-eval'
"connect-src 'self' https://api.github.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com
script-src 'self' *.wazuh.com *.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https: 'unsafe-inline'
img-src 'self' *.wazuh.com *.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru  *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net vk.com *.vk.com orelireshka-tv.disqus.com *.disqus.com *.disquscdn.com staticxx.facebook.com
frame-src 'self' *.youtube.com assets.zendesk.com *.facebook.com vk.com *.vk.com orelireshka-tv.disqus.com disqus.com *.disqus.com s-static.ak.facebook.com staticxx.facebook.com tautt.zendesk.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.polyfill.io/v2/polyfill.min.js https://unpkg.com/css-vars-ponyfill@1 https://use.fontawesome.com/releases/ https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/api2/ https://analytics.accudio.com/ https://platform.twitter.com/ https://connect.facebook.net/ https://cdn.syndication.twimg.com/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://platform.twitter.com/css/ https://ton.twimg.com/
img-src 'self' data: https://analytics.accudio.com/ https://www.facebook.com/ https://syndication.twitter.com/ https://abs.twimg.com/ https://pbs.twimg.com/ https://platform.twitter.com/ https://ton.twimg.com/
frame-src 'self' https://www.google.com/ https://analytics.accudio.com/ https://platform.twitter.com/ http://staticxx.facebook.com/ https://www.facebook.com/ https://syndication.twitter.com/ https://web.facebook.com/
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-ezot1lvvch24xtlab5sjma==' yastatic.net betastatic.yandex.net mc.yandex.ru api-maps.yandex.ru suggest-maps.yandex.ru https://*.maps.yandex.net
style-src 'self' 'unsafe-inline' yastatic.net betastatic.yandex.net mc.yandex.ru blob: fonts.googleapis.com
font-src 'self' yastatic.net betastatic.yandex.net data: fonts.gstatic.com
img-src 'self' data: blob: avatars.yandex.net mc.yandex.ru mc.yandex.com yastatic.net avatars.mds.yandex.net avatars.mdst.yandex.net *.cdn.yandex.net api-maps.yandex.ru *.maps.yandex.net static-maps.yandex.ru yandex.ru *.captcha.yandex.net betastatic.yandex.net storage-int.mds.yandex.net
frame-src 'self' forms.yandex.ru forms.yandex.com forms.yandex.kz
"frame-ancestors 'self' http://webvisor.com https://webvisor.com http://agrobazar.ru https://agrobazar.ru"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' api.salemove.com api.salemove.eu ui.customsearch.ai analytics.twitter.com assets.adobedtm.com connect.facebook.net static.ads-twitter.com www.googleadservices.com maps.googleapis.com cdn.tt.omtrdc.net absa.tt.omtrdc.net www.google.com www.gstatic.com analytics.analytics-egain.com abdemo.egain.cloud absablog-dev.disqus.com absablog-sit.disqus.com absablog-uat.disqus.com absablog-prod.disqus.com ajax.googleapis.com platform.twitter.com platform.linkedin.com assets.pinterest.com c.disquscdn.com disqus.com secure.rating-widget.com log.pinterest.com rating-widget.com s.ytimg.com www.youtube.com youtube.com esb.ext.api.uat.absa.co.za client.crisp.chat googleads.g.doubleclick.net www.google.co.za www.google.pl dsp-aud.eskimi.com dsp.eskimi.com dsp-pix.eskimi.com dsp-media.eskimi.com cdn.syndication.twimg.com cse.google.com api-iam.intercom.io api.salemove.eu app.salemove.eu asset-proxy.salemove.eu assets.salemove.eu chunderw-gll.twilio.com chunderw-vpc-gll.twilio.com client-logger.salemove.eu eventgw.twilio.com fonts.googleapis.com fonts.gstatic.com io.salemove.eu js.intercomcdn.com kluster.ws.salemove.eu libs.salemove.com maps.googleapis.com maps.gstatic.com media.twiliocdn.com nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io s3-eu-west-1.amazonaws.com s3.amazonaws.com uplot.salemove.eu widget.intercom.io googletagmanager.com www.googletagmanager.com js-agent.newrelic.com bam.nr-data.net c.la1-c2cs-frf.salesforceliveagent.com d.la1-c2cs-frf.salesforceliveagent.com c.la1-c2-par.salesforceliveagent.com d.la1-c2-par.salesforceliveagent.com fls.doubleclick.net tt.mbww.com pixel.mathtag.com"
"default-src http: data: wss: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' data: *.halkbank.com.tr *.doubleclick.net t.co *.facebook.com *.facebook.com.tr *.gstatic.com *.google.com *.google.com.tr *.googleapis.com *.google-analytics.com *.googletagmanager.com
style-src 'self' 'unsafe-inline' *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.creative-serving.com *.ads-twitter.com *.twitter.com
"default-src 'self' lsbio.com *.lsbio.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://devlsbio-7d62.kxcdn.com https://lsbio-7d62.kxcdn.com *.lifespan.internal https://*.bing.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.crazyegg.com https://*.googleadservices.com https://*.gstatic.com api.ipify.org https://dnn506yrbagrg.cloudfront.net 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' *.google-analytics.com *.google.com *.facebook.net *.facebook.com *.youtube.com wantwincash.com luxusphere.com *.zopim.com
script-src 'unsafe-inline' 'self' 'unsafe-eval' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.facebook.com *.datatables.net *.jquery.com certify.gpwa.org luxusphere.com *.zopim.com
style-src 'unsafe-inline' 'self' *.google-analytics.com *.googleapis.com *.facebook.net *.datatables.net *.zopim.com
font-src 'unsafe-inline' 'self' data: *.google-analytics.com *.gstatic.com *.facebook.net *.facebook.com *.zopim.com
connect-src 'unsafe-inline' 'self' *.facebook.com wss://*.zopim.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *
"default-src https: data: 'unsafe-eval' 'unsafe-inline'
"style-src 'unsafe-inline' *.bsr.de *.fonts.net *.doubleclick.net
script-src 'self' data: https: 'unsafe-inline' 'unsafe-eval'
img-src 'self' blob: data: https: http://www.cpc.ncep.noaa.gov/
style-src 'self' data: https: http://nyskiblog.com/ http://fonts.googleapis.com/ http://morriscountyhandwash.com/ 'unsafe-inline'
frame-src 'self' https://www.youtube.com/ https: http://forum.nyskiblog.com/
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https: https://kendobrands.com
font-src 'self' data: https: https://kendobrands.com
img-src 'self' data: https: https://kendobrands.com
"frame-ancestors 'self' https://*.ariba.com https://*.micron.com https://*.iu.edu https://*.sciquest.com"
script-src 'unsafe-eval' 'sha256-kfzgnz2gxcduxead81jnvitrp/fqvot2webraw4/hv8=' 'sha256-catvnm05ia3xqblj+5e4v7vbcqzcjguizc+rtfh0zro=' 'sha256-svkx08+sqomnwhiysyk3xc7rdugkyakmbxv2gwts4fo=' 'sha256-mfxkrfkqvffo+qpdjgrp03rkj+wge20rhveaslch2am=' 'sha256-497az2urb6rfzoi9l9geluuf79ufxthagl9a9sm/de0=' 'sha256-p16sxlbepkxru+3u1twsdzy7jqz4o3m/ddzo2nabjls=' 'sha256-j5+fu+cli6torrmyreq1xffit5wv1i4yp9fzhd2dzpc=' *
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:"
"default-src 'self' *.bootstrapcdn.com *.gstatic.com *.addthis.com www.youtube.com
"default-src http: https: data: 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://maps.gstatic.com https://*.mypurecloud.ie https://*.cloudfront.net https://fjellinjen.nanorep.co"
connect-src 'self' kamino.ons.io kamino-staging.ons.io kamino-development.ons.io wss://kamino-push.ons.io wss://kamino-push-staging.ons.io wss://kamino-push-development.ons.io kamino-push.ons.io kamino-push-staging.ons.io kamino-push-development.ons.io *.mijnio.nl *.ons-sessies.nl *.ons-notificaties.nl
font-src 'self' data: *.mijnio.nl fonts.gstatic.com
img-src 'self' data: *.mijnio.nl *.ons-notificaties.nl iome.s3.amazonaws.com iome-development-stage.s3.amazonaws.com *.carenzorgt.nl caren.s3.amazonaws.com d1yim1i5ghw5xv.cloudfront.net *.ioservice.net cloud.githubusercontent.com kamino.ons.io kamino-staging.ons.io kamino-development.ons.io herald-development.s3.amazonaws.com herald-staging.s3.amazonaws.com herald-production.s3.amazonaws.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' kamino.ons.io kamino-staging.ons.io kamino-development.ons.io kamino-push.ons.io kamino-push-staging.ons.io kamino-push-development.ons.io ajax.googleapis.com *.newrelic.com bam.nr-data.net
style-src 'self' 'unsafe-inline' kamino.ons.io kamino-staging.ons.io kamino-development.ons.io fonts.googleapis.com use.typekit.net
"frame-ancestors 'self' http://www.roedl.de/ http://www.roedl.com/ https://www.roedl.de/ https://www.roedl.com/ https://test-sp.roedl.com/ https://test-sp.roedl.de/ http://archive.erikdreyer.de/  http://www.roedl.de:10006/ https://www.roedl.de:10006/
style-src * 'self' 'unsafe-inline' data: https:"
"default-src 'self' *.googleapis.com *.twitter.com *.twimg.com tags.tiqcdn.com tags-eu.tiqcdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.gstatic.com *.google.com *.googleapis.com *.liveperson.net telekomkarriere01.wt-eu02.net geid.wbtrk.net cdn.wbtrk.net cdn.cbtrk.net *.twitter.com *.twimg.com tags.tiqcdn.com tags-eu.tiqcdn.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.twitter.com *.twimg.com
"frame-ancestors https://ww2.coolmathgames.com https://www.coolmathgames.com http://www.coolmath-games.com https://www.coolmath-games.com"
"script-src 'strict-dynamic' 'nonce-3eewcynsgfo94btfnfxjxa==' 'unsafe-inline' 'unsafe-eval' https: http:
"default-src 'self' blendr.com eu1.blendr.com us1.blendr.com *.blendr.com *.eu1.blendr.com *.us1.blendr.com badoocdn.com *.badoocdn.com  *.badoo.com *.api.here.com *.paypal.com pagead2.googlesyndication.com api.giphy.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' badoocdn.com *.badoocdn.com *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.api.here.com *.instagram.com *.digicert.com pagead2.googlesyndication.com
style-src 'self' 'unsafe-inline' badoocdn.com *.badoocdn.com vk.com *.vk.me *.googleapis.com
font-src 'self' data: badoocdn.com *.badoocdn.com fonts.googleapis.com fonts.gstatic.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stripe.com *.xing-share.com *.xing.com *.hotjar.com *.optmnstr.com *.youtube.com s.ytimg.com *.syncfusion.com  *.google.com maps.googleapis.com ajax.googleapis.com www.gstatic.com *.googletagmanager.com cdnjs.cloudflare.com www.googleadservices.com connect.facebook.net use.typekit.net *.google-analytics.com googleads.g.doubleclick.net cdn.swaychat.com serve.albacross.com api.swayio.com *.firebaseio.com verify.authorize.net smarticon.geotrust.com cdn.rawgit.com *.addthis.com m.addthisedge.com
style-src  'self' 'unsafe-inline'   *.xing-share.com *.xing.com *.syncfusion.com cdn.swaychat.com *.google.com *.googleapis.com cdn.rawgit.com
frame-src cdn.swaychat.com *.stripe.com *.facebook.com  *.xing-share.com *.xing.com *.hotjar.com *.optmnstr.com *.firebaseio.com *.syncfusion.com bid.g.doubleclick.net *.addthis.com www.youtube.com api.swayio.com *.google.com www.gstatic.com"
"default-src 'self' 'unsafe-inline' https://*.cloudfront.net https://*.etracker.com https://*.etracker.de https://trustbadge.api.etrusted.com https://graph.facebook.com https://chat-eu.freshdesk.com wss://chat-eu.freshdesk.com https://www.google-analytics.com wss://ws-eu.pusher.com/ https://api.trustedshops.com https://shops-si.trustedshops.com https://widgets.trustedshops.com
style-src 'self' 'unsafe-inline' https://*.cloudfront.net https://*.etracker.com https://*.etracker.de https://fonts.googleapis.com https://fonts.gstatic.com https://widgets.trustedshops.com https://api.wirecard.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.awin1.com https://www.dwin1.com https://server.adform.net https://*.cloudfront.net https://*.etracker.com https://*.etracker.de https://connect.facebook.net https://chat-eu.freshdesk.com https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.pusher.com https://trck.spoteffects.net https://widgets.trustedshops.com https://api.wirecard.com
img-src 'self' 'unsafe-inline' data: https://www.awin1.com https://*.cloudfront.net https://stats.g.doubleclick.net https://*.etracker.com https://*.etracker.de https://www.facebook.com https://www.google.com https://www.google.de https://www.google-analytics.com https://csi.gstatic.com https://trck.spoteffects.net
font-src 'self' data: https://*.etracker.com https://*.etracker.de https://fonts.gstatic.com https://widgets.trustedshops.com
child-src 'self' https://server.adform.net https://*.etracker.com https://*.etracker.de https://staticxx.facebook.com https://trck.spoteffects.net https://api.wirecard.com https://www.youtube.com https://www.youtube-nocookie.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.canadianwebhosting.com *.idig.net js.driftt.com www.google.com *.google-analytics.com www.gstatic.com connect.facebook.net analytics.twitter.com static.ads-twitter.com *.nativeads.com cdn.optimizely.com rum-static.pingdom.net js.hs-analytics.net static-rtb.adkernel.com s.yimg.com sp.analytics.yahoo.com snap.licdn.com px.ads.linkedin.com
style-src 'self' 'unsafe-inline' *.canadianwebhosting.com *.fontawesome.com fonts.googleapis.com www.gstatic.com
img-src 'self' data: *.canadianwebhosting.com *.idig.net www.gstatic.com *.google-analytics.com seal-mbc.bbb.org t.co www.facebook.com *.adkernel.com ib.adnxs.com
frame-src 'self' js.driftt.com static-rtb.adkernel.com www.google.com www.youtube.com"
"script-src 'report-sample' 'nonce-ufpdmpaayh0pz2gqpoxwpg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' https://apis.google.com
style-src 'self' https://fonts.googleapis.com https://feedback.googleusercontent.com https://www.gstatic.com 'unsafe-inline'
connect-src 'self' wss://*.firebaseio.com https://*.firebaseio.com https://hashcode-judge.appspot.com
frame-src 'self' https://accounts.google.com/ https://*.firebaseio.com https://feedback.googleusercontent.com http://www.google.com https://hashcode-judge.appspot.com"
"default-src 'self' https://www.govt.nz https://*.cwp.govt.nz https://*.google-analytics.com http://*.google-analytics.com
style-src https://www.govt.nz https://*.cwp.govt.nz https://*.gstatic.com 'unsafe-inline' https://api.addressfinder.io https://tagmanager.google.com https://optimize.google.com
script-src https://www.govt.nz https://*.cwp.govt.nz https://*.gstatic.com 'unsafe-eval' 'unsafe-inline' https://api.addressfinder.io https://www.googletagmanager.com https://fonts.googleapis.com https://*.google-analytics.com http://*.google-analytics.com http://tagmanager.google.com https://optimize.google.com http://*.hotjar.com https://*.hotjar.com 'unsafe-eval'
img-src https://www.govt.nz https://*.cwp.govt.nz https://*.google-analytics.com http://*.google-analytics.com https://optimize.google.com http://*.hotjar.com https://*.hotjar.com
font-src https://www.govt.nz https://*.cwp.govt.nz https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com
frame-src https://www.govt.nz https://*.cwp.govt.nz https://*.youtube-nocookie.com https://*.youtube.com https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com
child-src https://www.govt.nz https://*.cwp.govt.nz https://*.youtube-nocookie.com https://*.youtube.com  https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com
connect-src https://www.govt.nz https://*.cwp.govt.nz https://api.addressfinder.io http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com
"default-src 'self' blob: data:  *.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com *.tile.openstreetmap.org *.freenode.net *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org 'unsafe-inline' 'unsafe-eval'"
frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com/calendar
child-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com/calendar
style-src 'self' data: http: https: 'unsafe-inline'
script-src 'self' data: http: https: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  eval *.google.com *.googleapis.com *.yandex.ua ymetrica1.com *.yandex.fr ymetrica.com mc.webvisor.org *.googleapis.com  yastatic.net yandex.st *.yandex.ru *.mail.ru *.api.twitter.com *.facebook.net vk.com *.yandex.net *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.googlesyndication.com *.googletagmanager.com googletagmanager.com vk.com yandex.ru *.googlesyndication.com apis.google.com *.gstatic.com login.vk.com graph.facebook.com urls.api.twitter.com *.twitter.com *.odnoklassniki.ru ok.ru *.facebook.com *.instagram.com phdt.ru i9d.ru *.ampproject.org metrika-informer.com
font-src 'self' *.gstatic.com *.googleapis.com *.bootstrapcdn.com data:
frame-src 'self' phdt.ru f.1nawda.com mc.webvisor.org *.webvisor.org *.yandex.ru ymetrica1.com yastatic.net *.yandexadexchange.net yandexadexchange.net *.instagram.com *.youtube.com *.youtube.com *.g.doubleclick.net *.google.com metrika-informer.com
img-src 'self' mc.yandex.ru *.yandex.ru *.yandex.ua *.yandex.fr *.webvisor.org mc.webvisor.org *.yadro.ru *.ytimg.com http://*.ytimg.com  *.yandex.net *.mail.ru *.1nawda.com *.youtube.com data:
script-src 'self' https://ajax.aspnetcdn.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://*.bambora.com https://*.googleapis.com http://*.googlesyndication.com http://www.googletagservices.com https://www.google-analytics.com https://*.google.ca https://*.google.com https://*.doubleclick.net
frame-src 'self' https://connect.facebook.net https://*.bambora.com https://www.youtube.com
font-src 'self' data: blob: https://*.gstatic.com https://*.googleusercontent.com
"script-src 'self' 'unsafe-inline' script.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/ maps.googleapis.com 'unsafe-eval' translate.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com platform.instagram.com/en_us/embeds.js www.instagram.com/embed.js platform.twitter.com/widgets.js platform.twitter.com/js/ cdn.syndication.twimg.com/tweets.json connect.facebook.net www.facebook.com 'sha256-mnyiwrivzdv4crjparu0pw6f3lmnpqf08t9f7+ducz8=' 'sha256-fiadhpxewyqdiemxxifqtfiep1hzgqytjwlz7jvg0i0=' 'nonce-ndnknte5njytowy5ms00odixlwi4nmqtnzc5nji2mtiwmgzk'
style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com platform.twitter.com/css/
img-src 'self' trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/c s3.amazonaws.com/trk.cetrk.com/s gtrk.s3.amazonaws.com s3-eu-west-1.amazonaws.com/congestion-cameras images.ctfassets.net images.contentful.com translate.google.com translate.googleapis.com www.google.com *.googleapis.com *.ggpht.com *.gstatic.com www.google-analytics.com stats.g.doubleclick.net syndication.twitter.com/i/jot syndication.twitter.com/i/jot/syndication pbs.twimg.com/media/ pbs.twimg.com/profile_images/ abs.twimg.com/emoji/ platform.twitter.com/css/ congestion-cameras.s3.amazonaws.com data: https://www.facebook.com/tr/ s3-eu-west-1.amazonaws.com
frame-src www.googletagmanager.com www.google.com/maps/embed www.youtube.com www.facebook.com/plugins/post.php www.instagram.com/p/ platform.twitter.com www.manchestereveningnews.co.uk
"frame-ancestors 'self' agentportalui-wa-dev-usw.azurewebsites.net agentportalui-wa-qa-usw.azurewebsites.net elcidsales.latitudeguestservices.com"
"default-src * 'unsafe-inline' 'unsafe-eval' data:"
script-src 'unsafe-inline' 'unsafe-eval' https://interlink.ru *.google-analytics.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/994556065/ *.googleadservices.com *.googletagmanager.com https://tagmanager.google.com https://mc.yandex.ru https://api-maps.yandex.ru https://suggest-maps.yandex.ru https://site.yandex.net https://yandex.ru https://yastatic.net *.cnetcontent.com https://cdn.cnetcontent.com/jsc/h.js https://sitesearch-suggest.yandex.ru
style-src 'unsafe-inline' https://interlink.ru *.cnetcontent.com https://tagmanager.google.com *.googleapis.com https://yandex.ru https://api-maps.yandex.ru  https://suggest-maps.yandex.ru https://yastatic.net
style-src 'self' 'unsafe-inline' https://www.comparemymove.com *.fontawesome.com *.bootstrapcdn.com *.myfonts.net *.googleapis.com *.google.com *.gstatic.com *.tawk.to *.jsdelivr.net use.typekit.net cdn-images.mailchimp.com cdnjs.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.comparemymove.com https://js.hs-scripts.com https://js.hs-analytics.net https://www.youtube.com/iframe_api *.ytimg.com *.google-analytics.com *.googletagmanager.com *.google.com *.adroll.com connect.facebook.net *.bootstrapcdn.com *.trustpilot.com *.googleapis.com *.snapengage.com *.tawk.to *.jsdelivr.net *.currenciesdirect.com *.inspectlet.com *.hotjar.com *.kissmetrics.com *.bugsnag.com *.123contactform.com *.123formbuilder.com *.googleadservices.com *.bing.com *.google.com *.tableau.com *.trustwave.com use.typekit.net *.optmstr.com *.optmnstr.com comparemymove.us11.list-manage.com s3.amazonaws.com cdnjs.cloudflare.com code.jquery.com use.fontawesome.com browser-update.org js.squareup.com sjs.bizographics.com px.ads.linkedin.com www.linkedin.com secure.quantserve.com rules.quantcount.com app.leadsrx.com
font-src 'self' *.bootstrapcdn.com *.comparemymove.com *.gstatic.com *.tawk.to *.myfonts.net *.fontawesome.com use.typekit.net data:
frame-src 'self' *.facebook.com connect.facebook.net *.trustpilot.com *.snapengage.com *.tawk.to *.hotjar.com *.currenciesdirect.com *.googleadservices.com *.123contactform.com *.123formbuilder.com googleads.g.doubleclick.net *.google.com *.googletagmanager.com *.google.co.uk *.tableau.com *.echosign.com *.dwcdn.net *.youtube.com *.the-moving-home-warehouse.com https://mozbar.moz.com *.echosign.com pci-connect.squareup.com
connect-src 'self' app.leadsrx.com *.inspectlet.com *.hotjar.com *.kissmetrics.com *.google.com *.optmstr.com *.optmnstr.com *.mstrlytcs.com pci-connect.squareup.com *.tawk.to wss://*.tawk.to wss://*.inspectlet.com wss://*.hotjar.com *.facebook.com
"frame-ancestors http://www.vistaprint.it https://www.vistaprint.it http://vistaprint.it https://vistaprint.it
"default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *
"script-src 'self' *.githubusercontent.com *.github.com *.googleapis.com *.google.com *.google.com.br *.googletagmanager.com *.googleadservices.com *.doubleclick.net megacubo.tv *.megacubo.tv app.megacubo.net *.twitter.com *.api.twitter.com *.facebook.net *.facebook.com *.addthis.com *.addthisedge.com *.userreport.com *.youtube.com *.ytimg.com *.google-analytics.com *.lingotek.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' 'unsafe-inline' https://vk.com http://vk.com https://ajax.googleapis.com http://ajax.googleapis.com
frame-src 'self' https://vk.com http://vk.com https://*.doubleclick.net http://*.doubleclick.net https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com http://ajax.googleapis.com https://vk.com http://vk.com http://*.googlesyndication.com https://*.googlesyndication.com https://*.yandex.ru http://*.yandex.ru https://*.google.de http://*.google.de https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.google.com.ua http://*.google.com.ua https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net
img-src 'self' http://counter.yadro.ru https://counter.yadro.ru https://vk.com http://vk.com https://*.yandex.net http://*.yandex.net https://*.yandex.ru http://*.yandex.ru data: blob: filesystem:
"default-src https: data: 'unsafe-inline' 'unsafe-eval'
script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com"
"script-src 'self' 'unsafe-inline' www.google-analytics.com 'unsafe-eval' widget.surveymonkey.com ajax.googleapis.com tagmanager.google.com www.googletagmanager.com www.google.com www.gstatic.com e.infogr.am
"script-src 'unsafe-inline' 'unsafe-eval' www.santanderforintermediaries.co.uk ajax.googleapis.com ssl.google-analytics.com 2235688.fls.doubleclick.net cdn.mouseflow.com *.youtube.com *.ytimg.com
frame-src 'self' vk.com *.vk.com *.facebook.com *.am15.net *.dumedia.ru *.adriver.ru *.redhelper.ru *.yandex.ru https://onlineapproved.l-kredit.ru https://yandex.ru https://www.youtube.com https://api-maps.yandex.ru https://googleads.g.doubleclick.net https://www.google.ru https://www.google.com https://profile.madnet.ru https://utop.it https://secure.payonlinesystem.com https://form.kupivkredit.ru https://paylate.ru https://yastatic.net https://instansive.com https://s3.amazonaws.com *.msecnd.net *.veinteractive.com lightwidget.com https://rbnt.org s1.l-kredit.ru dis.eu.criteo.com static.criteo.net dpm.demdex.net mscom.demdex.net bid.g.doubleclick.net gum.criteo.com https://shopnetic.com https://posonline.kreditotdel.ru/widget/widget.php www.googletagmanager.com blob: mx:
child-src 'self' vk.com *.vk.com *.facebook.com *.am15.net *.dumedia.ru *.adriver.ru *.redhelper.ru https://www.youtube.com https://api-maps.yandex.ru https://googleads.g.doubleclick.net https://www.google.ru https://www.google.com https://profile.madnet.ru https://utop.it https://secure.payonlinesystem.com https://form.kupivkredit.ru https://paylate.ru https://yastatic.net https://instansive.com https://s3.amazonaws.com lightwidget.com www.googletagmanager.com blob: mx:
connect-src 'self' *.vk.com https://mc.yandex.ru https://www.google-analytics.com https://capture.trackjs.com https://yandex.ru https://cdnjs.cloudflare.com https://cdn.mecash.ru https://aprtx.com https://*.ntvk1.ru *.veinteractive.com dpm.demdex.net wss://webasr.yandex.net https://fcm.googleapis.com/ buyon.ru ampcid.google.com ampcid.google.ru ampcid.google.ee https://googleads.g.doubleclick.net
"default-src * data: blob: 'unsafe-inline' 'unsafe-eval' ws: wss:
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.verywellmind.com *.qa.aws.verywellmind.com atlas.verywellmind.com atlas.local.verywellmind.com https://specials.verywellmind.com"
img-src 'self' data: https://a1.moviepass.com https://movi.tmsimg.com https://www.googletagmanager.com https://shareasale.com https://tags.w55c.net https://app.jazz.co https://image.tmdb.org https://www.google-analytics.com https://www.facebook.com https://maps.gstatic.com https://maps.googleapis.com https://stats.g.doubleclick.net https://nexus.ensighten.com https://sc-static.net
script-src 'self' https://*.helpshift.com https://js.appboycdn.com https://sc-static.net https://ajax.googleapis.com https://app.jazz.co http://www.google-analytics.com https://assets.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://cdn.optimizely.com https://www.googletagmanager.com https://www.google-analytics.com https://fullstory.com https://rs.fullstory.com https://stats.g.doubleclick.net https://maps.googleapis.com https://stats.g.doubleclick.net https://cdnjs.cloudflare.com https://unpkg.com https://cdn.jsdelivr.net https://connect.facebook.net https://nexus.ensighten.com https://sc-static.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.googleapis.com
frame-src 'self' https://*.helpshift.com https://*.webchat.helpshift.com https://tr.snapchat.com https://mpaffiliate.go2cloud.org https://moviepassinc.applytojob.com https://www.facebook.com
connect-src https://mpcore-stg.herokuapp.com https://xjyg3xhiyb.execute-api.us-east-1.amazonaws.com https://click.moviepass.com https://*.braze.com https://js.appboycdn.com https://sc-static.net https://static.zdassets.com https://ekr.zdassets.com https://moviepass.zendesk.com https://api.themoviedb.org https://rs.fullstory.com https://registration-stg.herokuapp.com http://*.moviepass.com https://*.moviepass.com https://nexus.ensighten.com https://sc-static.net
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/  *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.g.doubleclick.net *.marketo.com *.marketo.net *.wistia.com *.sendsafely.com *.livechatinc.com *.instagram.com *.facebook.net sc-static.net *.mktoresp.com *.serving-sys.com snapwidget.com *.youtube.com *.ytimg.com *.licdn.com *.bizographics.com *.linkedin.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.marketo.com *.fontawesome.com
connect-src 'self' *.google-analytics.com *.googletagmanager.com *.googleapis.com *.marketo.com *.wistia.com *.akamaihd.net *.litix.io *.mktoresp.com *.facebook.net *.g.doubleclick.net
"script-src 'self' *.cloudflare.com *.rawgit.com  *.gstatic.com *.telerikstatic.com *.google.com *.syndication.twimg.com *.vimeocdn.com *.twitter.com *.googleapis.com *.jquery.com *.google-analytics.com *.aspnetcdn.com *.github.io 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://*.twitter.com https://*.twimg.com
img-src 'self' 'unsafe-inline' data: https://*.twitter.com https://*.twimg.com
style-src 'self' 'unsafe-inline' https://*.twitter.com https://*.twimg.com
child-src 'self' https://www.youtube-nocookie.com https://*.twitter.com https://cse.google.com https://cse.google.de
form-action 'self' https://*.formulastudent.de https://*.fs-g.org https://www.paypal.com
"default-src 'self' ssllabs.com *.ssllabs.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://stats.g.doubleclick.net https://www.google.com/ https://cdn.bizible.com https://serve.albacross.com https://collect.albacross.com https://tagmanager.google.com
script-src 'self' https://cdnjs.cloudflare.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://stats.g.doubleclick.net https://www.google.com/ https://cdn.bizible.com https://serve.albacross.com https://collect.albacross.com https://tagmanager.google.com 'sha256-b/es1vzmgjycvucvmmsj/qeqtv6gtfugctmkms0e0qk=' 'sha256-mihgzd5zyexjyzvdlchhjqonmefha7yqw4t+st69/fa='
"default-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' *.iliad.it osm.proxad.net"
"default-src 'self' data: *.jquery.com/ *.googletagmanager.com/ *.google-analytics.com/ *.gstatic.com/ *.googleapis.com/ *.google.com/ 'unsafe-eval' *.oct8ne.com/ 'unsafe-inline' *.cloudflare.com/ *.youtube.com/ *.gstatic.com/
img-src 'self' https://www.google.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/
form-action 'self' https://agilemail.createsend.com/ https://www.createsend.com/t/subscribeerror https://www.createsend.com/t/securedsubscribe
connect-src 'self' https://start.1password.com/ https://start.1password.ca/ https://start.1password.eu/ https://www.google-analytics.com/ https://9gnqx00du4.execute-api.us-east-1.amazonaws.com/prod/contact_us https://www.googleapis.com/ https://createsend.com/t/getsecuresubscribelink
"default-src 'self' *.cloudfront.net *.sheetmusicplus.com *.upsellit.com *.upsellit.turbobytes.net widget.trustpilot.com *.bronto.com *.facebook.com docs.google.com www.youtube.com bid.g.doubleclick.net t.pepperjamnetwork.com
script-src 'self' *.sheetmusicplus.com *.cloudfront.net *.visualwebsiteoptimizer.com *.upsellit.com *.upsellit.turbobytes.net *.pbbl.co widget.trustpilot.com *.bronto.com pippio.com pv-p.alcmpn.com static.traversedlp.com widget.privy.com optimize.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net sp.analytics.yahoo.com seal.digicert.com membrain.getsidecar.com js-agent.newrelic.com connect.facebook.net cdn.optimizely.com reporting.singlefeed.com bat.bing.com bam.nr-data.net ajax.googleapis.com request.eprotect.vantivcnp.com payments.vantivcnp.com assets.adobedtm.com request.eprotect.vantivpostlive.com cdn3.optimizely.com s.yimg.com flex.msn.com flex.atdmt.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' tagmanager.google.com optimize.google.com fonts.googleapis.com assets.privy.com *.cloudfront.net *.sheetmusicplus.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.sheetmusicplus.com *.cloudfront.net *.visualwebsiteoptimizer.com *.agkn.com *.upsellit.com *.upsellit.turbobytes.net www.googletagmanager.com optimize.google.com www.google.com www.google.com.hk *.pbbl.co www.emjcd.com *.facebook.com ssl.google-analytics.com www.google-analytics.com google-analytics.com ap.lijit.com io.narrative.io api.privy.com events.privy.com assets.privy.com privymktg.com *.bronto.com seal.digicert.com bat.bing.com googleads.g.doubleclick.net stats.g.doubleclick.net tracking.searchmarketing.com
connect-src 'self' *.sheetmusicplus.com *.visualwebsiteoptimizer.com widget.trustpilot.com api.traversedlp.com tri.privy.com api.privy.com events.privy.com *.bronto.com logx.optimizely.com a1281752415.cdn.optimizely.com *.doubleclick.net paypal.com *.paypal.com payments.vantivcnp.com freeshipping.com *.vantivpostlive.com themoneyconverter.com apilayer.net adn.16e4f.betacdn.net youtube.com browse-endpoint.brontops.com www.google.com www.google.com.hk www.facebook.com
media-src 'self' *.sheetmusicplus.com youtube.com *.cloudfront.net
font-src 'self' fonts.gstatic.com *.cloudfront.net data:
frame-src 'self' www.sheetmusicplus.com *.cdn.optimizely.com t.pepperjamnetwork.com www.youtube.com optimize.google.com docs.google.com email.sheetmusicplus.com staticxx.facebook.com www.facebook.com connect.facebook.net bid.g.doubleclick.net widget.trustpilot.com"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.verywellhealth.com *.qa.aws.verywellhealth.com atlas.verywellhealth.com atlas.local.verywellhealth.com https://specials.verywell.com"
connect-src 'self' https://cdn.coda.io wss://coda.io https://coda.io wss://*.intercom.io https://coda-us-west-2-prod-blobs.s3.us-west-2.amazonaws.com https://coda-us-west-2-prod-blobs-upload.s3-us-west-2.amazonaws.com https://*.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://iframe.ly https://cdn.iframe.ly https://api.rollbar.com https://baconipsum.com https://api.trello.com https://www.google-analytics.com https://rum-collector-2.pingdom.net
font-src data: https://cdn.coda.io https://js.intercomcdn.com https://fonts.gstatic.com https://fonts.googleapis.com
script-src 'strict-dynamic' 'nonce-b8b901f248f2487c9d97464517009852' 'unsafe-inline' 'unsafe-eval' https:
style-src 'self' 'unsafe-inline' blob: https://cdn.coda.io https://fonts.googleapis.com
"frame-ancestors 'self' https://www.dwgfastview.pl https://dwgfastview.pl https://szafy.tmsys.pl https://grupa.tmsys.pl"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' boomsethelp.zendesk.com track.hubspot.com www.google-analytics.com stats.g.doubleclick.net https://*.facebook.com http://*.facebook.com platform.twitter.com https://*.newrelic.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://*.google-analytics.com https://*.spreedly.com sentry.io syndication.twitter.com https://i.froala.com https://*.delighted.com wss://*.pusherapp.com https://*.google.com https://*.zdassets.com https://apiprod.fattlabs.com https://omni.fattmerchant.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.googleapis.com assets.zendesk.com cdn.ravenjs.com use.typekit.net ajax.aspnetcdn.com www.google-analytics.com js.hs-analytics.net api.usemessages.com js.hs-scripts.com platform.twitter.com platform.linkedin.com www.google.com connect.facebook.net www.linkedin.com https://*.newrelic.com ipinfo.io bam.nr-data.net https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://*.google-analytics.com https://*.spreedly.com https://*.typekit.net http://*.typekit.net https://*.cloudfront.net/ https://*.gstatic.com https://*.zdassets.com https://apis.google.com https://fattjs.fattpay.com https://apiprod.fattlabs.com https://omni.fattmerchant.com
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com s3.amazonaws.com https://*.spreedly.com netdna.bootstrapcdn.com ajax.googleapis.com https://*.newrelic.com
img-src 'self' data: https://* http://* blob:
font-src 'self' 'unsafe-inline' cdnjs.cloudflare.com s3.amazonaws.com netdna.bootstrapcdn.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io data: https://*.typekit.net http://*.typekit.net"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wayf.switch.ch https://www.switch.ch
img-src 'self' data: https://wayf.switch.ch http://munin.switch.ch https://www.switch.ch
"frame-ancestors www.comparasemplice.it www.sostariffe.it www.segugio.it tariffe.segugio.it enigaseluce.com
style-src https://fonts.googleapis.com/ destinyreddit.com 'unsafe-inline' 'self'
"default-src 'self' 'unsafe-inline' ajax.googleapis.com apikeys.civiccomputing.com www.googletagmanager.com www.google-analytics.com s3-eu-west-1.amazonaws.com/smartfeed.vacancy-filler.co.uk/ico/ app.vacancy-filler.co.uk webchat.gossinteractive.com www.youtube.com smartfeed.vacancy-filler.co.uk/ico/ www.youtube-nocookie.com/ player.vimeo.com/ www.vimeo.com/ webservices.data-8.co.uk/javascript/predictiveaddress.js www.google.com ga.vyond.com www.vyond.com www.goanimate.com www.datawrapper.de datawrapper.dwcdn.net"
"frame-ancestors 'self' *.tunegenie.com http://127.0.0.1:* https://127.0.0.1:*
child-src 'self' docs.google.com fast.wistia.net js.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com www.youtube.com intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com
connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-test-websocket-a.intercom.io nexus-test-websocket-b.intercom.io nexus-test-long-poller-a.intercom.io nexus-test-long-poller-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-test-websocket-a.intercom.io wss://nexus-test-websocket-b.intercom.io uploads.intercomcdn.com static.intercomassets.com *.tiles.mapbox.com api.amplitude.com app.getsentry.com sentry.io js.logentries.com api.giphy.com api.stripe.com heapanalytics.com meet.intercom.com www.google-analytics.com stats.g.doubleclick.net
script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com netdna.bootstrapcdn.com platform.twitter.com static.segment.com switchet.s3.amazonaws.com www.google-analytics.com run.pstmn.io cdn.heapanalytics.com heapanalytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com admin.typeform.com
style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com netdna.bootstrapcdn.com heapanalytics.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com
connect-src 'self' analytics.monkeytracker.cz *.getsmartlook.com *.smartlook.com *.google.com *.google.cz
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz www.googleadservices.com c.imedia.cz *.getsmartlook.com *.smartlook.com *.doubleclick.net
frame-src 'self' www.youtube.com http://calculator.csbeton.cz/ *.google.com *.doubleclick.net
child-src 'self' www.youtube.com http://calculator.csbeton.cz/ *.google.com *.doubleclick.net
img-src 'self' data: *.gstatic.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com www.google.cz c.imedia.cz
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com ajax.googleapis.com"
"default-src 'self' *.cwtvacationclub.com cwtvacationclub.com *.satovacations.com satovacations.com *.cwtsatotravel.com cwtsatotravel.com *.jbsatravel.com jbsatravel.com                  secure.latesttraveloffers.net secure.vacationport.net *.vacationport.net officedepot.cwtvacationclub.vacationport.net cs.cruisebase.com www.funjet.com issuu.com content.voyagerwebsites.com destinations.voyagerwebsites.com cdn.travmarket.com                  www.fly.faa.gov www.tsa.gov www.parkrideflyusa.com travel.state.gov www.xe.com usembassy.state.gov www.usembassy.gov www.worldtime.org www.cia.gov asta.files.cms-plus.com                  www.weather.gov www.whatsbusy.com whatsbusy.com www.cdc.gov wwwnc.cdc.gov *.ypsilon.net enwi.norrisdata.net www.cruiseportal.de app.tagibletravel.com stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' *.cwtsatotravel.com cwtsatotravel.com *.googleapis.com code.jquery.com *.amazonaws.com
img-src 'self' data: www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net app.tagibletravel.com *.staticflickr.com *.cdninstagram.com *.amazonaws.com *.carlsonwagonlit.com *.carlsonwagonlit.com
font-src 'self' data: fonts.gstatic.com *.ypsilon.net enwi.norrisdata.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.google-analytics.com www.googletagmanager.com app.tagibletravel.com                 *.googleapis.com code.jquery.com content.voyagerwebsites.com
connect-src 'self' stats.g.doubleclick.net app.tagibletravel.com content.voyagerwebsites.com
frame-src 'self' *.cwtvacationclub.com cwtvacationclub.com *.satovacations.com satovacations.com *.cwtsatotravel.com cwtsatotravel.com *.jbsatravel.com jbsatravel.com extranet.carlsonwagonlit.com cwt-me.cvent.com                  secure.latesttraveloffers.net secure.vacationport.net officedepot.cwtvacationclub.vacationport.net *.vacationport.net www.cruiseportal.de *.ypsilon.net cs.cruisebase.com www.funjet.com issuu.com *.booktandem.com enwi.norrisdata.net                  content.voyagerwebsites.com destinations.voyagerwebsites.com cdn.travmarket.com vcms.virtuoso.com                  www.google.com/recaptcha/ www.googletagmanager.com                 www.fly.faa.gov www.tsa.gov www.parkrideflyusa.com travel.state.gov www.xe.com usembassy.state.gov www.usembassy.gov www.worldtime.org www.cia.gov asta.files.cms-plus.com                  www.weather.gov www.whatsbusy.com whatsbusy.com www.cdc.gov wwwnc.cdc.gov"
"frame-ancestors 'self' https://printio.ru/ http://webvisor.com https://usercomebacker.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:
script-src 'unsafe-eval' 'unsafe-inline' *.skat.dk skat.dk *.ccta.dk *.readspeaker.com code.jquery.com  netdna.bootstrapcdn.com s.webtrends.com statse.webtrendslive.com cdnjs.cloudflare.com siteimproveanalytics.com ajax.aspnetcdn.com dawa.aws.dk map.krak.dk map.eniro.no maps.googleapis.com cdn.datatables.net content-b.vergic.com https://map.eniro.no https://map.krak.dk https://account.psplugin.com https://policy.cookieinformation.com https://policy.app.cookieinformation.com https://commsrv-b.vergic.com https://www.googleapis.com customer.cludo.com customer.cludo.com.cdn.cloudflare.net dmcqaqmkk1tj3.cloudfront.net https://ecefinesse.skat.dk https://p99eceweb.voip.nd.local https://www.gstatic.com d3js.org https://ssl.survey.webstatus.v2.userneeds.dk https://tjektolden.dk https://www.tjektolden.dk
style-src 'unsafe-inline'  *.skat.dk skat.dk *.ccta.dk *.googleapis.com *.readspeaker.com code.jquery.com  netdna.bootstrapcdn.com www.google.com cdnjs.cloudflare.com content-b.vergic.com customer.cludo.com customer.cludo.com.cdn.cloudflare.net https://p99eceweb.voip.nd.local https://www.gstatic.com https://tjektolden.dk https://www.tjektolden.dk cdn.datatables.net
img-src 'self' data: blob: *.skat.dk skat.dk http://skat.dk http://www.skat.dk *.readspeaker.com *.gstatic.com *.googleapis.com *.google.com *.cloudfront.net code.jquery.com  hm.webtrends.com statse.webtrendslive.com customer.cludo.com customer.cludo.com.cdn.cloudflare.net https://content.psplugin.com https://www.google.com https://www.googleapis.com *.ontame.io eur-lex.europa.eu https://ssl.survey.webstatus.v2.userneeds.dk cdn.datatables.net
font-src 'self' data: *.skat.dk skat.dk *.googleapis.com  fonts.gstatic.com netdna.bootstrapcdn.com content.psplugin.com
connect-src 'self' *.skat.dk skat.dk *.ccta.dk dawa.aws.dk api.hr-manager.net latana.se *.vergic.com api-eu1.cludo.com api.cludo.com https://account.psplugin.com https://consent.app.cookieinformation.com
frame-src 'self' skat.dk *.skat.dk http://skat.dk http://www.skat.dk *.ccta.dk *.readspeaker.com http://media.videotool.dk https://media.videotool.dk https://cse.google.com https://app-eu.readspeaker.com https://skatig.wilkeonline.com https://p99eceweb.voip.nd.local https://befordringsbot.skat.dk https://skatigtest.wilkeonline.com http://www.vurdering.skat.dk https://ssl.survey.webstatus.v2.userneeds.dk https://survey.euro.confirmit.com https://policy.app.cookieinformation.com
media-src 'self' blob: skat.dk *.skat.dk www.skat.dk https://skat.dk https://www.skat.dk *.readspeaker.com https://media.videotool.dk
img-src 'self' data: http: https: *.gravatar.com *.addthis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.google-analytics.com http: https: *.google.com *.addthis.com
style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com *.addthis.com
font-src 'self' data: http: https: fonts.googleapis.com themes.googleusercontent.com *.addthis.com
frame-src 'self' data: http: https: facebook.com *.addthis.com *.mailjet.com
connect-src 'self' data: http: https: *.addthis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.flashback.org
"script-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' static4.mybonuscenter.com static5.mybonuscenter.com static6.mybonuscenter.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com cts.tradepub.com hkmgyhf6.micpn.com api.survata.net apps.rokt.com roktcdn1.akamaized.net surveywall-api.survata.com api.trustedform.com create.leadid.com www.offerfwd.net www.clear-request.com
"default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'
script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'
style-src https: blob: data: 'unsafe-inline'
"default-src https: data: 'self' *.1gamepay.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' api.frankcasino.net frank-auth.com livestatisc.com echo.ecortb.com cdn.gs-arcadia.com cdn.st01-gs-arcadia.com *.playngonetwork.com *.curacao-egaming.com *.google-analytics.com  *.casinomodule.com *.onlinetechsupport24.com *.livestatisc.com *.jsdelivr.net track.adform.net *.aventonv.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.cloudflare.com *.playngonetwork.com
font-src data: 'self' fonts.gstatic.com cdn.gs-arcadia.com cdn.st01-gs-arcadia.com *.cloudflare.com
connect-src ws: wss: 'self' *.casinomodule.com *.onlinetechsupport24.com *.gs-arcadia.com *.st01-gs-arcadia.com *.playngonetwork.com
img-src 'self' data: *.mijnio.nl *.ons-notificaties.nl iome.s3.amazonaws.com iome-staging.s3.amazonaws.com iome-development-stage.s3.amazonaws.com *.carenzorgt.nl caren.s3.amazonaws.com d1yim1i5ghw5xv.cloudfront.net *.ioservice.net cloud.githubusercontent.com kamino.ons.io kamino-staging.ons.io kamino-development.ons.io herald-development.s3.amazonaws.com herald-staging.s3.amazonaws.com herald-production.s3.amazonaws.com client-story-d.s3.eu-central-1.amazonaws.com client-story-s.s3.eu-central-1.amazonaws.com client-story-p.s3.eu-central-1.amazonaws.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com
"script-src 'self' livechat.postergarden.com buttons-config.sharethis.com use.fontawesome.com platform-api.sharethis.com www.google-analytics.com google-analytics.com postergarden.com www.postergarden.com connect.facebook.net fast.fonts.com ajax.googleapis.com w.sharethis.com widget.trustpilot.com trustpilot.com ssl.google-analytics.com www.google-analytics.com ssl.livezilla.net t.sharethis.com 'unsafe-inline' 'unsafe-eval'
object-src livechat.postergarden.com buttons-config.sharethis.com use.font-awesome.com platform-api.sharethis.com www.google-analytics.com google-analytics.com postergaden.com www.postergarden.com connect.facebook.net fast.fonts.com ajax.googleapis.com w.sharethis.com widget.trustpilot.com trustpilot.com ssl.google-analytics.com www.google-analytics.com ssl.livezilla.net t.sharethis.com 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app-lon05.marketo.com/ http://munchkin.marketo.net https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://app-lon05.marketo.com/ https://fast.fonts.net https://fonts.googleapis.com
img-src 'self' data: *.doubleclick.net https://www.google-analytics.com *.gstatic.com https://maps.googleapis.com
frame-src 'self' *.auth0.com *.investis.com https://vismedia.agency/ https://app-lon05.marketo.com/ https://www.google.com https://www.youtube.com
script-src https: 'self' 'unsafe-inline' 'unsafe-eval'
default-src 'self' https: data: *.comodo.com *.comodo.net wss://ws1.hotjar.com wss://ws2.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com wss://ws5.hotjar.com wss://ws6.hotjar.com wss://ws7.hotjar.com https://insights.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://geoip.nekudo.com https://freegeoip.net https://secure.comodo.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://m.addthisedge.com https://m.addthis.com https://s7.addthis.com https://cdn3.optimizely.com https://cdn2.optimizely.com https://www.gstatic.com https://www.youtube.com https://cdn.ckeditor.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com cdn.ckeditor.com *.comodo.com *.comodo.net https://code.jquery.com https://googleads.g.doubleclick.net https://script.hotjar.com https://plugins.help.com https://www.google.com https://www.google.co.uk https://cdn.optimizely.com https://www.comodo.com https://www.google-analytics.com https://secure.leadforensics.com https://static.hotjar.com https://ajax.googleapis.com https://secure.comodo.com https://www.googleadservices.com https://s.ytimg.com
object-src 'self' *.comodo.com *.comodo.net https://download.comodo.com https://www.youtube.com https://theapplicantmanager.com
img-src 'self' data: https://www.facebook.com https://www.google.ro https://s9.addthis.com https://cdn.ckeditor.com https://www.google.co.uk https://www.google.co.in https://www.google.com *.comodo.com *.comodo.net https://secure.comodo.com https://download.comodo.com https://www.google-analytics.com https://stats.g.doubleclick.net
font-src 'self' data: secure.comodo.net *.comodo.com *.comodo.net https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.ckeditor.com https://secure.comodo.net *.comodo.com *.comodo.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://www.comodo.com
form-action 'self' *.comodo.com *.comodo.net https://www.hackerguardian.com
frame-src 'self' https://www.facebook.com https://staticxx.facebook.com https://secure.comodo.net https://secure.comodo.com https://edge.addthis.com https://www.google.com https://bid.g.doubleclick.net https://www.comodo.com https://www.comodo.net https://download.comodo.com https://plugins.help.com https://vars.hotjar.com https://www.youtube.com https://theapplicantmanager.com https://s7.addthis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://login.dognet.sk https://www.glami.pl https://factcool-com.performax.cz https://cdnjs.cloudflare.com https://www.glami.it https://www.glami.hu https://www.glami.cz https://www.glami.ro https://www.glami.it https://www.glami.cs https://www.glami.sk https://static.addtoany.com https://*.exponea.com https://www.google.hr https://www.google.si https://www.google.ro https://www.google.hu https://www.google.sk https://www.google.lv https://www.google.pl https://www.google.ba https://www.google.hr https://www.google.lt https://www.google.ee https://www.google.ru https://www.google.cz https://www.google.bg https://www.google.pl https://www.google.ua https://www.google.ba https://www.google.it https://www.google.rs https://www.google.fi https://www.google.ba https://connect.facebook.net https://factcool.cdn.platon.sk https://*.doubleclick.net https://track.adform.net https://*.facebook.com https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://c.imedia.cz https://mc.yandex.ru https://script.hotjar.com https://pixel.dmdi.pl
style-src 'self' 'unsafe-inline' https://startlogo.sk https://www.google.hr https://www.google.si https://www.google.ro https://www.google.hu https://www.google.sk https://www.google.lv https://www.google.pl https://www.google.ba https://www.google.hr https://www.google.lt https://www.google.ee https://www.google.ru https://www.google.cz https://www.google.bg https://www.google.pl https://www.google.ua https://www.google.ba https://www.google.it https://www.google.rs https://www.google.fi https://www.google.ba https://fonts.googleapis.com https://cdnjs.cloudflare.com https://*.exponea.com https://connect.facebook.net https://factcool.cdn.platon.sk https://maxcdn.bootstrapcdn.com https://*.doubleclick.net https://track.adform.net https://www.facebook.com https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://static.addtoany.com https://static.bezvasport.cz
connect-src 'self' https://stats.g.doubleclick.net https://*.exponea.com https://cdncache-a.akamaihd.net https://mc.yandex.ru https://*.google-analytics.com
form-action 'self' https://gate.gopay.cz https://www.facebook.com https://sk.factcoolltd.com/ https://cs.factcoolltd.com/ https://ro.factcoolltd.com/ https://rs.factcoolltd.com/ https://ba.factcoolltd.com/ https://hr.factcoolltd.com/ https://ee.factcoolltd.com/ https://de.factcoolltd.com/ https://hu.factcoolltd.com/ https://lt.factcoolltd.com/ https://lv.factcoolltd.com/ https://pl.factcoolltd.com/ https://ru.factcoolltd.com/ https://ua.factcoolltd.com/ https://bg.factcoolltd.com/ https://fi.factcoolltd.com/ https://it.factcoolltd.com/ https://si.factcoolltd.com/
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.medfusion.net https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com http://chart.apis.google.com https://*.olark.com https://stats.g.doubleclick.net https://www.ihealthinterview.com https://forms.greenwaymedical.com https://d2wy8f7a9ursnm.cloudfront.net https://code.highcharts.com https://maxcdn.bootstrapcdn.com https://disutgh7q0ncc.cloudfront.net/ https://wootric-eligibility.herokuapp.com/ https://production.wootric.com/ https://ad.linksynergy.com/fs-bin/show https://www.google.com/recaptcha/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.rawgit.com https://connect.facebook.net/en_us/sdk.js https://www.google.com https://www.gstatic.com
img-src 'self' data: blob: https://web.facebook.com https://map.autorouter.aero https://osm.autorouter.aero https://snapshots.openflightmaps.org https://www.facebook.com i.imgur.com
connect-src 'self' map.autorouter.aero maps.googleapis.com fonts.googleapis.com fonts.gstatic.com osm.autorouter.aero cdnjs.cloudflare.com cdn.rawgit.com www.google.com www.gstatic.com api.rollbar.com i.imgur.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vprtest.ru https://www.googletagmanager.com/ https://adservice.google.ru site.yandex.net yastatic.net vk.com userapi.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru yandex.net *.yandex.net
object-src 'self' https://vprtest.ru https://*.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru
style-src 'self' 'unsafe-inline' https://vprtest.ru *.googleapis.com https://yastatic.net http://*.gstatic.com https://fonts.googleapis.com https://*.gstatic.com google.com *.google.com
img-src * data: https://vprtest.ru https://*.2mdn.net https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com awaps.yandex.ru
frame-src 'self' https://*.yandexadexchange.net http://yandexadexchange.net http://www.youtube.com *.yandex.ru yandex.ru hse.ru https://vk.com https://*.vk.com https://www.youtube.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com http://*.googleadservices.com https://*.googleadservices.com https://*.googlesyndication.com *.vk.com vk.com
font-src 'self' data: https://vprtest.ru * https://*.googleapis.com https://*.gstatic.com
connect-src 'self' https://pagead2.googlesyndication.com https://vprtest.ru ria.ru dl.dropboxusercontent.com https://www.youtube.com *.googlevideo.com https://*.gstatic.com google-analytics.com *.google-analytics.com yandex.ru *.yandex.ru
"img-src 'self' samashmusic.com samash.com spotlight.samash.com used.samashmusic.com  samashcoupons.com fonts.googleapis.com www.google-analytics.com www.youtube.com hosted.where2getit.com e.issuu.com scontent-dfw5-1.cdninstagram.com seal.godaddy.com"
default-src * data: gap: blob: about: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' * data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/ui/1.12.1/jquery-ui.js https://code.jquery.com/jquery-1.12.4.js https://code.jquery.com/jquery-3.3.1.js https://maps.googleapis.com https://v2assets.zopim.io https://www.facebook.com https://stats.g.doubleclick.net http://v2.zopim.com https://v2.zopim.com https://connect.facebook.net https://www.google-analytics.com http://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://docs.google.com
style-src 'self' 'unsafe-inline' https://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css https://fonts.googleapis.com https://docs.google.com
font-src 'self' data: https://v2.zopim.com https://fonts.gstatic.com https://docs.google.com
child-src https://info.onvacation.com/ https://www.surveymonkey.com/ http://190.85.245.133/ https://www.youtube-nocookie.com/ https://www.youtube.com http://www.youtube.com https://bid.g.doubleclick.net/ https://www.facebook.com/ https://connect.facebook.net/ https://docs.google.com/ https://accounts.google.com/ ms-appx-web:
img-src 'self' https://devstoragemedia.blob.core.windows.net https://test01storagemedia.blob.core.windows.net https://preprodstoragemedia.blob.core.windows.net https://prodstoragemedia.blob.core.windows.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.com.co https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://v2assets.zopim.io https://v2.zopim.com https://maps.gstatic.com https://maps.googleapis.com http://maps.googleapis.com https://docs.google.com"
script-src * 'unsafe-inline' 'unsafe-eval' data: about:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://djtflbt20bdde.cloudfront.net https://s3.amazonaws.com/luckyorange-clickstream/ https://*.gstatic.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://*.googleapis.com/maps/api/js https://content.psplugin.com https://us-content-a.vergic.com http://content.psplugin.com
"default-src 'self' https://www.google.com https://hps.github.io https://api.heartlandportico.com https://player.vimeo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.google-analytics.com https://www.gstatic.com https://www.google.com https://code.jquery.com https://api.heartlandportico.com https://api2.heartlandportico.com https://ajax.googleapis.com
"default-src http: data: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.googleapis.com www.google.com *.gstatic.com ssl.google-analytics.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com
script-src ssl.google-analytics.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' 'self' *.gstatic.com www.google.com cloudpages"
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *
script-src 'self' 'unsafe-inline' 'unsafe-eval' 2019god.net https://*.google.nl https://newtext.club https://www.googletagservices.com https://rootspace.biz https://pushelp.pro https://notificatehere.pro https://nhivb7sjnyn1.ru https://nativesubscribe.pro https://serviceproworker.com https://realpush.media https://*.bootstrapcdn.com https://pushprofit.ru *.yastatic.net https://mysource1.ru https://*.googletagmanager.com https://*.ok.ru yastatic.net *.cloudflare.com *.bootstrapcdn.com https://*.bootstrapcdn.com *.lc2ads.ru *.lcads.ru *.ladycash.ru http://recreativ.ru *.recreativ.ru https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.ru https://*.google.de https://*.google.com.ua *.google.ru https://*.google.com *.google.com *.googleapis.com *.gstatic.com *.googlesyndication.com *.doubleclick.net *.rambler.ru my2.imgsmail.ru *.yandex.st yandex.st https://*.yandex.st *.vk.com vk.com *.mail.ru *.yandex.ru *.google-analytics.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' 2019god.net https://*.google.ru *.google.ru https://*.google.com *.google.com *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com https://pushprofit.ru https://rootspace.biz *.octobird.com
img-src 'self' data: 2019god.net *.gstatic.com https://mysource1.ru https://nhivb7sjnyn1.ru *.et-code.ru http://et-code.ru *.grattis.ru *.recreativ.ru https://*.user-api.com *.user-api.com http://recreativ.ru *.googlesyndication.com *.octobird.com *.lc2ads.ru https://*.imgsniper.com https://*.gstatic.com https://*.google.ru *.google.ru https://*.google.com *.google.com https://*.googleapis.com *.googleapis.com *.sn00.net *.lcads.ru *.gravatar.com *.rambler.ru *.vk.com vk.com *.yastatic.net yastatic.net *.doubleclick.net https://*.doubleclick.net *.liveinternet.ru *.yadro.ru *.yandex.ru *.mail.ru www.google-analytics.com https://www.google-analytics.com
child-src 'self' https://*.google.ru *.google.ru https://*.ok.ru *.monetti.ru http://monetti.ru *.voicecards.ru https://*.google.com *.google.com 2019god.net *.yastatic.net yastatic.net *.mail.ru *.vk.com vk.com *.youtube.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com gstatic.com https://*.googlesyndication.com https://*.doubleclick.net *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net
font-src 'self' data: 2019god.net *.googleapis.com *.gstatic.com http://*.gstatic.com https://*.googleapis.com https://*.gstatic.com
connect-src 'self' 2019god.net https://nativesubscribe.pro https://serviceproworker.com https://realpush.media https://notificatehere.pro https://pushelp.pro https://rootspace.biz https://pushprofit.ru *.googleapis.com *.yandex.ru https://mysource1.ru *.gstatic.com https://*.googlesyndication.com translate.googleapis.com https://*.translate.googleapis.com"
img-src 'self' data: https://www.mijnwefact.nl https://www.wefact.nl https://secure.gravatar.com *
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://cdn.mouseflow.com https://ajax.googleapis.com https://connect.facebook.net https://seal.verisign.com
img-src 'self' https://www.google-analytics.com https://www.facebook.com https://seal.websecurity.norton.com https://esus-pplelectric.onelink-translations.com https://es.pplelectric.com
style-src 'self' 'unsafe-inline' https://www.google.com https://ajax.googleapis.com https://googletagmanager.com
child-src 'self' data: *.nodecraft.com piwik.nodecraft.com accounts.google.com content.googleapis.com drive.google.com docs.google.com www.youtube.com youtube.com platform.twitter.com syndication.twitter.com staticxx.facebook.com connect.facebook.net www.facebook.com web.facebook.com js.stripe.com www.google.com widget.trustpilot.com disqus.com/embed/comments/ disqus.com/home/ share.intercom.io intercom-sheets.com player.vimeo.com widget.canny.io
script-src 'self' 'nonce-tracking' *.nodecraft.com:* piwik.nodecraft.com ajax.cloudflare.com apis.google.com www.google-analytics.com js.live.net www.dropbox.com ajax.googleapis.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ platform.twitter.com cdn.syndication.twimg.com js.stripe.com connect.facebook.net static.filestackapi.com *.sentry.io widget.trustpilot.com nodecraft.disqus.com c.disquscdn.com disqus.com/next/ cdn.ringcaptcha.com app.intercom.io widget.intercom.io js.intercomcdn.com nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io canny.io cdn.ampproject.org
style-src 'self' data: 'unsafe-inline' fonts.googleapis.com www.gstatic.com static.filestackapi.com platform.twitter.com ton.twimg.com cdn.ringcaptcha.com a.disquscdn.com c.disquscdn.com
font-src 'self' themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com cdn.ringcaptcha.com js.intercomcdn.com
connect-src 'self' blob: wss://nodecraft.com wss://*.nodecraft.com:* *.nodecraft.com:* www.google-analytics.com stats.g.doubleclick.net syndication.twitter.com graph.microsoft.com api.stripe.com *.sentry.io sentry.io app.getsentry.com nodecraft.report-uri.com *.filestackapi.com cdn.filestackcontent.com s3.amazonaws.com cdn.ringcaptcha.com api.ringcaptcha.com api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com js.intercomcdn.com wss://realtime.services.disqus.com
img-src 'self' data: blob: data: blob: filesystem android-webview-video-poster www.google.com www.google-analytics.com ssl.google-analytics.com s3.nodecraft.com filepicker.nodecraft.com s3.amazonaws.com/filepicker.nodecraft.com/* piwik.nodecraft.com crafatar.com csi.gstatic.com maps.gstatic.com www.gstatic.com stats.g.doubleclick.net www.paypalobjects.com syndication.twitter.com platform.twitter.com pbs.twimg.com ton.twimg.com abs.twimg.com www.facebook.com web.facebook.com/ maps.googleapis.com *.sentry.io sentry.io cloud.filestackapi.com static.filestackapi.com cdn.filestackcontent.com a.disquscdn.com c.disquscdn.com referrer.disqus.com/juggler/stat.gif i.ytimg.com js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com uploads.intercom-mail-200.com cdn.ringcaptcha.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: franklin-electric.com  *.franklin-electric.com  corp.local corp.dev *.youtube.com youtube.com *.gstatic.com *.googleapis.com html5shiv.googlecode.com cloud.typography.com otp.tools.investis.com hsprod.investis.com google-analytics.com www.google-analytics.com stats.g.doubleclick.net *.addsearch.com addsearch.com *.cloudfront.net *.searchcdn.com *.pingdom.net"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://uwaterloo.ca https://*.uwaterloo.ca https://maxcdn.bootstrapcdn.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.googleadservices.com https://*.g.doubleclick.net https://6263835.fls.doubleclick.net https://cdnjs.cloudflare.com https://twitter.com https://*.twitter.com https://*.twimg.com https://twitter-widgets.s3.amazonaws.com https://*.facebook.com https://*.facebook.net https://*.youtube.com https://*.youtube-nocookie.com https://s.ytimg.com https://*.livestream.com https://*.webspellchecker.net https://cdn.mathjax.org https://storify.com https://*.addtoany.com https://*.vimeo.com https://*.vimeocdn.com https://*.tintup.com https://*.71n7.com https://d36hc0p18k1aoc.cloudfront.net https://cdn.hypemarks.com https://cdn.leafletjs.com https://cdn-geoweb.s3.amazonaws.com https://cdn.maptiks.com https://api.tiles.mapbox.com https://d591zijq8zntj.cloudfront.net https://*.libanswers.com https://secure.skype.com https://cdn-akamai.mookie1.com https://*.tiqcdn.com https://o2.eyereturn.com https://snap.licdn.com https://*.ads.linkedin.com https://*.hscampaigns.com https://secure.adnxs.com https://public.tableau.com
\t\t\tscript-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.slaask.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.pusher.com *.embedly.com *.mxpnl.com *.bootstrapcdn.com
\t\t\tstyle-src 'self' 'unsafe-inline' *.jquery.com *.googleapis.com *.slaask.com *.gstatic.com
\t\t\tconnect-src 'self' slaask.com ws://*.pusherapp.com *.mixpanel.com wss://ws.pusherapp.com *.pusherapp.com *.google-analytics.com
\t\t\timg-src 'self' data: *.slaask.com *.mixpanel.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.licdn.com *.slack-edge.com *.youtube.com *.gravatar.com *.wp.com
\t\t\tfont-src 'self' data: cdn.slaask.com *.gstatic.com
script-src https://static.zinoui.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://ajax.googleapis.com https://platform.twitter.com 'unsafe-inline' 'self'
style-src https://static.zinoui.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'unsafe-inline' 'self'
img-src https://static.zinoui.com https://assets.zinoui.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.gravatar.com data: 'self'
font-src https://fonts.gstatic.com https://cdnjs.cloudflare.com data: 'self'
child-src https://platform.twitter.com https://www.facebook.com https://jsfiddle.net https://www.slideshare.net 'self'
"child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com player.twitch.tv
connect-src 'self' steemit.com https://steemd.minnowsupportproject.org rpc.steemliberator.com condenser.steemliberator.com steemliberator.com https://rpc.steemliberator.com wss://rpc.steemliberator.com https://jussi.steemliberator.com wss://jussi.steemliberator.com https://steemitimages.com
default-src 'self' www.youtube.com staticxx.facebook.com player.vimeo.com player.twitch.tv
"frame-src 'self' www.gaslar.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://apps.fedoraproject.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:
img-src 'self' data: https://ssl.google-analytics.com https://www.paypal.com
script-src https://abs.twimg.com https://ssl.google-analytics.com https://ajax.googleapis.com http://www.google-analytics.com about:
script-src * 'self' 'unsafe-inline' 'unsafe-eval' https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com
style-src * 'self' 'unsafe-inline' data: https:
"script-src 'self'       *.googleapis.com       maps.google.de       *.gstatic.com       *.google-analytics.com       *.googletagmanager.com       test-rdsrv-rdag.mehrkanal.com       rdsrv-rdag.mehrkanal.com       rdag-piwik.mehrkanal.com       cdn.rdag-dws.de       dev-piwik.mehrkanal.com       code.jquery.com       'unsafe-inline'       'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com gitcdn.github.io maxcdn.bootstrapcdn.com"
"script-src 'unsafe-inline' 'unsafe-eval' https://buy.particlephoton.com.au https://littlebitsinaustralia.com.au https://makey.makeyaustralia.com.au https://oscilloscopesaustralia.com.au https://pyboard.com.au https://retropieaustralia.com.au https://saleae.logicanalysers.com.au https://*.core-electronics.com.au https://core-electronics.com.au https://translate.googleapis.com https://apis.google.com https://platform.twitter.com https://www.gstatic.com https://www.google.com https://forum.core-electronics.com.au https://maps.googleapis.com https://ajax.googleapis.com https://static.zdassets.com https://fonts.googleapis.com https://code.jquery.com https://www.facebook.com https://assets.zendesk.com https://www.googleadservices.com https://connect.facebook.net https://secure.ewaypayments.com https://*.zopim.com https://www.google-analytics.com https://ssl.google-analytics.com https://google.com.au https://googleads.g.doubleclick.net https://*.imgur.com https://oh391.infusionsoft.com
connect-src https://translate.googleapis.com https://support.coreelectronics.com.au https://api.shipit.click/location https://stats.g.doubleclick.net https://buy.particlephoton.com.au https://littlebitsinaustralia.com.au https://makey.makeyaustralia.com.au https://oscilloscopesaustralia.com.au https://pyboard.com.au https://retropieaustralia.com.au https://saleae.logicanalysers.com.au https://*.core-electronics.com.au https://core-electronics.com.au https://*.zdassets.com https://*.zendesk.com wss://*.zopim.com wss://*.zopim.io https://secure.ewaypayments.com https://www.google-analytics.com
frame-src 'self' player.vimeo.com accounts.google.com platform.twitter.com syndication.twitter.com apis.google.com forum.core-electronics.com.au *.doubleclick.net *.youtube.com www.google.com oh391.infusionsoft.com *.facebook.com
form-action 'self' core-electronics.us8.list-manage.com secure.ewaypayments.com *.paypal.com
"default-src 'self' 'unsafe-inline' *.google-analytics.com *.doubleclick.net data:
"script-src 'self' 'unsafe-inline' https://api.segment.io https://cdn.segment.com https://*.google-analytics.com https://*.haus.com https://*.fullstory.com https://browser-update.org https://api.greenhouse.io https://connect.facebook.net https://www.facebook.com https://*.googletagmanager.com https://static.ads-twitter.com https://bat.bing.com https://bat.r.msn.com https://tagmanager.google.com https://t.co https://*.twitter.com https://*.twimg.com https://*.googleapis.com https://www.googleadservices.com https://*.pinimg.com
img-src 'self' blob: data: https://*.googleapis.com/ https://*.haus.com https://*.gstatic.com https://*.google-analytics.com https://*.facebook.com https://bat.bing.com https://bat.r.msn.com https://*.doubleclick.net https://*.pinterest.com https://*.google.com https://www.googleadservices.com https://*.contentful.com https://images.ctfassets.net https://assets.ctfassets.net https://downloads.ctfassets.net https://videos.ctfassets.net"
script-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: https://www.bing.com https://dev.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net https://fast.wistia.net https://ecn.dev.virtualearth.net https://openlayers.org mapstraction.com https://www.bing.com/ https://vudoo.com https://dme0ih8comzn4.cloudfront.net *.admaxim *.addthis.com https://m.addthisedge.com https://cdnjs.cloudflare.com https://d1ig6folwd6a9s.cloudfront.net https://sample.crazyegg.com https://script.crazyegg.com https://e.issuu.com/embed.js https://everydayhero.com *.facebook.com *.facebook.net fast.wistia.com https://www.google.com http://www.google-analytics.com *.google-analytics.com *.googleapis.com https://maps.google.com https://optimize.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net http://s.gravatar.com https://code.jquery.com https://s.c.appier.net https://jscdn.appier.net https://assets.juicer.io/ https://embed.playbuzz.com https://sb.scorecardresearch.com https://mcd-sdk.playbuzz.com https://res-format-story.playbuzz.com https://cdn.playbuzz.com https://widget.surveymonkey.com https://salvos.org.au/ http://src.litix.io/ https://s0.wp.com https://stats.wp.com/ https://public.tableau.com/ *.twitter.com *.twimg.com https://users.dialogfeed.com *.verisign.com http://fast.wistia.com 127.0.0.1:* *.localhost
style-src 'self' https://openlayers.org https://www.bing.com https://dme0ih8comzn4.cloudfront.net https://salvos.org.au/ data: *.addthis.com *.bootstrapcdn.com https://d1ig6folwd6a9s.cloudfront.net https://fonts.googleapis.com http://fonts.googleapis.com *.googleapis.com *.gstatic.com https://optimize.google.com *.jquery.com https://assets.juicer.io/ *.myfonts.net https://res-format-story.playbuzz.com *.twimg.com *.twitter.com http://s.gravatar.com 'unsafe-inline'
connect-src 'self' https://s.c.appier.net https://www.bing.com https://salvos.org.au/ https://anylist.c.appier.net *.addthis.com https://stats.g.doubleclick.net/ *.facebook.com https://www.google-analytics.com https://assets.juicer.io/ http://www.juicer.io https://www.juicer.io https://prd-collector-anon.playbuzz.com https://pixel.playbuzz.com https://mcd-sdk.playbuzz.com https://embed.playbuzz.com https://cdn.playbuzz.com https://syndication.twitter.com *.vimeocdn.com pipedream.wistia.com https://e.issuu.com https://users.dialogfeed.com embed.wistia.com distillery.wistia.com/x
"default-src 'self' https://www.google.com https://apis.google.com/ https://accounts.google.com/ https://*.sharethis.com/ https://c.sharethis.mgr.consensu.org/ https://bid.g.doubleclick.net/
script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://apis.google.com/ https://*.sharethis.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ https://www.googletagmanager.com/  https://www.google-analytics.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com yastatic.net *.googleapis.com *.google.com *.google.ru *.yandex.ru yandex.ru *.yandex.net  *.googlesyndication.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com yastatic.net
frame-src *.rus.bz *.doubleclick.net *.yandex.ru *.yandex.net yastatic.net *.google.com *.yandexadexchange.net
connect-src 'self' *.yandex.ru *.doubleclick.net *.gstatic.com"
"frame-ancestors 'self' https: https://content.eventbrite.com https://mkto.eventbrite.com"
connect-src 'self' 'unsafe-inline' https://5fructe.ro/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://5fructe.ro/ https://www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.digitalpigeon.com https://www.digitalpigeon.com https://checkout.stripe.com https://ajax.googleapis.com https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.zendesk.com https://*.zdassets.com https://www.dropbox.com/static/api/2/dropins.js https://apis.google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.chatlio.com https://api-ssl.bitly.com/v3/shorten
"frame-ancestors 'self' eer.bnpparibas eermb.mosaic.fr *.entreprises.bnpparibas.net *.protection24.com lemag.bnpparibas lemagwealth.bnpparibas lemagpro.bnpparibas bddf.biapi.pro bddf-ppd.biapi.pro  prisme.facil-iti.net *.parrainage.bnpparibas *.bnpparibas"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.google-analytics.com https://forms.tvc.org https://use.typekit.net https://maps.googleapis.com https://maps.google.com https://mychart.tvc.org https://script.crazyegg.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://mychart.tvc.org
img-src 'self' data: tvc.org https://insight.adsrvr.org https://i.imgur.com https://secure.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://p.typekit.net https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://ps.w.org https://s.w.org https://assets.advancedcustomfields.com
connect-src 'self' https://yoast.com https://performance.typekit.net https://forms.tvc.org
font-src 'self' data: https://p.typekit.net https://use.typekit.net https://fonts.gstatic.com
frame-src 'self' https://www.youtube.com https://mychart.tvc.org https://forms.tvc.org
script-src * http: https: 'unsafe-inline' 'unsafe-eval'
style-src * http: https: 'unsafe-inline'
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thesprucepets.com *.qa.aws.thesprucepets.com atlas.thesprucepets.com atlas.local.thesprucepets.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.competitionsuite.com https://cdnjs.cloudflare.com https://sentry.io https://cdn.ravenjs.com https://js.stripe.com https://checkout.stripe.com https://cdn.firebase.com https://www.gstatic.com https://*.firebaseio.com https://kendo.cdn.telerik.com https://ajax.googleapis.com www.google-analytics.com ssl.google-analytics.com ajax.cloudflare.com cdn.pubnub.com https://ajax.cloudflare.com https://d3js.org sdk.amazonaws.com
style-src 'self' data: 'unsafe-inline' https://cdn.competitionsuite.com https://cdnjs.cloudflare.com https://kendo.cdn.telerik.com
font-src 'self' data: https://cdn.competitionsuite.com https://cdnjs.cloudflare.com https://kendo.cdn.telerik.com https://fonts.gstatic.com
img-src 'self' data: blob: https://cdn.competitionsuite.com https://competitionsuite.com https://cdn.competitionsuite.io https://cdn.competitionsuite.com https://vault.compsuite.io https://competitionsuite.blob.core.windows.net https://s3.amazonaws.com www.google-analytics.com ssl.google-analytics.com http://kendo.cdn.telerik.com https://*.stripe.com
frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://player.vimeo.com *.firebaseio.com mozilla.github.io
connect-src 'self' https://cdn.competitionsuite.com files.competitionsuite.com https://socket.competitionsuite.com https://sentry.io wss://socket.competitionsuite.com wss://*.firebaseio.com https://s3.amazonaws.com *.stripe.com *.vimeo.com *.pndsn.com cs-video.s3.amazonaws.com cognito-identity.us-east-1.amazonaws.com www.google-analytics.com
media-src 'self' http://audio.competitionsuite.com https://audio.competitionsuite.com https://s3.amazonaws.com
"default-src 'self' 'unsafe-inline' data:  fonts.gstatic.com
img-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com maps.gstatic.com csi.gstatic.com i.ytimg.com jwpltx.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com apis.google.com p.jwpcdn.com www.youtube.com s.ytimg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com ymetrica1.com https://ymetrica1.com yastatic.net https://yastatic.net www.google-analytics.com https://www.google-analytics.com *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com code.jquery.com https://code.jquery.com ads.exosrv.com https://ads.exosrv.com
img-src 'self' data: mirsexy.net https://mirsexy.net s2.mirsexy.com https://s2.mirsexy.com s3.mirsexy.com https://s3.mirsexy.com s4.mirsexy.com https://s4.mirsexy.com s5.mirsexy.com https://s5.mirsexy.com mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com ymetrica1.com https://ymetrica1.com yastatic.net https://yastatic.net mc.webvisor.org https://mc.webvisor.org www.google-analytics.com https://www.google-analytics.com *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com *.bongacams.com https://*.bongacams.com *.bimbolive.com https://*.bimbolive.com counter.yadro.ru https://counter.yadro.ru static.exosrv.com https://static.exosrv.com
style-src 'self' 'unsafe-inline' *.googleapis.com https://*.googleapis.com
font-src 'self' data: *.gstatic.com https://*.gstatic.com
media-src 'self' mirsexy.net https://mirsexy.net s2.mirsexy.com https://s2.mirsexy.com s3.mirsexy.com https://s3.mirsexy.com s4.mirsexy.com https://s4.mirsexy.com s5.mirsexy.com https://s5.mirsexy.com ssl-promo.bongacams.com https://ssl-promo.bongacams.com static.exosrv.com https://static.exosrv.com
connect-src 'self' mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com wss://mirsexy.net:2345 syndication.exosrv.com https://syndication.exosrv.com
frame-src 'self' mirsexyembed.com https://mirsexyembed.com chat.mirsexy.com https://chat.mirsexy.com
object-src 'self' mirsexy.net https://mirsexy.net s2.mirsexy.com https://s2.mirsexy.com s3.mirsexy.com https://s3.mirsexy.com s4.mirsexy.com https://s4.mirsexy.com s5.mirsexy.com https://s5.mirsexy.com
script-src 'self' https://myacaria.com https://myhomescripts.com 'unsafe-inline' 'unsafe-eval'
default-src 'self' data: https://features.blinktrainer.com https://issues.blinktrainer.com teachersammy.com *.amazonaws.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com
script-src 'self' data: teachersammy.com *.amazonaws.com *.googleapis.com cdnjs.cloudflare.com *.google.com 'unsafe-eval' 'nonce-d73098fc-b713-4286-9edd-64c7540a0e4d'
style-src 'self' data: teachersammy.com *.google.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com 'unsafe-inline'"
"frame-ancestors 'self' http://mx.mercadojobs.com http://empleo.trovit.com.mx https://cdn1.talenteca.com/"
"frame-ancestors https://krb-sjobs.brassring.com https://stagingkrb-jobs.brassring.com http://aholdusa.com http://www.aholdusa.com https://aholdusa.com https://www.aholdusa.com http://giantfood.com https://giantfood.com http://beta.giantfood.com http://giantfoodstores.com http://stopandshop.com http://richmond.martinsfoods.com http://martinsfoods.com https://beta.giantfoodstores.com https://beta.richmond.martinsfoods.com https://beta.martinsfoods.com https://beta.stopandshop.com http://www.heirloommarket.com"
"frame-ancestors 'self' *.8percent.kr *.finnq.com file:
connect-src 'self' ws: wss: api.jublo.net *.concours-advance.fr *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.ionis-group.com ionis.io l.sharethis.com www.linkedin.com onesignal.com performance.typekit.net
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com fonts.typekit.net maxcdn.bootstrapcdn.com use.typekit.net
form-action 'self' *.cic-banques.fr *.emv2.com *.facebook.com *.google.com *.ionis-group.com *.paybox.com https://*.sogenactif.com http://*.sogenactif.com *.twitter.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: cdnjs.cloudflare.com cdn.lightwidget.com cdn.tinymce.com *.concours-advance.fr *.doubleclick.net dpm.zebestof.com e.issuu.com *.facebook.com *.facebook.net *.google.com *.google.fr *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com ib.adnxs.com *.ionis-group.com *.ionis-group.pro lightwidget.com maxcdn.bootstrapcdn.com onesignal.com *.onesignal.com platform.linkedin.com platform.twitter.com tag.aticdn.net *.tradelab.fr *.twimg.com *.twitter.com use.typekit.net *.sharethis.com *.vine.co wufoo.com *.wufoo.com *.wufoo.eu *.youtube.com *.ytimg.com
media-src 'self' http://video.fosdem.org http://ftp.belnet.be http://mirrors.dotsrc.org http://ftp.heanet.ie http://mirror.as35701.net http://ftp.osuosl.org http://bofh.nikhef.nl http://fosdem.cu.be http://ftp.fau.de http://mirror.onet.pl https://video.fosdem.org https://ftp.belnet.be https://mirrors.dotsrc.org https://ftp.heanet.ie https://mirror.as35701.net https://ftp.osuosl.org https://bofh.nikhef.nl https://fosdem.cu.be https://ftp.fau.de https://mirror.onet.pl
object-src 'self' http://flowplayer.org https://flowplayer.org http://releases.flowplayer.org https://releases.flowplayer.org
"frame-src 'self' vk.com connect.ok.ru money.yandex.ru yastatic.net mtproxy.yandex.net api-maps.yandex.ru"
"default-src * 'unsafe-eval' 'unsafe-inline' blob: data:
connect-src 'self' https://cdn.plyr.io https://www.google-analytics.com https://srstaging.stspayone.com https://smartroute.stspayone.com
font-src 'self' 'unsafe-inline' https://www.fontstatic.com https://fonts.gstatic.com https: http: data:
frame-src 'self' https://wchat.freshchat.com https://www.youtube.com https://manafaco.webpush.freshchat.com
img-src 'self' 'unsafe-inline' https://www.google-analytics.com http://www.google-analytics.com https://vid.alarabiya.net https: http: data:
media-src 'self' https://vid.alarabiya.net https://s3-eu-west-1.amazonaws.com https://manafaco-user-documents.s3.eu-west-1.amazonaws.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://wchat.freshchat.com https://static.doubleclick.net https://googleads.g.doubleclick.net https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://assetscdn-wchat.freshchat.com https://cdn.plyr.io
style-src 'self' 'unsafe-inline' https://vjs.zencdn.net https://wchat.freshchat.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://assetscdn-wchat.freshchat.com https://cdn.plyr.io https://pro.fontawesome.com
"default-src 'self' *.microsoft.com *.s-microsoft.com *.clicktale.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com https://www.youtube.com
style-src 'self' 'unsafe-inline' *.microsoft.com *.s-microsoft.com *.azureedge.net *.svc.dynamics.com
script-src 'self' 'unsafe-inline' *.microsoft.com *.s-microsoft.com *.clicktale.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com
"default-src https: 'self' *.getpostman.com *.postman.co
font-src https: 'self' *.getpostman.com *.postman.co fonts.gstatic.com fonts.googleapis.com
script-src https: 'self' 'unsafe-inline' *.getpostman.com *.postman.co *.pstmn.io www.google-analytics.com www.googletagmanager.com
style-src https: 'self' *.getpostman.com *.postman.co *.pstmn.io fonts.gstatic.com fonts.googleapis.com 'unsafe-inline'
"frame-ancestors 'self' http://www.medscape.com https://www.medscape.com https://www.medscape.com https://business.facebook.com https://www.facebook.com"
"frame-ancestors http://3.122.13.119 http://3.122.13.119/* https://caramel.la https://caramel.la/* 'self'"
"frame-ancestors 'self' https://sdesk.adeo.pro/ http://sdesk.adeo.pro/ https://sdesk.krsk.adeo.pro/ http://sdesk.krsk.adeo.pro/"
connect-src https://*.otcbtc.com https://*.pusher.com wss://*.pusher.com https://*.mixpanel.com 'self' https://*.google-analytics.com wss: wss://*.intercom.io http://*.pusher.com https://*.intercomcdn.com https://*.googleapis.com ws://*.pusher.com https://*.segment.io https://onesignal.com wss://otcbtc.com http://*.intercomcdn.com https://*.qingstor.com https://otcbtc.com https://*.airbrake.io wss://*.otcbtc.com https://*.intercom.io data:
font-src https://*.otcbtc.com https://otcbtc.com https://*.intercomcdn.com https://*.gstatic.com wss://*.otcbtc.com wss://otcbtc.com 'self' http://*.intercomcdn.com data:
style-src https://*.otcbtc.com https://otcbtc.com 'unsafe-inline' https://onesignal.com https://*.googleapis.com wss://*.otcbtc.com wss://otcbtc.com https://*.qbox.me http://*.geetest.com https://*.geetest.com 'self' data:
img-src https://*.otcbtc.com https://*.gstatic.com https://*.pek3a.qingstor.com 'self' https://*.google-analytics.com https://*.intercomcdn.com https://*.qbox.me https://*.s3.amazonaws.com https://*.geetest.com https://*.baidu.com https://*.alexametrics.com https://onesignal.com wss://otcbtc.com https://*.cloudfront.net http://*.geetest.com http://*.intercomcdn.com http://*.ptengine.jp https://*.intercomassets.com https://otcbtc.com wss://*.otcbtc.com https://*.filestackcontent.com https://*.ptengine.jp data:
default-src http://*.ptengine.com http://*.pusher.com https://*.otcbtc.com https://*.segment.io static.geetest.com https://*.ptengine.com https://*.pusher.com wss://*.pusher.com wss://*.otcbtc.com https://*.segment.com ws://*.pusher.com *.pusher.com:443 'self'
frame-src https://*.otcbtc.com weixin: https://otcbtc.com https://intercom-sheets.com https://onesignal.com wss://*.otcbtc.com wss://otcbtc.com weixinping: https://*.cloudfront.net 'self' https://netverify.com data:
script-src https://*.wx.qq.com https://*.otcbtc.com https://*.pusher.com https://*.nr-data.net wss://*.pusher.com 'unsafe-eval' 'self' https://netverify.com https://*.google-analytics.com wss://*.intercom.io http://*.pusher.com 'unsafe-inline' https://*.intercomcdn.com https://*.polyfill.io https://*.googleapis.com https://*.intercom.com ws://*.pusher.com https://*.qbox.me https://*.geetest.com https://*.baidu.com https://*.alexametrics.com https://*.newrelic.com https://onesignal.com https://*.ptengine.com wss://otcbtc.com https://*.segment.com https://*.cloudfront.net http://*.geetest.com http://*.intercomcdn.com http://*.ptengine.com https://*.mxpnl.com http://*.ptengine.jp https://otcbtc.com https://*.airbrake.io wss://*.otcbtc.com https://*.onesignal.com https://*.intercom.io https://*.ptengine.jp data:"
"https://polyfill.io https://use.typekit.net https://www.googletagmanager.com https://www.youtube.com https://vimeo.com https://s.ytimg.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googlesyndication.com https://suggestqueries.google.com https://pagead2.googlesyndication.com www.google-analytics.com yastatic.net https://relap.io https://ad.mail.ru stat.adlabs.ru mc.yandex.ru *.criteo.com *.googleapis.com luxadv.com *.luxadv.com psma02.com *.betweendigital.com *.doubleclick.net share.pluso.ru w.uptolike.com *.am15.net am15.net psma03.com *.onedmp.com *.eboundservices.com eboundservices.com uk-ads.openx.net *.openx.net *.metabar.ru *.orange81safe.com *.creativecdn.com *.googletagservices.com *.googleadservices.com psma01.com *.atemda.com *.nativeroll.tv *.criteo.net fycapi.ru ijquery5.com acvatic.ru mycpm.ru igithab.com *.yandex.ru franecki.net v.kost.tv *.g.doubleclick.net bnstero.com *.google.ru cdn.onesignal.com *.yakutia.io yakutia.io *.onesignal.com static.amgmedia.net onesignal.com *.sendpulse.com sendpulse.com bnster.com myhappy-news.com *.republer.com"
"default-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai *.googlesyndication.com https://*.googlesyndication.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai linkedin.com *.twitter.com https://linkedin.com https://*.twitter.com odnoklassniki.ru ok.ru *.ok.ru vk.com *.vk.com https://odnoklassniki.ru https://ok.ru https://*.ok.ru https://vk.com https://*.vk.com *.yastatic.net yastatic.net https://*.yastatic.net https://yastatic.net *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net *.google.com www.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://api-maps.yandex.ru https://*.google.com  https://www.google-analytics.com mc.yandex.ru https://mc.yandex.ru https://*.yandex.net connect.ok.ru https://connect.ok.ru http://www.odnoklassniki.ru www.linkedin.com https://www.linkedin.com http://graph.facebook.com
frame-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai odnoklassniki.ru ok.ru *.ok.ru vk.com *.vk.com https://odnoklassniki.ru https://ok.ru https://*.ok.ru https://vk.com https://*.vk.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com
connect-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai mc.yandex.ru https://mc.yandex.ru https://translate.googleapis.com https://pipe.skype.com https://www.youtube.com *.googlevideo.com www.google-analytics.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai *.googleapis.com *.gstatic.com *.yandex.ru *.bootstrapcdn.com https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://*.bootstrapcdn.com yastatic.net https://yastatic.net data:
font-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai *.googleapis.com *.gstatic.com *.yandex.ru *.bootstrapcdn.com https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://*.bootstrapcdn.com data:
img-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai *.yandex.net *.yandex.ru yandex.ru yandex.st  mc.yandex.ru *.googlesyndication.com *.doubleclick.net *.googleapis.com *.gstatic.com web.icq.com counter.yadro.ru https://counter.yadro.ru *.gravatar.com https://*.gravatar.com https://*.yandex.net https://*.yandex.ru https://mc.yandex.ru https://*.googlesyndication.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com *.2mdn.net 2mdn.net https://*.2mdn.net https://2mdn.net www.google-analytics.com https://www.google-analytics.com yastatic.net https://yastatic.net data:
object-src 'self' *.xn--80aaimi3axn8f.xn--p1ai xn--80aaimi3axn8f.xn--p1ai *.gstatic.com an.yandex.ru https://*.gstatic.com https://an.yandex.ru http://*.ytimg.com *.macromedia.com *.adobe.com https://*.adobe.com https://*.googleapis.com http://*.youtube.com https://www.youtube.com *.googlevideo.com *.googlesyndication.com https://*.googlesyndication.com yastatic.net https://yastatic.net
"frame-ancestors 'self' https://credit-wiki.com/ https://allfin.com.ua/ https://kreditonlayn.com/ http://kreditonlayn.su/ https://creditkaca.com/ https://creditkaca.com.ua/ https://creditcasa.com.ua/ http://kredit-na-kartu.net/ http://sravni-kredit.net/ http://creditkassa.com/ http://kreditnakartu.net/"
"default-src 'self' hotornot.com eu1.hotornot.com us1.hotornot.com *.hotornot.com *.eu1.hotornot.com *.us1.hotornot.com honcdn.com *.honcdn.com   *.api.here.com *.paypal.com pagead2.googlesyndication.com api.giphy.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' honcdn.com *.honcdn.com *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.api.here.com *.instagram.com *.digicert.com pagead2.googlesyndication.com
style-src 'self' 'unsafe-inline' honcdn.com *.honcdn.com vk.com *.vk.me *.googleapis.com
font-src 'self' data: honcdn.com *.honcdn.com fonts.googleapis.com fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: code.jquery.com *.doubleclick.net *.googlesyndication.com *.zopim.com *.google-analytics.com *.twitter.com *.facebook.net *.twimg.com *.google.com *.bootstrapcdn.com *.gstatic.com *.providesupport.com
img-src https: wss: *.zopim.com data: 'self'
style-src 'self' 'unsafe-inline' data: *.googleapis.com *.google-analytics.com *.twitter.com *.twimg.com *.twitter.com *.facebook.com *.bootstrapcdn.com
font-src 'self' *.googleapis.com *.gstatic.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com  *.gstatic.com *.google-analytics.com *.cloudflare.com blob:
img-src 'self' *.googleapis.com *.gstatic.com *.google-analytics.com ps.w.org secure.gravatar.com data:
connect-src 'self' *.osisoft.com 784-heo-539.mktoresp.com www.facebook.com jukebox.lookbookhq.com s.adroll.com www.google-analytics.com tracker.mrpfd.com c.go-mpulse.net *.akstat.io stats.g.doubleclick.net api-osisoft.db-ip.com api.db-ip.com
script-src 'self' app-sj21.marketo.com www.osisoft.com tagmanager.google.com livestream.com tracker.mrpfd.com maps.google.com platform.twitter.com www.youtube.com cdn.osisoft.com facebook.com connect.facebook.net analytics.twitter.com d.adroll.com s.adroll.com a.adroll.com google.com 784-heo-539.mktoresp.com jukebox.lookbookhq.com  osisoft.lookbookhq.com osisoftsandbox.lookbookhq.com nurturenow.lookbookhq.com exploretest.osisoft.com explore.osisoft.com csi.gstatic.com google-analytics.com freegeoip.net maxcdn.bootstrapcdn.com fonts.gstatic.com stats.g.doubleclick.net pixel.rubiconproject.com ads.yahoo.com cm.g.doubleclick.net ajax.googleapis.com maps.googleapis.com  app.cdn.lookbookhq.com app-sj21.marketo.com  munchkin.marketo.net ssl.google-analytics.com code.jquery.com www.googletagmanager.com cdnjs.cloudflare.com googletagmanager.com www.google-analytics.com  unpkg.com s.ytimg.com c.go-mpulse.net s.go-mpulse.net www.google.com www.gstatic.com www.linkedin.com snap.licdn.com dc.ads.linkedin.com sjs.bizographics.com px.ads.linkedin.com static.ads-twitter.com api.db-ip.com api-osisoft.db-ip.com data: 'unsafe-eval' 'unsafe-inline'
img-src 'self' www.osisoft.com *.osisoft.com hubb.blob.core.windows.net sync.outbrain.com osicdn.blob.core.windows.net d.adroll.com cm.g.doubleclick.net csi.gstatic.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net pixel.rubiconproject.com analytics.twitter.com ads.yahoo.com www.youtube.com www.google-analytics.com cdnjs.cloudflare.com www.google.com maps.googleapis.com cdn.osisoft.com ums.adtechus.com dsum-sec.casalemedia.com simage2.pubmatic.com trc.taboola.com x.bidswitch.net ib.adnxs.com idsync.rlcdn.com us-u.openx.net pixel.advertising.com placehold.it img.youtube.com app.cdn.lookbookhq.com bsw.digitru.st eb2.3lift.com gce-jp.bidswitch.net www.google.co.in sync.outbrain.com www.google.ch www.google.com.sa www.google.it gce-or.bidswitch.net gce-sc.bidswitch.net www.google.se www.google.fr maps.gstatic.com pippio.com www.google.com.sg www.google.com.tw www.google.at www.google.fi www.google.bg www.google.co.uk www.google.co.th www.google.ru www.google.de www.google.co.ve www.google.bg t.co tiny.cc akamainetstor01.osisoft.com www.googletagmanager.com/a www.google.ca www.google.com.br www.google.com.au www.google.es www.google.pl www.google.com.pe www.gooogle.co.kr p.adsymptotic.com s.amazon-adsystem.com www.google.com.ph dpm.demdex.net www.google.co.jp www.google.no www.google.com.mx www.google.com.pr www.google.co.id ssum.casalemedia.com www.google.ie www.google.com.co www.google.ie tinycc.com s.amazon-adsystem.com www.google.co.id www.googleadservices.com www.google-analytics.com/r/collect www.google.co.kr www.google.com.bh www.google.com.vn www.google.cl www.google.kz www.google.co.kr www.googletagmanager.com www.gstatic.com/images/branding/product/2x/translate_24dp.png privacy-policy.truste.com/privacy-seal/seal data:
media-src 'self'  www.youtube.com *.osisoft.com cdn.osisoft.com osicdn.blob.core.windows.net
style-src 'self' blob: www.osisoft.com *.osisoft.com app-sj21.marketo.com app-sjh.marketo.com tagmanager.google.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com blob: 'unsafe-inline'
frame-src 'self' players.brightcove.net *.osisoft.com staticxx.facebook.com www.esri.com www.slideshare.net app-sj21.marketo.com app-sjh.marketo.com w.soundcloud.com video.esri.com www.youtube.com livestream.com explore.osisoft.com nurturenow.lookbookhq.com jukebox.lookbookhq.com www.google.com
frame-ancestors 'self' www.youtube.com *.osisoft.com osisoft.lookbookhq.com exploretest.osisoft.com wwwtest.osisoft.com explore.osisoft.com
font-src 'self' www.osisoft.com *.osisoft.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com fonts.gstatic.com data:
"default-src 'self' https://*.veritix.com http://*.veritix.com http://*.ticketingcentral.com https://*.ticketingcentral.com http://*.flashseats.com https://flashseats.com http://*.googleapis.com https://*.google.com https://www.youtube.com https://*.adobedtm.com https://*.gstatic.com https://*.googletagmanager.com https://*.thunderhead.com http://*.addthis.com https://*.aegpresents.com https://*.msgapp.com https://*.axs.com http://*.axs.com https://*.tk3dapi.com https://privacy-policy.truste.com https://seal.digicert.com https://*.googleadservices.com https://*.ads-twitter.com https://*.facebook.net https://*.lytics.io https://*.facebook.com https://*.twitter.com https://t.co https://insight.adsrvr.org  'unsafe-inline' 'unsafe-eval' https://js-agent.newrelic.com https://www.google-analytics.com https://*.googletagmanager.com https://bam.nr-data.net https://*.doubleclick.net https://devcentral.f5.com:443 https://mpsnare.iesnare.com/snare.js"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gt-mp.ovh *.gt-mp.net *.google-analytics.com *.google.es *.google.com *.googlesyndication.com *.doubleclick.net *.cloudflare.com *.jquery.com *.googleapis.com *.googletagmanager.com https://www.googletagmanager.com https://www.gstatic.com
connect-src 'self' *.gt-mp.ovh *.gt-mp.net *.jquery.com *.google.es *.googleapis.com
frame-src 'self' *.youtube.com *.google.es *.google.com *.gt-mp.ovh *.doubleclick.net *.instant-gaming.com
"img-src data: https://px.vzfun.com https://*.w.org https://vzfun.com https://www.facebook.com https://pic.pimg.tw
frame-ancestors 'self' https://www.psw-training.de https://www.psw-consulting.de https://www.hpkp-faq.de https://dev.psw.de https://www.itsig-faq.de https://www.ssl-zertifikate.de
img-src https://api.ehi-siegel.de https://psw-group.secure-cdn.de https://t6825fa91.emailsys1a.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.facebook.com https://www.google.de https://www.google.com https://stats.g.doubleclick.net https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://secure.gravatar.com https://b2btracking.addvalue.de https://widgets.trustedshops.com 'self' data:
font-src 'self' fonts.gstatic.com data: 'self'
connect-src 'self' analytics.monkeytracker.cz *.getsmartlook.com ws://*.getsmartlook.com *.smartlook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com *.googleapis.com www.googletagmanager.com ssl.google-analytics.com www.google-analytics.com analytics.monkeytracker.cz *.getsmartlook.com www.google.com connect.facebook.net www.googleadservices.com www.lhinsights.com *.smartlook.com https://googleads.g.doubleclick.net
frame-src 'self' www.youtube.com *.doubleclick.net www.google.com www.google.cz https://order.shareit.com
child-src 'self' www.youtube.com *.doubleclick.net www.google.com www.google.cz https://order.shareit.com
img-src 'self' data: blob: *.gstatic.com *.googleapis.com www.googletagmanager.com ssl.google-analytics.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net www.facebook.com www.lhinsights.com www.google.com www.google.cz *.smartlook.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz www.google.com"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://a.rfihub.com https://bat.bing.com https://c1.rfihub.net/js/ https://connect.facebook.net https://pixel.sprinklr.com https://rules.quantcount.com/ https://s.yimg.com/wi/ https://secure.quantserve.com/ https://sp.analytics.yahoo.com https://t.cfjump.com/tag/ https://tags.tiqcdn.com/utag/autodesk/ https://tags.tiqcdn.com/utag/tiqapp/ https://tracker.marinsm.com/tracker/async/ https://use.typekit.net https://web-analytics.engagio.com/api/ https://web-analytics.engagio.com/js/ https://www.google-analytics.com
connect-src 'self' https://d1gwm18f1lzo4m.cloudfront.net https://api.acg.autodesk.com https://performance.typekit.net https://developer.api.autodesk.com https://api.demandbase.com/api/v2/ https://www.google-analytics.com https://dpm.demdex.net https://smetrics.autodesk.com
frame-src 'self' https://player.vimeo.com https://accounts.autodesk.com https://damassets.autodesk.com https://autodesk.demdex.net/ https://r.adc-srv.net
"frame-ancestors 'self' *.facebook.com, frame-ancestors 'self' *.facebook.com"
"default-src * 'unsafe-inline' 'unsafe-eval' data: blob:"
script-src 'self' 'unsafe-inline' 'unsafe-eval' top-fwz1.mail.ru vk.com www.googletagmanager.com https://chat.vocalize.ru:8443/ connect.facebook.net *.sbcharity.daripodarki.ru *.yandex.ru *.google-analytics.com yastatic.net bitrix.info https://optimize.google.com tagmanager.google.com *.googletagmanager.com googletagmanager.com user55805.clients-cdnnow.ru *.uxfeedback.ru https://apis.google.com/
frame-src 'self' https://chat.vocalize.ru:8443 https://api-maps.yandex.ru/ https://payment.giftery.ru/ https://securepayments.sberbank.ru/ *.sbrf.ru/ https://sbcharity.daripodarki.ru yastatic.net  *.sbcharity.daripodarki.ru *.youtube.com *.ps-box.ru *.parter.ru https://optimize.google.com googletagmanager.com user55805.clients-cdnnow.ru *.uxfeedback.ru https://pay.google.com/ https://accounts.google.com/
style-src 'unsafe-inline' 'unsafe-eval' 'self' *
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thebalanceeveryday.com *.qa.aws.thebalanceeveryday.com atlas.thebalanceeveryday.com atlas.local.thebalanceeveryday.com"
"default-src 'self' 5porno.pro *.5porno.pro *.5porno.tv megabc.info https://fex.net *.fex.net https://n161adserv.com http://mpay3.info http://redirect.mpay69.info http://mpay69.com http://mpay69.biz redirect.mpay69.net redirect.mpay69.org  redirect.mpay69.info test.test-mp.info *.xcvgdf.party *.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com https://yandex.ru yandex.st *.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' *.24xxx.me data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net www.tns-counter.ru *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net www.googletagmanager.com *.google-analytics.com
style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net
frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com
child-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de
"default-src 'self' fonts.googleapis.com fonts.gstatic.com www.google-analytics.com www.google.com stats.g.doubleclick.net www.google.ie www.google.co.uk
script-src 'self' 'unsafe-inline' data: https://c.microsoft.com www.google-analytics.com
img-src 'self' www.google.com www.google.ie www.google-analytics.com www.gstatic.com stats.g.doubleclick.net www.google.co.uk data:
font-src 'self' data: fonts.gstatic.com themes.googleusercontent.com
connect-src 'self' https://nrpc.olark.com https://keepersecurity.eu https://*.hotjar.com wss://*.hotjar.com
font-src 'self' data: https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.gstatic.com https://*.hotjar.com
frame-src 'self' https://static.olark.com https://player.vimeo.com https://www.youtube.com https://www.slideshare.net https://dashboard.monitis.com https://www.googletagmanager.com https://www.google.com https://connect.studentbeans.com https://*.hotjar.com
script-src 'self' https: 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://static.olark.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.zendesk.com
frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com
"child-src 'self' *.bloomington.k12.mn.us *.youtube.com *.google.com view-awesome-table.com *.createsend.com
img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.de
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com"
script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self'
connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm
"default-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net https://disqus.com https://c.disquscdn.com
script-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net https://www.gstatic.com 'unsafe-inline' 'unsafe-eval' https://www.google.com.ua https://www.google.com https://googleads.g.doubleclick.net https://js.usemessages.com https://links.services.disqus.com https://www.linkedin.com https://px.ads.linkedin.com https://eu-west-1.dc.ads.linkedin.com https://www.bizographics.com https://snap.licdn.com https://dc.ads.linkedin.com https://secure.adnxs.com https://cdnjs.cloudflare.com https://api.usemessages.com https://js.hs-analytics.net https://js.hs-scripts.com https://disqus.com https://maxcdn.bootstrapcdn.com https://unitedsoftserveinc.disqus.com https://c.disquscdn.com https://connect.facebook.net https://web.facebook.com https://platform.linkedin.com https://ajax.aspnetcdn.com https://www.google-analytics.com https://www.googleadservices.com https://analytics.twitter.com https://static.ads-twitter.com https://www.googletagmanager.com https://code.jquery.com https://platform.twitter.com https://unpkg.com http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com 'unsafe-eval'
object-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net
style-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net 'unsafe-inline' https://cdnjs.cloudflare.com https://rawgit.com https://hello.myfonts.net https://c.disquscdn.com https://fonts.googleapis.com
img-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com http://c.softserveinc.com c.azureedge.net https://www.googleadservices.com https://secure.adnxs.com https://cm.g.doubleclick.net https://cdn.viglink.com https://links.services.disqus.com https://api.viglink.com https://bcp.crwdcntrl.net https://imp2.ads.linkedin.com https://imp2.ads.linkedin.com https://web.facebook.com https://connect.facebook.net https://track.hubspot.com https://referrer.disqus.com https://www.linkedin.com https://www.linkedin.com/analytics/ https://static.licdn.com https://www.facebook.com https://*.twitter.com  https://www.google.de https://stats.g.doubleclick.net https://www.google.com.ua https://www.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://t.co https://insights.hotjar.com http://static.hotjar.com https://static.hotjar.com
frame-src 'self' https://w.soundcloud.com cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net https://www.google.com/ https://syndication.twitter.com https://platform.twitter.com https://web.facebook.com https://staticxx.facebook.com https://www.facebook.com https://disqus.com https://embed.ted.com https://mva.microsoft.com https://www.youtube.com https://bid.g.doubleclick.net https://vars.hotjar.com
font-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net http://static.hotjar.com https://static.hotjar.com https://fonts.gstatic.com data:
connect-src 'self' cdnssinc.softserveinc.com cdnssinc-prod.softserveinc.com cdnssinc-dev.softserveinc.com cdnssinc-demo.softserveinc.com c.azureedge.net https://api.hubspot.com https://syndication.twitter.com https://jeromeetienne.github.io/ https://www.facebook.com https://links.services.disqus.com http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com
"default-src * 'unsafe-inline' 'unsafe-eval' data:
script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.jquery.com *.adroll.com *.facebook.net *.ads-twitter.com *.twitter.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  www.google-analytics.com ajax.googleapis.com script.crazyegg.com use.fontawesome.com www.google.com cdnjs.cloudflare.com www.gstatic.com grok-2018.local:8890 www.googletagmanager.com d36mpcpuzc4ztk.cloudfront.net baremetrics-dunning.baremetrics.com platform.twitter.com cdn.syndication.twimg.com wchat.freshchat.com js.stripe.com
"child-src 'self' *.google.com *.yandex.com *.webvisor.com *.kameleoon.eu *.facebook.com *.doubleclick.net *.socloz.com *.google.pl *.oyst.eu *.oyst.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com
style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com
img-src 'self' data: https://www.upload.ee https://secure.gravatar.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.axeum.ru axeum.ru *.vk.com vk.com *.youtube.ru youtube.ru *.youtube.com youtube.com *.instagram.com *.cdninstagram.com instagram.com cdninstagram.com x.ulogix.ru ulogin.ru google-maps-utility-library-v3.googlecode.com *.gstatic.com gstatic.com *.doubleclick.net doubleclick.net *.googlesyndication.com googlesyndication.com *.googleapis.com googleapis.com *.google-analytics.com google-analytics.com *.google.com google.com *.google.ru google.ru *.googletagmanager.com googletagmanager.com *.googleadservices.com googleadservices.com *.yadro.ru yadro.ru *.yandex.st *.yandex.ru *.yandex.ua *.yandex.net *.yandex.com yandex.st yandex.ru yandex.ua yandex.net yandex.com ymetrica1.com *.webvisor.org webvisor.org *.webvisor.com webvisor.com *.yastatic.net yastatic.net connect.facebook.net www.facebook.com widgets.2gis.com dadata.ru/api/v2/ widget.flamp.ru chat.chatra.io call.chatra.io st.top100.ru rambler.ru *.rambler.ru *.mail.ru
"default-src data: 'unsafe-inline' 'unsafe-eval' https:
script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:
"default-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com
style-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com 'unsafe-inline'
font-src 'self' data: *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com https://fonts.gstatic.com https://sxt.cdn.skype.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' s1.sentry-cdn.com cdn.ravenjs.com static.zdassets.com ajax.googleapis.com ssl.google-analytics.com www.googleadservices.com analytics.twitter.com platform.twitter.com *.pingdom.net js.stripe.com api.stripe.com statuspage-production.s3.amazonaws.com s3.amazonaws.com *.google.com www.gstatic.com aui-cdn.atlassian.com www.hipchat.com *.atlassian.net *.jira.com *.zopim.com js.sentry-cdn.com browser.sentry-cdn.com
style-src 'self' 'unsafe-inline' s1.sentry-cdn.com s3.amazonaws.com aui-cdn.atlassian.com www.hipchat.com fonts.googleapis.com
img-src 'self' https: data: blob: https://framapiaf.org
style-src 'self' 'unsafe-inline' https://framapiaf.org framasoft.org
media-src 'self' https: data: https://framapiaf.org
connect-src 'self' blob: https://framapiaf.org wss://framapiaf.org framasoft.org
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://maps.googleapis.com https://fonts.googleapis.com https://www.gstatic.com https://cdn.onesignal.com https://www.google-analytics.com https://v2.zopim.com https://onesignal.com https://www.google.com https://developers.google.com"
img-src 'self' https://www.pneu-sport.cz/ https://www.google-analytics.com/ data:  http: https: *.gravatar.com
script-src 'self' 'unsafe-inline' data: https://maps.googleapis.com https://api.instagram.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/
style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com
font-src 'self' data: http: https: fonts.googleapis.com themes.googleusercontent.com
frame-src 'self' https://drive.google.com https://www.google.com/ https://www.facebook.com/"
script-src 'nonce-7f09ae16-fe68-4cc8-94c4-56af26d4e906' 'nonce-899a1de6-2bfa-44e3-845d-659c10ae91eb' 'self' api.stripe.com cdnjs.cloudflare.com https://ajax.googleapis.com https://cdn.au.auth0.com https://secure.gravatar.com https://www.google-analytics.com https://www.google.com/recaptcha/api.js https://www.googleadservices.com https://www.gstatic.com js.stripe.com
connect-src 'self' api.rollbar.com api.stripe.com https://api-prod.certsynonprod.com https://api-prod.certsynonprod.com/api/v1/internal/graphql_query.json https://api-staging.certsynonprod.com https://api-staging.certsynonprod.com/api/v1/internal/graphql_query.json https://api.keen.io https://auth.certsy.com https://auth.certsynonprod.com https://certsy-personal-doc-uploads-099968312121-staging.s3.ap-southeast-2.amazonaws.com https://certsy-personal-doc-uploads-487143725511-prod.s3.ap-southeast-2.amazonaws.com https://cognito-idp.ap-southeast-2.amazonaws.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com https://cdnjs.cloudflare.com
img-src 'self' blob: data: https://*.g.doubleclick.net https://*.googleapis.com https://certsy-personal-doc-uploads-099968312121-staging.s3.ap-southeast-2.amazonaws.com https://certsy-personal-doc-uploads-487143725511-prod.s3.ap-southeast-2.amazonaws.com https://secure.gravatar.com https://www.google-analytics.com https://www.google.ae https://www.google.be https://www.google.bg https://www.google.by https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.br https://www.google.com.eg https://www.google.com.hk https://www.google.com.mx https://www.google.com.my https://www.google.com.ph https://www.google.com.pk https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fi https://www.google.fr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.nl https://www.google.pl https://www.google.ro https://www.google.rs https://www.google.se https://www.google.sk q.stripe.com
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com
frame-src https://auth.certsy.com https://auth.certsynonprod.com https://www.google.com js.stripe.com"
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com *.flextrack.net *.gstatic.com ajax.googleapis.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.google-analytics.com t2.trackalyzer.com *.google.com
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.flextrack.net *.bootstrapcdn.com *.google.com *.googleapis.com
img-src 'self' *.gstatic.com chart.googleapis.com chart.apis.google.com *.google-analytics.com
font-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.gstatic.com themes.googleusercontent.com *.bootstrapcdn.com
frame-src 'self' *.google.com *.flextrack.net *.flextrack.ca *.gstatic.com
script-src 'self' 'unsafe-eval' data: https://*.stripe.com https://*.braintreegateway.com https://api.github.com https://wakatime.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://heapanalytics.com https://*.heapanalytics.com
img-src 'self' data: https://pbs.twimg.com https://checkout.paypal.com https://*.braintreegateway.com heapanalytics.com https://wakatime.disqus.com *.disquscdn.com
frame-src 'self' https://*.stripe.com https://disqus.com www.youtube.com player.vimeo.com checkout.paypal.com
connect-src 'self' api.github.com www.google-analytics.com heapanalytics.com https://avatar-cdn.atlassian.com https://wakatime.disqus.com
"script-src 'self' 'unsafe-eval' www.google-analytics.com connect.facebook.net maps.googleapis.com ds-aksb-a.akamaihd.net 'unsafe-eval' 'unsafe-inline'
frame-ancestors 'self' www.rslcontent.co.uk rslcontent.co.uk wymetro.azurewebsites.net wymetro-staging.azurewebsites.net wymetro-auth.azurewebsites.net wymetro-auth-staging.azurewebsites.net wymetro-uat.azurewebsites.net wymetro-dev.azurewebsites.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com wymetro.widget.custhelp.com wymetroforms.firmstep.com westyorks-ca.firmstep.com platform.twitter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com wymetro.widget.custhelp.com wymetro.custhelp.com www.rnengage.com wymetroforms.firmstep.com www.google.com www.gstatic.com ssl.google-analytics.com westyorks-ca.firmstep.com platform.twitter.com cdn.syndication.twimg.com ajax.aspnetcdn.com
frame-src 'self' r1.dotmailer-surveys.com yorkshire.acisconnect.com www.youtube.com wymetro.acisconnect.com www.youtube-nocookie.com www.communicatoremail.com planner.wymetro.com www.google.com testcheckout.sagepay.com checkout.sagepay.com
script-src 'self' https://mc.yandex.ru https://cdn.datatables.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://cdn.datatables.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'
font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com
img-src 'self' data: http://storage.paybox.money https://mc.yandex.ru https://maps.gstatic.com https://maps.googleapis.com
"script-src * 'unsafe-inline' 'unsafe-eval' file: data: blob: filesystem:"
script-src 'self' http://* 'unsafe-inline' 'unsafe-eval' data: gap:"
"default-src 'self' data: https://*.doubleclick.net https://cdn.upsihologa.com.ua/ https://*.googlesyndication.com/ https://*.google.com/ https://*.googleapis.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://st.mycdn.me/ https://*.kxcdn.com/ https://cdn.upsihologa.com.ua/
child-src 'self' https://*.ted.com https://*.youtube.com/ https://*.youtube-nocookie.com https://*.google.com/ https://*.facebook.com/ https://*.doubleclick.net/ https://*.twitter.com/ https://*.googlesyndication.com/
img-src 'self' https://*.googleapis.com https://*.googleusercontent.com/ https://*.ted.com/ https://*.youtube.com/ https://*.facebook.com/ https://*.ytimg.com/ https://ssl.gstatic.com https://*.googleapis.com/ https://*.doubleclick.net/ https://*.google-analytics.com/ https://*.twitter.com/ https://s0.2mdn.net/ https://*.kxcdn.com/ https://cdn.upsihologa.com.ua/ https://*.googlesyndication.com/ data:
font-src 'self' https://fonts.gstatic.com https://cdn.upsihologa.com.ua/ data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.upsihologa.com.ua/ https://*.pinterest.com/ https://*.google.com/ https://*.google-analytics.com  https://*.googleapis.com https://*.twitter.com/ https://*.kxcdn.com/ https://cdn.upsihologa.com.ua/ https://*.googlesyndication.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.doubleclick.net/ https://*.googleapis.com/ https://assets.pinterest.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.facebook.net https://*.twitter.com https://*.linkedin.com https://www.google-analytics.com https://cdn.jsdelivr.net"
connect-src 'self' https://*.dns-shop.ru https://hls-jp.jwpsrv.com/ https://content.jwplatform.com/ https://mc.yandex.ru/ https://www.google-analytics.com/ https://*.mtproxy.yandex.net/ https://bam.nr-data.net https://stats.g.doubleclick.net/ https://www.google.com/ads/ https://m.addthis.com/live/red_lojson/ https://s7.addthis.com/l10n/ https://top-fwz1.mail.ru/ https://bot.aimylogic.com/restapi/chatwidget/"
"frame-ancestors http://www.vistaprint.jp https://www.vistaprint.jp http://vistaprint.jp https://vistaprint.jp
script-src 'self' 'unsafe-inline' https://www.mappila.com https://*.tutorhunt.com https://*.googleapis.com www.google-analytics.com https://maps.google.com  s3.amazonaws.com
style-src 'unsafe-inline' 'self' s3.amazonaws.com https://*.googleapis.com https://www.mappila.com
img-src 'self' data: www.google-analytics.com maps.google.com openlayers.org https://openlayers.org https://www.mappila.com data:https://*.tile.openstreetmap.org https://*.google.com https://*.googleapis.com
connect-src 'self' api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com
font-src 'self' data: fonts.gstatic.com fonts.typekit.net use.typekit.com use.typekit.net js.intercomcdn.com
img-src 'self' data: p.typekit.net js.intercomcdn.com static.intercomassets.com uploads.intercomcdn.com *.squarespace.com uploads.intercomusercontent.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com *.squarespace.com use.typekit.com use.typekit.net fonts.googleapis.com app.intercom.io widget.intercom.io js.intercomcdn.com fast.wistia.com fast.wistia.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net *.squarespace.com fast.wistia.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' bbvaopen4u.com www.googletagmanager.com cdnjs.cloudflare.com *.google-analytics.com connect.facebook.net cstatic.weborama.fr t.co cse.google.com www.google.com *.googleapis.com platform.twitter.com cdn.syndication.twimg.com
img-src 'self' bbvaopen4u.com www.google-analytics.com secure.adnxs.com es-gmtdmp.mookie1.com stats.g.doubleclick.net data: https:
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googleapis.com www.google.com platform.twitter.com
frame-src bbvaopen4u.com bbvaapimarket.solution.weborama.fr cse.google.com www.youtube.com platform.twitter.com syndication.twitter.com
script-src 'self' 'unsafe-eval' https://assets.adobedtm.com/ https://*.demdex.net/ https://maps.googleapis.com/maps/ https://maps.googleapis.com/maps-api-v3/
script-src 'self' https://cdn.userecho.com https://client.getinchat.com https://cyberyozh.com https://ajax.googleapis.com https://www.gstatic.com https://www.google.com https://mc.yandex.ru https://www.googletagmanager.com https://cyberyozh.userecho.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://cyberyozh.com http://www.refer.ru https://www.google-analytics.com https://cdn.userecho.com https://client.getinchat.com https://mc.yandex.ru
style-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cyberyozh.com https://cyberyozh.userecho.com https://client.getinchat.com 'unsafe-inline'
font-src 'self' https://cyberyozh.com https://maxcdn.bootstrapcdn.com https://cyberyozh.userecho.com https://client.getinchat.com https://fonts.gstatic.com
frame-src https://mc.yandex.ru https://www.google.com https://cyberyozh.userecho.com https://client.getinchat.com
connect-src https://www.google-analytics.com https://*.box.com https://cyberyozh.userecho.com https://client.getinchat.com https://mc.yandex.ru https://cyberyozh.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: uhaul.net *.uhaul.net *.uhaul.com uhaul.com   *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.bing.com *.virtualearth.net *.datatables.net signalr.net cdnjs.cloudflare.com *.jquery.com   jquery.com *.boldchat.com *.youtube.com *.youtube-nocookie.com *.kaltura.com http://uhaul.net http://uhaul.com *.photobucket.com *.deviantart.net   i.imgur.com cdn.meme.am tumblr.com *.twilio.com *.twil.io *.aspnetcdn.com *.uhaulinvestorsclub.com https://localhost:9732 http://localhost:8732
"default-src https: http: 'unsafe-eval' 'unsafe-inline' 'self' ws: wss:
font-src http: https: 'self' data: blob:
script-src https: http: 'unsafe-eval' 'unsafe-inline' 'self' ws: wss:"
"default-src 'self' 'unsafe-inline' *.api.sociaplus.com *.youtube.com *.hotjar.com *.livechatinc.com pushcrew.com paybyme.gamesultan.com *.criteo.com *.criteo.net *.facebook.net *.facebook.com *.doubleclick.net *.googleapis.com gamesultan.api.useinsider.com unification.api.useinsider.com *.useinsider.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.livechatinc.com *.google-analytics.com *.googleadservices.com *.hotjar.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.pushcrew.com js.hs-scripts.com *.hs-analytics.net pushcrew.com *.doubleclick.net *.criteo.net *.criteo.com *.facebook.com gamesultan.api.useinsider.com *.useinsider.com *.api.sociaplus.com data:
img-src 'self' data: gamesultan.blob.core.windows.net gamesultancdn.azureedge.net *.google-analytics.com *.livechatinc.com *.doubleclick.net cdn.pushcrew.com *.facebook.com *.hubspot.com *.google.com *.google.com.tr
"frame-src 'self' www.bancatamoios.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
"default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
script-src https: 'unsafe-inline' 'unsafe-eval' data: https://*.custhelp.com https://*.ioam.de
style-src 'self' 'unsafe-inline' https://www.parship.com https://www.sovendus.com https://*.custhelp.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://partnerboerse.parship.de
font-src data: 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/
connect-src 'self' https://*.pndsn.com https://www.google-analytics.com/ https://*.facebook.com https://*.ioam.de https://*.sovendus.com https://*.taboola.com https://translate.googleapis.com
"frame-ancestors 'self' icrc.org *.icrc.org icrcproject.org *.icrcproject.org forum-icrc.org www.forum-icrc.org"
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost:* https://*.powr.io https://*.pinterest.com https://cdn.lightwidget.com js.hs-scripts.com https://unpkg.com https://www.google.com *.google.com *.google-analytics.com http://js.hs-analytics.net https://maps.googleapis.com https://cdn.firebase.com https://cdnjs.cloudflare.com https://d2zah9y47r7bi2.cloudfront.net https://*.firebaseio.com https://*.vo.msecnd.net https://browser-update.org https://api.instagram.com http://fast.fonts.net https://fast.fonts.net http://browser-update.org http://cdn.datatables.net http://cdn.heapanalytics.com https://ajax.googleapis.com https://www.googletagmanager.com https://use.typekit.net https://chat.milittisales.com https://crm.imaxcorp.com *.list-manage.com https://ct.capterra.com http://lightwidget.com https://cdn.jsdelivr.net http://www.googleadservices.com https://www.googleadservices.com https://www.gstatic.com https://chimpstatic.com https://*.facebook.net/ https://cdn.segment.com http://cdn.segment.com https://api.segment.io https://s.yimg.com http://sp.analytics.yahoo.com
style-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fast.fonts.net https://fonts.googleapis.com http://fast.fonts.net http://cdn.datatables.net https://cdn-images.mailchimp.com
img-src 'self' data: track.hubspot.com https://studiowebware.secure.force.com https://heapanalytics.com https://images.unsplash.com http://via.placeholder.com https://www.google.com *.google.com https://www.google-analytics.com *.google-analytics.com *.gstatic.com https://maps.googleapis.com *.googleapis.com https://usage.trackjs.com *.global.ssl.fastly.net *.repzio.com https://b2bbucket.s3.amazonaws.com https://s3.amazonaws.com https://scontent.cdninstagram.com http://cdn.datatables.net https://tradegecko-images.s3.amazonaws.com https://stats.g.doubleclick.net https://cdn.b2bdirect.io https://assets.bwconnect.com https://googleads.g.doubleclick.net https://www.facebook.com https://salesrepimages.s3.amazonaws.com
media-src 'self' https://b2bbucket.s3.amazonaws.com https://player.vimeo.com http://www.greenhillaudio.com
frame-src https://*.powr.io https://*.facebook.com https://cdn.lightwidget.com https://studiowebware.secure.force.com https://player.vimeo.com https://www.youtube.com https://*.firebaseio.com https://www.google.com https://showroom.gso360.com https://*.issuu.com https://*.repzio.com https://crm.imaxcorp.com http://lightwidget.com
font-src 'self' https://cdn.lightwidget.com https://cdn.joinhoney.com data: https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://use.typekit.net
connect-src 'self' https://*.powr.io ws://192.168.1.124:* ws://10.0.0.133:* ws://localhost:* http://localhost:* https://b2bbucket.s3.amazonaws.com https://repziowebapizipcodes.azurewebsites.net https://maps.googleapis.com wss://*.firebaseio.com https://capture.trackjs.com https://clconnect.coltonlane.com https://dc.services.visualstudio.com https://repziotest.azurewebsites.net https://crm.imaxcorp.com https://*.repzio.com https://api.segment.io https://www.google-analytics.com *.google-analytics.com *.azurewebsites.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:
script-src 'self' 'unsafe-eval' 'unsafe-inline'  www.google.com www.google-analytics.com ssl.google-analytics.com js.stripe.com
img-src 'self' data: www.google-analytics.com g.stripe.com
child-src assets.braintreegateway.com tst.kaptcha.com ssl.kaptcha.com kaptcha.com
connect-src wss://notifier.bitskins.com:8443 wss://notifiter.bitskins.com:443 wss://notifier.bitskins.com 'self' google-analytics.com www.google-analytics.com api.sandbox.braintreegateway.com api.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analytics.braintreegateway.com
font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com
media-src renders.bitskins.com dev.bitskins.com bitskins.com www.bitskins.com
script-src 'self' www.google-analytics.com cdnjs.cloudflare.com js.pusher.com cdn.transifex.com js.braintreegateway.com api.sandbox.braintreegateway.com api.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analystics.braintreegateway.com connect.facebook.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com"
style-src 'unsafe-inline' fonts.googleapis.com https://kapitalbank.az https://livechat-static.brandembassy.com
font-src data: https://kapitalbank.az dq4irj27fs462.cloudfront.net https://fonts.gstatic.com https://livechat-static.brandembassy.com
connect-src wss://livechat-ws.brandembassy.com https://livechat-ws.brandembassy.com https://kapitalbank.az https://mc.yandex.ru https://onesignal.com https://www.facebook.com https://www.google-analytics.com
"connect-src 'self' https://mixfacts.ru *.yandex.ru https://mc.yandex.ru *.google-analytics.com https://pushdata.sendpulse.com:4434
font-src  data: 'self' https://mixfacts.ru yastatic.net https://yastatic.net fonts.gstatic.com *.bootstrapcdn.com
frame-src 'self' mixfacts.ru http://m.vk.com https://m.vk.com https://login.vk.com http://vk.com https://vk.com www.facebook.com platform.twitter.com https://trustedads.adtrustmedia.com yastatic.net https://yastatic.net https://st.yandexadexchange.net http://awaps.yandex.ru *.doubleclick.net https://googleads.g.doubleclick.net *.googlesyndication.com yandexadexchange.net https://www.youtube.com www.youtube.com youtube.com youtube.ru www.youtube.ru *.orchardproject.net https://relap.io
img-src data: 'self' https://mixfacts.ru cdn.mixfacts.ru img1.mixfacts.ru img2.mixfacts.ru *.sendpulse.com https://cdn.sendpulse.com *.vk.me *.rutarget.ru *.mythings.com *.targetix.net *.adriver.ru cdn.jsdelivr.net http://vk.com https://vk.com passets.pinterest.com *.yandex.ru *.yandex.net yastatic.net https://yastatic.net https://mc.yandex.ru https://avatars-fast.yandex.net https://favicon.yandex.net https://an.yandex.ru counter.yadro.ru counter.rambler.ru *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net *.gstatic.com https://relap.io https://cdn.relap.io
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://mixfacts.ru cdn.mixfacts.ru cdn.jsdelivr.net https://cdn.sendpulse.com https://trustedads.adtrustmedia.com http://trustedads.adtrustmedia.com http://vk.com https://vk.com platform.twitter.com *.pinterest.com yastatic.net *.yandex.ru *.yandex.net https://an.yandex.ru https://yastatic.net https://mc.yandex.ru https://pagead2.googlesyndication.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.googleapis.com  *.gstatic.com counter.rambler.ru https://relap.io
style-src 'self' 'unsafe-eval' 'unsafe-inline' mixfacts.ru cdn.mixfacts.ru https://cdn.sendpulse.com cdn.jsdelivr.net yastatic.net https://yastatic.net fonts.googleapis.com *.bootstrapcdn.com https://relap.io
frame-src 'self' utils.ssl.cdn.cra.cz www.youtube.com www.google.com api.mapy.cz
"default-src * 'self' 'unsafe-inline' 'unsafe-eval'
"default-src gap://ready file://* data: *
script-src 'self'  https://* *.omtrdc.net s.btstatic.com www.googleadservices.com www.adobetag.com s.thebrighttag.com www.google-analytics.com pixel.rubiconproject.com ospe.costa.it d.turn.com bam.nr-data.net www.googletagmanager.com segment-pixel.invitemedia.com ds-aksb-a.akamaihd.net aws.tracker.squidanalytics.com platform.twitter.com apis.google.com connect.facebook.net aws.tracker.squidanalytics.com tagmanager.google.com *.criteo.net *.criteo.com *.doubleclick.net *.sepage.fr *.turn.com *.qualtrics.com *.youtube.com *.costa.it *.clickpoint.com *.hariken.co *.zanox.com server-it.imrworldwide.com https://d.turn.com https://bam.nr-data.net https://webcams.costa.it 'unsafe-inline' 'unsafe-eval'"
"frame-ancestors 'self' *.smhi.se klimatanpassning.se sudplan.eu nordicadaptation2018.net http://infoteve.com
"frame-ancestors 'self' http://jobspreader.com https://jobspreader.com http://job-server.net https://job-server.net http://www.jobnews.info https://www.jobnews.info"
form-action 'self' https://app.mailerlite.com https://www.facebook.com https://connect.facebook.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://builder-assets.unbounce.com https://use.fontawesome.com https://ajax.googleapis.com https://i.simpli.fi https://assets.zendesk.com https://static.zdassets.com https://v2.zopim.com https://secure.livechatinc.com https://cdn.livechatinc.com https://connect.facebook.net https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://s.btstatic.com https://jss.trumeasure.com https://s.thebrighttag.com https://www.google-analytics.com https://accounts.livechatinc.com https://www.youtube.com https://s.ytimg.com https://static.mailerlite.com
style-src 'self' 'unsafe-inline' blob: https://p.typekit.net https://use.fontawesome.com https://builder-assets.unbounce.com https://use.typekit.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com
default-src *.peterdavehello.org *.wp.com secure.gravatar.com www.paypal.com www.google-analytics.com *.twitter.com *.twimg.com stats.g.doubleclick.net wprp.zemanta.com https: data: 'unsafe-inline' 'unsafe-eval' 'self'
"default-src 'self' code.jivosite.com mc.yandex.ru www.google-analytics.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jivosite.com https://localhost:24738 mc.yandex.ru www.google-analytics.com
style-src 'self' 'unsafe-inline' code.jivosite.com mc.yandex.ru www.google-analytics.com
connect-src 'self' code.jivosite.com http://localhost:24738 https://localhost:24738 mc.yandex.ru www.google-analytics.com
"frame-ancestors ipaper.ipapercms.dk magasiner.stark.dk kampagner.stark.dk tilbudprivate.stark.dk tilbudprof.stark.dk *.adobe.com 'self'"
"default-src 'self' *.fuelrats.com *.stripe.com wss://*.fuelrats.com
script-src 'self' 'nonce-04534f35-7622-44a8-a928-89848fc701ad' 'strict-dynamic' 'unsafe-inline'
style-src 'self' 'unsafe-inline' *.fuelrats.com *.stripe.com
img-src 'self' *.fuelrats.com *.stripe.com api.adorable.io *.wp.com
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.youtube.com *.nr-data.net hello.myfonts.net restapi.mailplus.nl jira.presteren.nu:8443 js-agent.newrelic.com webstats.surf.nl surfspot.piwikpro.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io assets.zendesk.com www.google-analytics.com www.googletagmanager.com https://www.google.com www.google.com www.google.nl https://www.google.nl www.googleadservices.com *.doubleclick.net
img-src 'self' data: www.magecomp.com www.xtento.com static.mailplus.nl www.schoolspot.nl v2.zopim.com webstats.surf.nl www.google-analytics.com www.google.nl www.google.com *.doubleclick.net
"frame-ancestors 'self' ocfl.net *.ocfl.net onetgov.net *.onetgov.net orangecountyfl.net *.orangecountyfl.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' app.pendo.io cdn.pendo.io pendo-static-5181968941056000.storage.googleapis.com pendo-io-static.storage.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js apis.google.com https://www.googletagmanager.com api.instagram.com https://tagmanager.google.com/debug https://app-rsrc.getbee.io/plugin/beeplugin.js https://loader.getbee.io https://www.googletagmanager.com api.instagram.com https://bat.bing.com/bat.js https://www.googleadservices.com/pagead/conversion.js https://connect.facebook.net/en_us/fbevents.js
"default-src 'self' http: https: 'unsafe-inline'
style-src 'self' platform.twitter.com *.twimg.com *.googleapis.com *.cloudfront.net 'unsafe-inline'
script-src 'self' * 'unsafe-eval' 'unsafe-inline' data:"
default-src https: data: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.cloudfront.net *.cloudfl.net *.pingdom.net *.googleapis.com *.instagram.com *.google.com *.gstatic.com *.twitter.com *.cloudflare.com cdn.rawgit.com rec.smartlook.com *.facebook.net
img-src 'self' data:  *.cloudflare.com *.ggpht.com *.fbcdn.net *.facebook.com  *.facebook.net *.cdninstagram.com *.googleapis.com maps.gstatic.com www.google.com www.google.cz www.google-analytics.com stats.g.doubleclick.net *.prg.aero apollo.prg.aero rec.smartlook.com
frame-src 'self' *.prg.aero prg.fltmaps.com www.google.com *.twitter.com rec.smartlook.com www.flightconnections.com
"frame-ancestors https://*.petsafe.net https://*.petsafe.com https://*.sportdog.com https://radiosystemscorporation.my.s$"
"default-src 'self' 'unsafe-inline' data: https://*.haplogroup.org
font-src 'self' data: 'unsafe-inline' https://*
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://stats.g.doubleclick.net
img-src 'self' data: https://www.gravatar.com https://img.shields.io https://www.google-analytics.com https://stats.g.doubleclick.net
"script-src 'self' default-src https: data: 'unsafe-inline' 'unsafe-eval'"
"frame-ancestors 'self' https://*.ntalife.com https://*.ntarep.com https://*.ntalifebsg.com https://www.youtube.com
child-src 'self' data: ms-appx-web: ghbtns.com runkit.com platform.twitter.com
img-src 'self' data: *.2mdn.net *.adsafeprotected.com ad.atdmt.com *.buysellads.com *.buysellads.net *.c3tag.com *.convertro.com ad.doubleclick.net www.google-analytics.com www.launchbit.com launchbit.com assets.servedby-buysellads.com *.serving-sys.com
font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net
frame-src 'self' data: ms-appx-web: ghbtns.com runkit.com platform.twitter.com
script-src 'self' *.carbonads.com srv.carbonads.net adn.fusionads.net www.google-analytics.com cdn.jsdelivr.net embed.runkit.com
connect-src lodash.report-uri.com lodash.report-uri.io 'self' ms-appx-web: ghbtns.com runkit.com platform.twitter.com *.2mdn.net *.adsafeprotected.com ad.atdmt.com *.buysellads.com *.buysellads.net *.c3tag.com *.convertro.com ad.doubleclick.net www.google-analytics.com www.launchbit.com launchbit.com assets.servedby-buysellads.com *.serving-sys.com fonts.gstatic.com cdn.jsdelivr.net *.carbonads.com srv.carbonads.net adn.fusionads.net embed.runkit.com
connect-src 'self' https://tutanota.com https://api.github.com https://www.reddit.com
"script-src 'self' *.visual-paradigm.com *.google-analytics.com  *.recaptcha.net *.gstatic.cn *.google.com *.gstatic.com *.googleapis.com graph.facebook.com share.yandex.ru *.tawk.to *.addthis.com *.addthisedge.com *.linkedin.com cdn.jsdelivr.net *.cloudfront.net 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' d4i78hkg1rdv3.cloudfront.net static.hoshinplan.com *.userreport.com api.mixpanel.com
child-src 'self' *.stripe.com accounts.google.com docs.google.com *.userreport.com www.youtube.com www.googletagmanager.com
connect-src 'self' performance.typekit.net d4i78hkg1rdv3.cloudfront.net *.hoshinplan.com ws://*.hoshinplan.com ws://*.hoshinplandev.com:5000 *.userreport.com api.mixpanel.com sqs.us-east-1.amazonaws.com *.inspectlet.com wss://*.inspectlet.com graph.microsoft.com
font-src 'self' *.typekit.net fonts.gstatic.com d4i78hkg1rdv3.cloudfront.net static.hoshinplan.com staticdoc.hoshinplan.com data:
img-src 'self' data: www.googleadservices.com googleads.g.doubleclick.net www.google.com www.google.es q.stripe.com p.typekit.net ping.typekit.net doc.hoshinplan.com d4i78hkg1rdv3.cloudfront.net static.hoshinplan.com staticdoc.hoshinplan.com hoshinplan.s3-eu-west-1.amazonaws.com shield.sitelock.com *.mxpnl.com stats.g.doubleclick.net www.google-analytics.com *.userreport.com sqs.us-east-1.amazonaws.com *.inspectlet.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googleadservices.com *.stripe.com use.typekit.net d4i78hkg1rdv3.cloudfront.net static.hoshinplan.com staticdoc.hoshinplan.com apis.google.com www.dropbox.com app.box.com *.userreport.com settingsbucket.s3.amazonaws.com www.google-analytics.com *.mxpnl.com www.googletagmanager.com cdn.inspectlet.com js.live.net
style-src 'self' 'unsafe-inline' *.stripe.com use.typekit.net fonts.googleapis.com d4i78hkg1rdv3.cloudfront.net static.hoshinplan.com staticdoc.hoshinplan.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tagmanager.google.com https://lpcdn.lpsnmedia.net https://lptag.liveperson.net https://lo.v.liveperson.net https://www.google-analytics.com https://www.googletagmanager.com http://www.googleadservices.com http://static.hotjar.com https://script.hotjar.com https://nxtck.com https://cdn.taboola.com http://bat.bing.com https://googleads.g.doubleclick.net https://accdn.lpsnmedia.net https://connect.facebook.net https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://tagmanager.google.com https://www.googletagmanager.com https://so.veritascard.net
style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com http://fonts.googleapis.com
default-src 'self' https://in.hotjar.com https://vars.hotjar.com https://www.facebook.com https://lpcdn.lpsnmedia.net https://bid.g.doubleclick.net https://www.google.com https://www.carte-prepayee.fr https://gateway.neosurf.com/ https://sandbox.checkout.com/ https://api2.checkout.com/ https://so.veritascard.net
font-src 'self' data: application http://fonts.gstatic.com https://fonts.gstatic.com
connect-src 'self' ws://so-staging.veritascard.net ws://so.veritascard.net wss://*.hotjar.com https://www.facebook.com https://in.hotjar.com https://so-staging.veritascard.net https://so.veritascard.net https://bat.bing.com https://sentry.hotjar.com https://tagmanager.google.com
"default-src 'self' ecn.dev.virtualearth.net https://www.facebook.com/plugins/likebox.php https://connect.humanapi.co http://nypdevlogin.mynyp.org/adajsutility.asmx/issessionexpired
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com https://dev.virtualearth.net/ https://ecn.dev.virtualearth.net/ https://connect.humanapi.co/connect.js https://connect.humanapi.co/store.min.js https://statse.webtrendslive.com/
img-src 'self' https://connect.humanapi.co/spinner.gif https://ecn.dev.virtualearth.net/ https://*.ssl.ak.tiles.virtualearth.net/ https://t3.ssl.ak.dynamic.tiles.virtualearth.net/comp/ch/3 https://statse.webtrendslive.com/ data: blob:
frame-ancestors 'self' mychart.weill.cornell.edu login.mynyp.org myapps.nyp.org mynyp.org et1089.epichosted.com nyp.org mychart-pub.et1089.epichosted.com
"default-src 'self' https://*.doubleclick.net https://*.google-analytics.com https://*.sharethis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://ajax.googleapis.com https://cse.google.com http://www.google.com http://use.typekit.com http://w.sharethis.com https://*.googletagmanager.com https://*.google-analytics.com https://code.jquery.com https://use.typekit.net https://*.sharethis.com https://*.facebook.net
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://*.googleapis.com https://*.google.com
img-src 'self' data: https://www.google-analytics.com http://www.cancer.org.au https://*.doubleclick.net https://platform-cdn.sharethis.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.facebook.com https://*.typekit.net
font-src 'self' data: https://*.typekit.net https://cdnjs.cloudflare.com https://fonts.gstatic.com
frame-src 'self' https://www.youtube.com https://cse.google.com https://*.doubleclick.net https://www.sunsmart.com.au https://c.sharethis.mgr.consensu.org https://www.google.com/"
"script-src 'unsafe-inline' 'unsafe-eval' 'self' http://connect.facebook.net https://connect.facebook.net https://cdn.optimizely.com http://www.google-analytics.com https://jira.flipboard.com https://cdn.flipboard.com https://apis.google.com https://twitter.com https://www.google.com https://www.gstatic.com https://s.flipboard.com http://ue.flipboard.com https://ue.flipboard.com
script-src 'self' 'unsafe-inline' 'sha256-yd3cb7ukkt0bsna+qohjxhi9jr2suzazz9shraec7we=' 'sha256-7icenvi9nndywa+qpfklowtdzzo0lln62xjnnyiqvv0=' 'sha256-jlk5+5gzm+t7btu+7z0nu/xs/oa3qylk2a1ltslmddc=' 'sha256-v3s9n0v1k7uzerqrgmw2qgame8dsdehnmnc0muuis5s=' 'sha256-3rgxiyhpi+9fiijafmz/gxeqyk6gzm6zvfq1dywrkkm=' 'sha256-1xtib6mv1iikz5iz9cxa5lenfeg8d0xeh3fl9l8nbqo=' 'sha256-mjdghr9axy+6owaglns/xgncyg1uhd2u4pl8vi7+xcy=' 'sha256-x0mo1ctujstmrrtcvugozklw9+m+ukpcoxue1c5xacg=' https://www.google-analytics.com https://maps.googleapis.com https://global-uploads.webflow.com https://code.jquery.com https://ajax.googleapis.com https://js-agent.newrelic.com https://bam.nr-data.net https://use.typekit.net https://d1tdp7z6w94jbb.cloudfront.net
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://global-uploads.webflow.com
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://global-uploads.webflow.com https://uploads-ssl.webflow.com
connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://webflow.com https://p.typekit.net https://use.typekit.net https://bam.nr-data.net
font-src  data: https://fonts.gstatic.com https://uploads-ssl.webflow.com https://use.typekit.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.zendesk.com https://*.youtube.com https://*.ytimg.com https://www.surveygizmo.eu https://*.google.at https://*.googleapis.com https://*.google.com/ https://www.google-analytics.com https://www.gstatic.com https://*.facebook.net https://*.facebook.com https://ssl.google-analytics.com https://*.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/
img-src 'self' https://www.cashpresso.com https://*.cashpresso.com https://www.surveygizmo.eu https://ssl.google-analytics.com https://*.google.com https://*.google.at https://www.google-analytics.com data: https://stats.g.doubleclick.net https://*.facebook.com https://secure.gravatar.com
style-src 'self' 'unsafe-inline' https://www.surveygizmo.eu https://*.cashpresso.com https://npmcdn.com/ https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/ https://fonts.googleapis.com https://*.bootstrapcdn.com
font-src 'self' data: https://*.bootstrapcdn.com/ https://fonts.gstatic.com
object-src data: https://*.cashpresso.com https://*.facebook.net https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://*.gravatar.com https://*.gstatic.com https://stats.g.doubleclick.net https://www.facebook.com https://*.google.com https://www.google.at https://www.google.de https://s.w.org https://*.bootstrapcdn.com
child-src 'self' https://*.facebook.com https://*.facebook.com https://*.youtube.com https://pipedrivewebforms.com https://www.google.com
script-src 'self' 'unsafe-inline' www.google-analytics.com fonts.googleapis.com google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com
default-src 'self' 'unsafe-inline' https://www.kidsafeseal.com https://d2ujxxisxavmxa.cloudfront.net https://d2eixtdner5dzd.cloudfront.net https://storage.toytalk.com
frame-src 'self' https://www.toytalk.com https://www.facebook.com https://www.youtube.com https://platform.twitter.com"
"default-src 'unsafe-eval' 'self' 'unsafe-inline' http: https: data:
img-src 'self' secure.gravatar.com webstats.redump.net dfactory.eu
script-src 'self' 'unsafe-inline' 'unsafe-eval' webstats.redump.net
connect-src 'self' data: https://ajax.googleapis.com https://de.api4load.biz https://pfrest.pboss.de https://pfrest.petafuel.net https://pfrest.wozutesten.de https://translate.googleapis.com https://www.fndsda.net https://www.paypal.com
frame-src 'self' data: https://ad.ad-srv.net https://client.comprigo.com https://hal9000.redintelligence.net https://optimize.google.com https://pixel.bsmartdata.com/ https://r.adc-srv.net https://tools.petafuel.de https://www.fndsda.net https://www.googletagmanager.com https://www.paypal.com https://www.sandbox.paypal.com
script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://ad4mat.de https://bid.g.doubleclick.net https://blog.onlinekonto.de https://cdn.pboss.de https://cdn.petafuel.net https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://containertags.belboon.de https://data1.eurosty.com https://data1.mein-bmi.com https://data1.routenplaner-karten.com https://data1.ubersetzung-app.com https://eu5.heatmap.it https://googleads.g.doubleclick.net https://imgsrv.io https://maytrics.marvellousmachine.net https://online.adservicemedia.dk https://optimize.google.com https://orangebuddies.go2cloud.org https://pstatic.davebestdeals.com https://s3.eu-central-1.amazonaws.com https://ssl.google-analytics.com https://static.donation-tools.org https://tagmanager.google.com https://tpc.googlesyndication.com https://translate.googleapis.com https://www.financeads.net https://www.fndsda.net https://www.google-analytics.com https://www.google.com/ads/user-list https://www.googleadservices.com https://www.googletagmanager.com https://www.paypal.com https://www.paypalobjects.com https://www.performancehero.de
style-src 'self' data: 'unsafe-inline' https://cdn.pboss.de https://cdn.petafuel.net https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://fonts.googleapis.com https://optimize.google.com https://translate.googleapis.com https://u.heatmap.it https://www.fndsda.net
frame-src 'self' yastatic.net api-maps.yandex.ru googleads.g.doubleclick.net gisbiz.ru http://gisbiz.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yastatic.net *.googlesyndication.com googleads.g.doubleclick.net *.google-analytics.com *.google.ru *.google.com *.google.com.ua https://www.googletagmanager.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' vietcombank.com.vn *.vietcombank.com.vn *.google-analytics.com *.verisign.com *.norton.com
style-src 'self' 'unsafe-inline' vietcombank.com.vn *.vietcombank.com.vn
img-src * 'self' data: vietcombank.com.vn *.vietcombank.com.vn *.google-analytics.com stats.g.doubleclick.net www.gstatic.com *.verisign.com *.norton.com *.longtailvideo.com
font-src 'self' data: vietcombank.com.vn *.vietcombank.com.vn
"default -src self https: data: unsafe-inline unsafe-eval"
"default-src data: https: 'unsafe-inline' 'unsafe-eval'
"object-src 'unsafe-inline' *.taschen.com *.taschen-extra.com *.youtube.com *.soundcloud.com *.issuu.com *.instagram.com *.reallythere.com *.matterport.com *.google-analytics.com *.googleadservices.com *.google.com *.rmtag.com *.pleisty.com
"default-src 'self' https://*.cradlepointecm.com https://d19qo65y7axv71.cloudfront.net/static/ blob:
font-src 'self' https://fonts.gstatic.com https://hello.myfonts.net https://d19qo65y7axv71.cloudfront.net/static/ data:
style-src 'self' 'unsafe-inline' https://hello.myfonts.net https://fonts.googleapis.com https://d19qo65y7axv71.cloudfront.net/static/ https://app.pendo.io https://cdn.pendo.io https://pendo-static-6118640295346176.storage.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://feed.useriq.com https://secure.useriq.com https://www.google-analytics.com https://d19qo65y7axv71.cloudfront.net/static/ https://app.pendo.io https://cdn.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-6118640295346176.storage.googleapis.com https://fullstory.com
img-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://secure.useriq.com https://www.google-analytics.com https://web-qa.cradlepoint.com https://cradlepoint.com https://d19qo65y7axv71.cloudfront.net/static/ https://app.pendo.io https://cdn.pendo.io https://pendo-static-6118640295346176.storage.googleapis.com
connect-src 'self' https://*.cradlepointecm.com https://secure.useriq.com https://app.pendo.io https://fullstory.com https://rs.fullstory.com
script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.jquery.com *.createsend1.com *.hotjar.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://yastatic.net https://www.calend.ru https://mc.yandex.ru https://informer.yandex.ru https://an.yandex.ru https://counter.rambler.ru https://app.renteres.ru https://cdnjs.cloudflare.com https://j3b9v3f8.ssl.hwcdn.net https://cdn.jsdelivr.net https://ajax.googleapis.com https://www.google.com https://www.gstatic.com
img-src 'self' data: https://www.calend.ru https://app.renteres.ru https://0.gravatar.com https://1.gravatar.com https://2.gravatar.com https://secure.gravatar.com https://counter.yadro.ru https://favicon.yandex.net https://mc.yandex.ru https://informer.yandex.ru https://avatars.mds.yandex.net https://an.yandex.ru https://kraken.rambler.ru
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://app.renteres.ru
font-src 'self' data: https://fonts.gstatic.com  https://netdna.bootstrapcdn.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' compservice.in.ua *.jivosite.com ulogin.ru *.google-analytics.com *.google.com *.gstatic.com
"frame-ancestors http://*.house.gov https://*.house.gov http://*.senate.gov https://*.senate.gov http://*.loc.gov https://*.loc.gov"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bhuntr.com *.bhuntr.com *.bountyhunter.co *.cloudfront.net *.google.com https://adservice.google.com.tw https://adservice.google.com https://*.googleadservices.com *.googletagservices.com *.googletagmanager.com *.googlevideo.com *.twitter.com *.intercom.io *.intercomcdn.com *.amplitude.com https://www.gstatic.com https://connect.facebook.net https://*.facebook.com https://securepubads.g.doubleclick.net https://www.youtube.com https://s.ytimg.com http://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://static.doubleclick.net https://www.google-analytics.com https://publisherconsole.appspot.com https://scdn.line-app.com https://googleads.g.doubleclick.net cdn.ampproject.org *.sentry-cdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.google-analytics.com *.google.com *.gstatic.com *.hotjar.com
frame-src operator-uat2.cvrt.ie https://www.google.com/recaptcha* *.cvrt.ie *.hotjar.com
script-src 'self' 'unsafe-inline' 'strict-dynamic' 'nonce-898be4ceb4cf4585fa8256e34dc7620d0cf1b92a7db90d15def5eea74d94b947a7a7a84368aef35ae9b3ea474be8588c22f6e483fc0c37fdcfc4d96151233341' *.googleapis.com www.google.com www.google-analytics.com www.gstatic.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net mylivechat.com *.mylivechat.com cdnjs.cloudflare.com connect.facebook.net platform.twitter.com static.addtoany.com assets.pinterest.com cdn1htt.azureedge.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.facebook.com
"script-src 'nonce-dfc9c82bb8f982b75146a7c3afd9e7c8073498f6' 'strict-dynamic' https: http:
img-src 'self' https://lastpass.com data: https://analytics.twitter.com/i/adsct https://www.google-analytics.com/
connect-src 'self' https://lastpass.com wss://*.lastpass.com https://5399020466.log.optimizely.com https://pollserver.lastpass.com https://loglogin.lastpass.com https://provisioning-api-prod.service.lastpass.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://lastpass.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://lastpass.com https://www.youtube.com https://*.ytimg.com https://*.optimizely.com https://lp-cdn.lastpass.com
font-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://lastpass.com
frame-src 'self' https://ssl.gstatic.com https://www.google.com https://www.youtube.com https://cdn.lmiutil.com"
script-src * data: 'unsafe-eval' 'unsafe-inline' https://adventuregamers.com https://vimeo.com
sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-pointer-lock
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://de8of677fyt0b.cloudfront.net https://www.google-analytics.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://script.hotjar.com https://static.hotjar.com https://plugins.help.com https://maxcdn.bootstrapcdn.com https://secure.comodo.net https://www.trustlogo.com https://secure.comodo.com https://cdn.optimizely.com https://www.google.com https://www.gstatic.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.googleapis.com
font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com
img-src 'self' data: https://col.eum-appdynamics.com https://secure.comodo.com https://www.google-analytics.com https://www.trustlogo.com
frame-src 'self' https://cert-manager.com https://plugins.help.com https://vars.hotjar.com https://www.trustlogo.com https://secure.comodo.net https://secure.comodo.com https://www.youtube.com https://www.google.com
object-src 'self' https://secure.comodo.net https://secure.comodo.com https://www.youtube.com
"default-src 'self' 'unsafe-inline' https://*.cutie.cafe/ https://groupbundl.es/ https://*.groupbundl.es/ https://cdn.cutie.cafe
font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/ https://groupbundl.es/
style-src https://fonts.googleapis.com/ 'self' 'unsafe-inline' https://groupbundl.es/
img-src 'self' https://*.cutie.cafe/ https://groupbundl.es/ https://*.groupbundl.es/ https://cdn.cutie.cafe data:
frame-src 'self' app.icontact.com www.linssenyachts.com www.google.com www.youtube.com
object-src 'self' app.icontact.com www.youtube.com www.linssenyachts.com
style-src 'self' 'unsafe-inline' *.cruise-ireland.com use.fontawesome.com fonts.googleapis.com app.icontact.com
font-src 'self' use.fontawesome.com fonts.googleapis.com fonts.gstatic.com
img-src 'self' *.cruise-ireland.com app.icontact.com *.cloudflare.com www.linssenyachts.com www.google-analytics.com stats.g.doubleclick.net code.jquery.com www.w3.org * data:
script-src 'self' *.cruise-ireland.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com *.cloudflare.com app.icontact.com use.fontawesome.com ajax.aspnetcdn.com *.google-analytics.com code.jquery.com *.google.com www.gstatic.com script seal.digicert.com www.googleadservices.com www.linssenyachts.com www.google.co.uk"
script-src js.stripe.com code.jquery.com *.qrd.by *.qr1.at maps.googleapis.com maps.google.com *.facebook.net *.twitter.com embed.tawk.to cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net data: blob: 'unsafe-inline' 'unsafe-eval' 'self'
connect-src *.facebook.com *.tawk.to wss://*.tawk.to 'self'
img-src app.statuscake.com *.qrd.by *.qr1.at s3.amazonaws.com maps.gstatic.com secure.gravatar.com s.w.org static-v.tawk.to cdn.jsdelivr.net media.licdn.com *.fbcdn.net *.fbsbx.com *.twitter.com *.facebook.com *.google.com data: 'self'
style-src cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatables.net fonts.googleapis.com 'unsafe-inline' 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.3dsecure.net *.amazonaws.com *.bing.com *.bootstrapcdn.com *.ckeditor.com *.cloudflare.com *.comparethemarket.com *.doubleclick.net *.dsp.io *.facebook.com *.facebook.net *.feefo.com *.first.co.uk *.github.io *.google-analytics.com *.google.co.uk *.google.ie *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.mastercard.com *.omguk.com *.pingdom.com *.reevoo.com *.reviews.co.uk *.secure-server-hosting.com *.securecode.com *.sharethis.com *.syndication.twimg.com *.tagserve.com *.trustpilot.com *.twimg.com *.twitter.com *.twitter.io *.webtrends.com *.webtrendslive.com *.youtube.com dyn-img.com nexus.ensighten.com *.stripe.com *.marketingautomation.services *.woopcover.com wss://*.hotjar.com data: blob:"
img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.google.com www.facebook.com www.google.ca www.google.com.sg
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com ajax.cloudflare.com platform.twitter.com connect.facebook.net facebook.net www.facebook.net www.facebook.com facebook.com connect.facebook.com apis.google.com
frame-src 'self' platform.twitter.com syndication.twitter.com www.youtube.com staticxx.facebook.com accounts.google.com
connect-src 'self' https://www.tradingview.com https://mm-api.coinut.com https://api.coinut.com https://api-na.coinut.com https://api-eu.coinut.com https://api-as.coinut.com https://coinut.zendesk.com https://report.coinut.com wss://geo.coinut.com wss://mm-wsapi.coinut.com wss://wsapi.coinut.com wss://wsapi-na.coinut.com wss://wsapi-eu.coinut.com wss://wsapi-as.coinut.com wss://cadet.coinut.com wss://coinut.com"
"default-src * 'unsafe-eval' 'unsafe-inline' data: blob: ws: wss: gap:
script-src 'self' https: script.crazyegg.com 'unsafe-eval' 'unsafe-inline' *.constantcontact.com oss.maxcdn.com *.googleapis.com maxcdn.bootstrapcdn.com www.googletagmanager.com www.google-analytics.com www.google-analytics.com static.hotjar.com script.hotjar.com cdnjs.cloudflare.com i.simpli.fi *.gstatic.com *.youtube.com *.doubleclick.net  static.doubleclick.net s.ytimg.com www.googleadservices.com *.aspnetcdn.com pi-test.sagepay.com *.addthis.com *.addthisedge.com facebook.com *.facebook.com flexiengine.azurewebsites.net *.azureedge.net
style-src 'self' https: 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com www.gstatic.com *.azureedge.net flexiengine.azurewebsites.net
img-src 'self' data: gtrk.s3.amazonaws.com mlsvc01-prod.s3.amazonaws.com *.constantcontact.com www.google.com cdnjs.cloudflare.com www.google.co.uk www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net static.doubleclick.net www.gravatar.com i.simpli.fi *.gstatic.com *.googleapis.com maps.googleapis.com *.umbraco.tv umbraco.tv *.zopim.com *.cdn77.org flexiengine.azurewebsites.net *.azureedge.net
font-src 'self' data: *.zopim.com maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com flexibookings.azurewebsites.net flexiengine.azurewebsites.net *.azureedge.net
connect-src 'self' https: www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net insights.hotjar.com pi-test.sagepay.com *.zopim.com wss://*.zopim.com
frame-src 'self' https: vars.hotjar.com *.youtube.com *.addthis.com flexibookings.azurewebsites.net tockify.com
media-src 'self' gcs-vimeo.akamaized.net player.vimeo.com *.vimeocdn.com"
script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://mozillabr.org
style-src 'self' 'unsafe-inline' https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.1/themes/base/ https://mozillabr.org
script-src https: 'unsafe-inline' 'self' 'unsafe-eval' https://apis.google.com
img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://ps.w.org/ https://judojama.org https://www.oejv.com/wp-content/uploads/
"style-src 'self' 'unsafe-inline' fonts.googleapis.com *.readspeaker.com wchat.freshchat.com
media-src 'self' *.myeducator.com *.readspeaker.com *.vimeo.com *.vzaar.com *.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.readspeaker.com *.stripe.com *.openbadges.org www.google-analytics.com connect.facebook.net *.vimeocdn.com www.googleapis.com www.google.com www.gstatic.com wchat.freshchat.com *.youtube.com s.ytimg.com https://kozea.github.io/pygal.js/2.0.x/pygal-tooltips.min.js
img-src 'self' *.amazonaws.com *.google-analytics.com *.facebook.com data:
frame-src 'self' *.readspeaker.com *.stripe.com *.vimeo.com *.youtube.com *.vzaar.com www.google.com wchat.freshchat.com *.webpush.freshchat.com"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.lifewire.com *.qa.aws.lifewire.com atlas.lifewire.com atlas.local.lifewire.com"
"frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.com.hk  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.clientam.ch  *.clientam.com.hk  *.greenwichcompliance.com
"frame-ancestors 'self' afis.co.za *.afis.co.za terranexus.co.za *.terranexus.co.za *.dhcp.meraka.csir.co.za *.meraka.org.za
"script-src 'self' www.google.com www.gstatic.com maps.google.cl www.google-analytics.com cdn.conservadoresdigitales.cl rum-static.pingdom.net cdn.ravenjs.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cdn.polyfill.io https://apis.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://onesignal.com https://browser.sentry-cdn.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://code.jquery.com https://use.fontawesome.com https://www.gstatic.com https://*.twitter.com https://*.ads-twitter.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://adservice.google.co.jp https://sentry.io
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://themes.googleusercontent.com https://*.twitter.com https://cdnjs.cloudflare.com
frame-src 'self' https://www.youtube.com https://youtube.com https://*.twitter.com https://*.nicovideo.jp https://googleads.g.doubleclick.net https://www.google.com https://apis.google.com https://fantasfic-213504.firebaseapp.com https://*.fantasfic.fun
connect-src 'self' wss: https://www.google-analytics.com https://www.googleapis.com https://securetoken.googleapis.com https://sentry.io https://onesignal.com https://api.veritrans.co.jp/4gtoken
img-src 'self' 'unsafe-inline' data: blob:                                                                              https://ssl.google-analytics.com/                                                                              http://www.google-analytics.com/                                                                              https://www.bing.com/api/maps/                                                                              https://www.youtube.com/                          https://youtube.com/                      https://t.ssl.ak.dynamic.tiles.virtualearth.net/                                                                             https://syndication.twitter.com/                                                                             https://platform.twitter.com/css/                                                                             https://abs.twimg.com/emoji/                                                                             https://pbs.twimg.com/profile_images/                                                                             https://pbs.twimg.com/media/
script-src 'self' 'unsafe-inline' 'unsafe-eval'                                                                              https://www.google.com/recaptcha/                                                                              https://www.gstatic.com/recaptcha/                                                                              https://ssl.google-analytics.com/                                                                              http://www.google-analytics.com/                                                                              https://www.bing.com/api/maps/                                                                              https://www.bing.com/api/maps/mapcontrol/                                                                              https://www.youtube.com/                           https://youtube.com/                  https://www.bing.com/rs/                                                                              https://www.bing.com/rb/                                                                             https://dev.virtualearth.net/webservices/                                                                             https://t.ssl.ak.dynamic.tiles.virtualearth.net/comp/                                                                             https://platform.twitter.com/widgets.js                                                                             https://platform.twitter.com/js/                                                                             https://cdn.syndication.twimg.com/timeline/
child-src 'self' 'unsafe-inline'                                                                              https://www.google.com/recaptcha/                   https://google.com/recaptcha/                  https://www.gstatic.com/recaptcha/                  https://gstatic.com/recaptcha/                     https://ssl.google-analytics.com/                                                                              http://www.google-analytics.com/                                                 http://google-analytics.com/                  https://www.bing.com/api/maps/                                                                              https://www.bing.com/api/maps/mapcontrol/                                                                              https://www.youtube.com/                  https://youtube.com/                  https://www.bing.com/rs/                                                                              https://www.bing.com/rb/                                                                             https://dev.virtualearth.net/webservices/                                                                             https://t.ssl.ak.dynamic.tiles.virtualearth.net/comp/                                                                             https://www.facebook.com/                                                                             https://platform.twitter.com/                                                                             https://syndication.twitter.com/
frame-src 'self' 'unsafe-inline'                                                                              https://www.google.com/recaptcha/                   https://google.com/recaptcha/                  https://www.gstatic.com/recaptcha/                  https://gstatic.com/recaptcha/                     https://ssl.google-analytics.com/                                                                              http://www.google-analytics.com/                                                 http://google-analytics.com/                  https://www.bing.com/api/maps/                                                                              https://www.bing.com/api/maps/mapcontrol/                                                                              https://www.youtube.com/                  https://youtube.com/                  https://www.bing.com/rs/                                                                              https://www.bing.com/rb/                                                                             https://dev.virtualearth.net/webservices/                                                                             https://t.ssl.ak.dynamic.tiles.virtualearth.net/comp/                                                                             https://www.facebook.com/                                                                             https://platform.twitter.com/                                                                             https://syndication.twitter.com/
style-src 'self' 'unsafe-inline'                                                                              https://www.bing.com/rs/                                                                              https://www.bing.com/rb/                                                                             https://platform.twitter.com/css/
"frame-ancestors 'self' https://sdesk.dyadko.ru/ http://sdesk.dyadko.ru/ https://sdesk.krsk.dyadko.ru/ http://sdesk.krsk.dyadko.ru/"
script-src 'self' data: 'unsafe-inline' https://monitor.decos.nl https://monitordev.decos.nl https://maps.google.com https://maps.googleapis.com https://*.innocraft.cloud https://analytics.decos.nl https://www.googletagmanager.com https://siteimproveanalytics.com
connect-src 'self' https://*.innocraft.com https://monitor.decos.nl https://analytics.decos.nl https://monitordev.decos.nl
"frame-ancestors 'self' https://*.build.com/ https://*.build-catalogs.com/ https://buildcom.my.salesforce.com/ https://*.visual.force.com/ https://omconsole.com/ https://*.omconsole.com/"
"default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://applet.danid.dk http://pbs.122.2o7.net https://codefileclient.danid.dk/"
script-src 'unsafe-inline' 'unsafe-eval' data: *.qwant.com
img-src 'self' *.gstatic.com *.googleapis.com data:
default-src 'self' *.google-analytics.com https://stats.g.doubleclick.net *.googleapis.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' data: www.google.com fonts.gstatic.com www.google-analytics.com connect.facebook.net htlkeys.com htlkeys.com:3000 wss://htlkeys.com:3000/*
script-src 'self' 'unsafe-inline' 'unsafe-eval' htlkeys.com www.google-analytics.com connect.facebook.net
script-src 'self' 'unsafe-inline' https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.joomla.org https://*.pingdom.net https://*.googleapis.com https://*.doubleclick.net https://*.amazon-adsystem.com https://completion.amazon.com
style-src 'self' 'unsafe-inline' https://*.joomla.org https://fonts.googleapis.com
connect-src 'self' https://*.joomla.org https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com
frame-src 'self' https://*.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.slideshare.net
img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://*.joomla.org https://*.pingdom.net https://*.doubleclick.net https://*.gstatic.com https://*.google.com https://*.googleapis.com https://shield.sitelock.com https://img.youtube.com  https://i1.ytimg.com https://i.ytimg.com https://i9.ytimg.com https://s.ytimg.com https://*.amazon-adsystem.com https://*.ssl-images-amazon.com https://*.assoc-amazon.com https://opensourcematters.org https://*.opensourcematters.org
"default-src https: data: 'unsafe-inline' 'unsafe-eval' always
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://bitbazar.ru  mc.yandex.ru https://mc.yandex.ru https://mc.yandex.ua https://mc.yandex.fr https://mc.yandex.by https://mc.yandex.kz http://ajax.googleapis.com https://ajax.googleapis.com https://www.google-analytics.com yandex.ru *.yandex.ru https://an.yandex.ru yastatic.net
img-src 'self' data: http://bitbazar.ru  mc.yandex.ru https://mc.yandex.ru https://mc.yandex.ua http://www.google-analytics.com https://www.google-analytics.com counter.yadro.ru http://img0.bitbazar.ru http://img1.bitbazar.ru https://img0.bitbazar.ru https://img1.bitbazar.ru http://bs.yandex.ru *.yandex.ru *.yandex.net https://an.yandex.ru https://favicon.yandex.net
frame-src  https://mc.yandex.ru yandexadexchange.net *.yandexadexchange.net *.yandex.ru *.yandex.net https://st.yandexadexchange.net yastatic.net
connect-src  https://mc.yandex.ru https://mc.yandex.ua https://mc.yandex.fr https://mc.yandex.by https://mc.yandex.kz https://www.google-analytics.com 'self' https://an.yandex.ru
"default-src 'self' https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://use.fontawesome.com https://code.jquery.com https://cdnjs.cloudflare.com https://c0.froala.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com
script-src 'self' https://www.googletagmanager.com https://fonts.googleapis.com https://www.google-analytics.com/analytics.js 'nonce-ednnf03nceiofn39fn3e9h3sdfa'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://search.fwd.com.hk/ *.useinsider.com http://search.fwd.com.hk/ https://fwd.api.useinsider.com/ https://search.fwd.com.ph/ http://search.fwd.com.ph/ https://connect.fwd.co.th https://line.fwd.co.th https://www.gstatic.com https://www.google.com https://maps.googleapis.com www.google-analytics.com tagmanager.google.com *.googleapis.com www.googletagmanager.com *.livechatinc.com connect.facebook.net *.turn.com *.zopim.com *.zopim.io cdn-akamai.mookie1.com tags.tiqcdn.com t.mookie1.com b3.mookie1.com *.zopim.com api.map.baidu.com *.maxmind.com *.map.bdimg.com *.bdstatic.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io *.googleadservices.com *.adnxs.com *.doubleclick.net cloudfront.net *.mimecast.com  *.adsrvr.org *.facebook.com *.youtube.com *.ytimg.com *.visualwebsiteoptimizer.com bs.serving-sys.com *.taboola.com
connect-src 'self' https://api.useinsider.com/ https://location.api.useinsider.com/ https://hit.api.useinsider.com https://fwd.api.useinsider.com/ https://category-collector.api.useinsider.com/ https://image.useinsider.com/ https://*.api.useinsider.com https://search.fwd.com.hk/ wss://directline.botframework.com *.botframework.com http://search.fwd.com.hk/ https://search.fwd.com.ph/ http://search.fwd.com.ph/ https://connect.fwd.co.th https://line.fwd.co.th https://portal.fwd.com.vn wss://*.zopim.com *.maxmind.com api.map.baidu.com *.adnxs.com *.turn.com *.adsrvr.org *.facebook.com *.vimeo.com *.youtube.com *.taboola.com
"script-src https: http: 'unsafe-eval' 'unsafe-inline'
worker-src https: http: blob: 'unsafe-eval' 'unsafe-inline'
"script-src 'self' 'unsafe-eval' app.overdrive.io cdn.overdrive.io cdn-use.overdrive.io cdn-euw.overdrive.io cdn.polyfill.io *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.google-analytics.com query.yahooapis.com *.youtube-nocookie.com *.youtube.com platform.twitter.com cdn.syndication.twimg.com cdn.ravenjs.com js.live.net *.zopim.com  'nonce-68ac2900a11efcab82fd4cf0e774bc00'
"frame-ancestors 'self'  https://*.impress.ly  https://*.dragndropbuilder.com  https://*.weeblycloud.com  https://*.sitelock.com  https://*.mojomarketplace.com  https://*.ipage.com  https://*.yourhostingaccount.com  https://*.ecwid.com"
child-src 'self' https://yastatic.net http://yastatic.net https://googleads.g.doubleclick.net https://*.yandex.ru https://yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net http://*.yandexadexchange.net https://damspravku.ru
connect-src 'self' https://*.yandex.ru https://*.googlesyndication.com *.doubleclick.net *.gstatic.com
img-src 'self' data: https://damspravku.ru https://*.yandex.ru http://*.yandex.ru https://*.yandex.net http://*.yandex.net https://yastatic.net http://yastatic.net https://www.google-analytics.com https://*.doubleclick.net https://*.google.com https://*.google.ru *.googlesyndication.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://damspravku.ru https://*.yandex.ru http://*.yandex.ru https://yastatic.net *.yandex.net *.googlesyndication.com https://googleads.g.doubleclick.net https://*.google-analytics.com *.google.ru *.google.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashed-attributes' https://bid.g.doubleclick.net https://ajax.googleapis.com https://client.sellerlogic.com https://connect.facebook.net https://fonts.googleapis.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://in.hotjar.com https://px.ads.linkedin.com https://s.ytimg.com https://script.hotjar.com https://ssl.gstatic.com https://www.google-analytics.com https://www.youtube.com https://static.hotjar.com https://tagmanager.google.com/ https://vars.hotjar.com https://www.facebook.com https://www.google.com https://www.google.com.ua https://www.googletagmanager.com https://www.googleadservices.com https://www.gstatic.com
img-src 'self' 'unsafe-hashed-attributes' data: https:
style-src 'unsafe-inline' 'self' 'unsafe-hashed-attributes' https:
font-src 'self' 'unsafe-hashed-attributes' data: https:
script-src 'self' 'unsafe-hashed-attributes' 'unsafe-inline' 'unsafe-eval' https:
"default-src 'self' https: wss: data: 'unsafe-inline' 'unsafe-eval'"
default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: android-webview-video-poster:
script-src https://*.google.com https://*.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'
img-src https://*.gstatic.com https://*.google.com https://*.googleapis.com 'self' data:
"script-src 'self' www.google-analytics.com blockchain.info 'unsafe-inline'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.verticalscreen.com https://maps.googleapis.com  https://*.newrelic.com https://pi.pardot.com https://ssl.google-analytics.com https://bam.nr-data.net
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com
img-src 'self' data: https://*.googleapis.com https://ssl.google-analytics.com"
"default-src 'self' 'unsafe-inline' *://maps.googleapis.com *://fonts.googleapis.com *://csi.gstatic.com http://www.strazgraniczna.pl http://maps.googleapis.com https://unpkg.com https://*.tile.openstreetmap.org https://www.youtube.com"
"script-src 'self' * www.googletagmanager.com use.fontawesome.com www.googleadservices.com fontawesome.com connect.facebook.net stats.g.doubleclick.net ping.typekit.net p.typekit.net use.typekit.net www.google.com www.youtube.com i.ytimg.com  www.google-analytics.com ajax.googleapis.com www.gstatic.com apis.google.com az732725.vo.msecnd.net bam.nr-data.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' fontawesome.com ping.typekit.net www.youtube.com i.ytimg.com p.typekit.net use.typekit.net cdnbtctrader.blob.core.windows.net fonts.googleapis.com az732725.vo.msecnd.net 'unsafe-inline'
img-src 'self' fontawesome.com www.googleadservices.com www.youtube.com i.ytimg.com www.facebook.com www.google.com.tr stats.g.doubleclick.net googleads.g.doubleclick.net ping.typekit.net p.typekit.net use.typekit.net cdnbtctrader.blob.core.windows.net www.google-analytics.com www.google.com ssl.gstatic.com fontawesome.com az732725.vo.msecnd.net data:
object-src 'self' fontawesome.com ping.typekit.net p.typekit.net www.youtube.com i.ytimg.com use.typekit.net cdnbtctrader.blob.core.windows.net pusher.com
script-src 'self' *.google-analytics.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' *.entur.org *.entur.io ws://*.entur.io ws://*.entur.org wss://*.entur.io wss://*.entur.org https://www.google-analytics.com https://*.tiles.mapbox.com https://api.mapbox.com https://cgchat.callguide.telia.com https://us-central1-entur-dev.cloudfunctions.net https://us-central1-entur-staging.cloudfunctions.net https://us-central1-entur-entur-1287.cloudfunctions.net
script-src 'self' 'unsafe-eval' blob: https://www.google-analytics.com https://apis.google.com https://ajax.googleapis.com https://wds.callguide.telia.com
img-src 'self' *.entur.org *.entur.io data: blob: https://www.google-analytics.com *.googleusercontent.com *.doubleclick.net https://wds.callguide.telia.com
style-src 'self' 'unsafe-inline' https://api.tiles.mapbox.com https://wds.callguide.telia.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https:
img-src 'self' 'unsafe-inline' data: https:
style-src 'self' 'unsafe-inline' data: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.amdm.ru amdm.ru https://*.google.com https://adservice.google.ru https://adservice.google.com.ua https://adservice.google.kz https://*.googlesyndication.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net *.gstatic.com *.googleapis.com https://*.googleapis.com https://*.gstatic.com yadro.ru https://yadro.ru *.yadro.ru https://*.yadro.ru *.yandex.ru https://*.yandex.ru *.yandex.net *.yandex.net vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru http://*.google-analytics.com https://*.google-analytics.com http://*.twitter.com https://*.twitter.com http://*.jquery.com https://*.jquery.com *.yastatic.net https://*.yastatic.net http://yastatic.net https://yastatic.net www.google-analytics.com https://www.google-analytics.com http://utarget.ru https://utarget.ru https://utarget.pro
object-src 'self' *.amdm.ru amdm.ru *.google.com *.googlesyndication.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net *.gstatic.com https://*.gstatic.com an.yandex.ru https://an.yandex.ru
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.amdm.ru amdm.ru *.google.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru yastatic.net https://yastatic.net
media-src 'self' data: *.amdm.ru amdm.ru *.google.com *.googlesyndication.com https://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net
frame-src 'self' data: *.amdm.ru amdm.ru *.google.com *.googlesyndication.com https://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net *.googleadservices.com https://*.googleadservices.com *.gstatic.com https://*.gstatic.com *.yandex.ru https://*.yandex.ru *.yastatic.net yastatic.net https://*.yastatic.net *.yandex.net https://yandex.net *.youtube.com https://*.youtube.com vk.com https://vk.com
font-src 'self' *.amdm.ru amdm.ru *.google.com *.googlesyndication.com https://*.googlesyndication.com *.googleapis.com https://*.googleapis.com *.gstatic.com https://*.gstatic.com *.yandex.ru https://*.yandex.ru yastatic.net https://yastatic.net
connect-src 'self' *.amdm.ru amdm.ru *.google.com *.googlesyndication.com https://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru https://*.yandex.ru *.gstatic.com *.googleapis.com https://translate.googleapis.com http://www.google-analytics.com https://www.google-analytics.com
"default-src 'self' http://www.cmbwinglungbank.com https://www.cmbwinglungbank.com http://ac.cmbwinglungbank.com https://ac.cmbwinglungbank.com https://www.cmbwinglungsec.com http://www.cmbwinglungsec.com http://www.winglungbank.com https://www.winglungbank.com http://ac.winglungbank.com https://ac.winglungbank.com https://www.winglungsec.com https://www.winglungfutures.com http://www.winglungsec.com http://www.winglungfutures.com fc10.etwealth.com https://demo02.etwealth.com http://demo02.etwealth.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com
frame-ancestors 'self' fc10.etwealth.com https://hkwallet.moneydata.hk *.winglungbank.com *.cmbwinglungbank.com *.cmbwinglungsec.com *.winglungsec.com
style-src 'self' 'unsafe-inline' https://ton.twimg.com https://pagead2.googlesyndication.com https://pwm-image.trendmicro.jp https://cdn-ak.b.st-hatena.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://platform.twitter.com https://www.google.com https://ajax.googleapis.com https://translate.googleapis.com/translate_static/css/translateelement.css https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com
font-src 'self' data: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2 https://themes.googleusercontent.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://webfonts.zohostatic.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com
connect-src 'self' https://secure.gravatar.com https://nabettu.github.io https://platform.twitter.com https://cdn.ampproject.org https://adservice.google.com https://stats.g.doubleclick.net https://amp-error-reporting.appspot.com https://googleads.g.doubleclick.net https://*.ampproject.net https://3p.ampproject.net https://t.co https://www.google-analytics.com https://csi.gstatic.com https://pagead2.googlesyndication.com https://www.googletagmanager.com
child-src 'self' https://www.facebook.com https://staticxx.facebook.com https://pwm-image.trendmicro.jp https://*.ampproject.net https://syndication.twitter.com https://platform.twitter.com https://mozbar.moz.com https://maps.google.com https://api.weblio.jp https://securepubads.g.doubleclick.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://docs.google.com https://b.hatena.ne.jp
frame-ancestors 'self' https: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://www.responsinator.com https://sizzy.co
style-src http://*.googleapis.com https://cdnjs.cloudflare.com https://* http://* 'self' 'unsafe-inline'
script-src 'self' https://cdnjs.cloudflare.com https://*.googleapis.com https://cdn.jsdelivr.net https://maps.googleapis.com http://www.google-analytics.com http://*.google.com https://*.google.com https://fk416.infusionsoft.com https://www.facebook.com  https://www.googletagmanager.com http://* https://*.google-analytics.com http://*.facebook.net 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://www.facebook.com http://* https://* 'unsafe-inline' 'unsafe-eval'
frame-src https://fk416.infusionsoft.com  http://* https://* 'self' 'unsafe-inline'"
"frame-src *.krato.io *.vimeo.com *.facebook.com *.google.com *.youtube.com *.yudu.com *.cloudfront.net 'self'"
"frame-ancestors 'self' http://*.dentrodahistoria.com.br https://*.dentrodahistoria.com.br https://*.facebook.com"
"default-src 'self' www.youtube.com www.facebook.com connect.facebook.com facebook.net
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' www.googleadservices.com
connect-src 'self' https://niskanencenter.us9.list-manage.com/subscribe/ https://apis.oldrivertrail.com/ https://admin.oldrivertrail.com/stripe/charge
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://js.stripe.com https://oldrivertrail.us9.list-manage.com
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/ https://fonts.googleapis.com/
"font-src 'self' *.fandangonow.com *.fandango.com data: *.mgo-images.com
script-src 'self' *.fandangonow.com *.fandango.com 'unsafe-inline' 'unsafe-eval' *
style-src 'self' *.fandangonow.com *.fandango.com data: 'unsafe-inline' *"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com/ https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net
style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/
img-src 'self' 'unsafe-inline' data: https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://ssl.gstatic.com/
frame-src https://www.google.com/recaptcha/ https://www.facebook.com https://staticxx.facebook.com https://docs.google.com/forms/ https://my.matterport.com/show/ https://www.youtube.com/embed/
script-src 'self' 'unsafe-inline' https://dap.digitalgov.gov https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com
img-src 'self' data: https://www.google-analytics.com *.tile.openstreetmap.org https://maps.gstatic.com https://maps.googleapis.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.grandfrais.com *.humansourcing.com *.diagtest.com *.google.com *.facebook.net *.googletagmanager.com *.youtube.com *.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.com *.ytimg.com
"default-src https: data: blob: ws: wss: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' *.transunion.com *.vols7feed.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.doubleclick.net *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.company-target.com *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net *.trustev.com *.yahoo.com *.atedra.com *.twitter.com *.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com *.jquery.com cloudfront.net *.googleapis.com *.adnxs.com *.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com *.fastclick.net secure.leadback.advertising.com google-analytics.com *.ads-twitter.com *.openx.net *.zencdn.net googleadservices.com gstatic.com bidswitch.net *.media6degrees.com googletagmanager.com *.siteintercept.qualtrics.com *.qualtrics.com
script-src 'self' *.transunion.com *.mxpnl.com *.vols7feed.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'
child-src *.transunion.com blob: *.crwdcntrl.net *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com *.mediaplex.com *.optimizely.com *.brightcove.net s.amazon-adsystem.com *.trustev.com *.mathtag.com *.qnsr.com *.facebook.com *.siteintercept.qualtrics.com *.qualtrics.com
connect-src 'self' *.transunion.com *.mixpanel.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io *.company-target.com r.3gl.net s7.addthis.com *.herokuapp.com unity.cadreon.com app.trustev.com *.hotjar.com wss://*.hotjar.com *.siteintercept.qualtrics.com *.qualtrics.com 'unsafe-eval'
media-src 'self' *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.transunion.com blob: f1.media.brightcove.com
font-src data: *.transunion.com *.gstatic.com *.company-target.com edge.api.brightcove.com r.3gl.net *.addthis.com *.herokuapp.com *.quora.com
style-src 'self' 'unsafe-inline' https://www.avantgardepayments.com https://seal.panaceainfosec.com/styles/seal.css
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.avantgardepayments.com https://www.citruspay.com
img-src 'self' https://psimg.rationalcdn.com https://www.google-analytics.com data: https://*.facebook.com https://*.twimg.com https://scontent.xx.fbcdn.net https://fbstatic-a.akamaihd.net
frame-ancestors 'self' https://*.pokerschoolonline.com https://*.intellipoker.es https://*.intellipoker.it https://*.intellipoker.de https://*.intellipoker.pt  https://*.intellipoker.com  https://*.intellipoker.hu https://*.intellipoker.pl https://*.intellipoker.ru https://*.pokerstarter.live http://*.pokerstarter.life https://*.pokerstarter.life https://*.intelipoker.com https://*.pokerstarsschool.com https://*.pokerstarsschool.es https://*.pokerstarsschool.it https://*.pokerstarsschool.fr https://*.pokerstarsschool.pl https://*.pokerstarsschool.ru https://*.pokerstarsschool.pt https://*.pokerstarsschool.hu http://*.pokerstars.net http://*.pokerstars.jp http://*.pokerstars.tw http://*.pokerstars.fi http://*.pso.com http://*.pso.in.ua https://*.pokerstarsschool.online
"default-src 'self' https://apis.google.com https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com https://apis.google.com https://googleads.g.doubleclick.net https://accounts.google.com https://driver.biz.ua https://www.driver.biz.ua
child-src 'self' https://*.facebook.com http://staticxx.facebook.com https://staticxx.facebook.com https://facebook.com https://www.facebook.com https://*.doubleclick.net https://*.google.com *.doubleclick.net https://www.google-analytics.com
img-src 'self' https://www.carambis.ru *.deltahost.com.ua https://sync.1dmp.io https://cdnjs.cloudflare.com https://pagead2.googlesyndication.com https://counter.yadro.ru https://*.facebook.com https://www.facebook.com https://mc.yandex.ru https://www.google.com *.gstatic.com https://*.gstatic.com https://www.google-analytics.com https://*.doubleclick.net https://*.google.com data:
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com *.gstatic.com
object-src 'self' https://www.google-analytics.com *.gstatic.com https://*.gstatic.com https://*.googleapis.com *.yandex.ru https://mc.yandex.ru https://www.youtube.com *.googlesyndication.com
connect-src 'self' https://pagead2.googlesyndication.com https://ssl.google-analytics.com https://www.google-analytics.com https://*.doubleclick.net https://*.googleapis.com *.gstatic.com https://*.gstatic.com https://www.youtube.com *.googlevideo.com https://mc.yandex.ru
"default-src https: data: 'unsafe-inline' 'unsafe-eval' always"
"frame-ancestors 'self' webforce.com new.webforce.com webforce1111.c45stagehostopia.com wfsites-to.websitecreatorprotool.com wfsites.websitecreatorprotool.com wfsites-ie.websitecreatorprotool.com wf.mktgsuite.deluxe.com fl.sitekreator.com portal.mktgsuite.deluxe.com dex.wfsites.websitecreatorprotool.com sites2.freelogoservices.com cpaneltest.sitekreator.com
form-action 'self' https://*.marketo.com https://*.jotform.com https://*.jotformpro.com https://*.arvig.com https://*.arvig.net
frame-src 'self' https://*.jotform.com https://*.jotformpro.com https://*.marketo.com https://*.youtube.com https://youtu.be https://*.arvig.com https://*.arvig.net https://*.olark.com https://*.google.com httsp://*.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.marketo.com https://*.olark.com https://www.googletagmanager.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.marketo.com https://*.olark.com https://*.hotjar.com https://www.google-analytics
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com mofchat.smartlink.com.sa static.addtoany.com www.youtube.com public.tableau.com s.ytimg.com v2.zopim.com www.mof.gov.sa graph.facebook.com
style-src 'self' 'unsafe-inline' mofchat.smartlink.com.sa fonts.googleapis.com maxcdn.bootstrapcdn.com
"frame-ancestors https://www.surveymonkey.com https://google.com https://app.asana.com https://blog.asana.com"
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://use.typekit.net/ https://p.typekit.net/
font-src 'self' https://fonts.gstatic.com/ https://use.typekit.net/ data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ http://www.youtube.com/iframe_api https://s.ytimg.com/ https://www.googletagmanager.com/gtag/ https://www.google-analytics.com/ https://embed.videodelivery.net/embed/
img-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://videodelivery.net/ https://stats.videodelivery.net/ data:
"script-src 'self' *.uk2group.com *.resell.biz *.facebook.net *.doubleclick.net *.bing.com dx.steelhousemedia.com px.steelhousemedia.com *.qualtrics.com *.addthis.com m.addthisedge.com m.addthis.com ssl.google-analytics.com s7.addthis.com secure.leadforensics.com www.gstatic.com dev.visualwebsiteoptimizer.com www.googletagmanager.com www.google-analytics.com code.jquery.com s.adroll.com www.googleadservices.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' secure.gravatar.com *.facebook.com *.bing.com ssl.google-analytics.com *.uk2group.com *.resell.biz stats.g.doubleclick.net googleads.g.doubleclick.net www.google.com  www.google-analytics.com dev.visualwebsiteoptimizer.com www.googleadservices.com data:
style-src 'self' *.resell.biz fonts.googleapis.com maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'
font-src 'self' data: fonts.googleapis.com maxcdn.bootstrapcdn.com *.resell.biz fonts.googleapis.com fonts.gstatic.com
frame-src 'self' *.uk2group.com *.resell.biz *.doubleclick.net s7.addthis.com
"script-src 'self' asset 'unsafe-inline' bitrix.info https://motorov.net https://motorov.net.js.1c-bitrix-cdn.ru https://api.cdek.ru cdnjs.cloudflare.com code.jquery.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru http://googletagmanager.com/ https://googletagmanager.com/ http://*.googletagmanager.com/ https://*.googletagmanager.com/ http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/ http://vk.com/ https://vk.com/ http://retailcrm.pro/ https://retailcrm.pro/ http://*.retailcrm.pro/ https://*.retailcrm.pro/ http://roistat.com/ https://roistat.com/ http://*.roistat.com/ https://*.roistat.com/ https://*.yandex.ru http://webvisor.com https://webvisor.com http://*.webvisor.com https://*.webvisor.com http://yastatic.net https://yastatic.net http://*.yastatic.net https://*.yastatic.net http://www.google-analytics.com https://www.google-analytics.com http://front.facetz.net https://front.facetz.net http://autocontext.begun.ru https://autocontext.begun.ru http://ssp.rambler.ru https://ssp.rambler.ru 'unsafe-eval' gap://ready http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://freegeoip.net https://freegeoip.net https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://grastin.ru https://grastin.ru
object-src 'self' https://api.cdek.ru http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://motorov.net https://motorov.net.css.1c-bitrix-cdn.ru https://api.cdek.ru fonts.googleapis.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/ http://roistat.com/ https://roistat.com/ http://*.roistat.com/ https://*.roistat.com/
img-src * data: blob: http://giftd.tech https://api.cdek.ru https://giftd.tech http://*.giftd.tech https://*.giftd.tech
media-src 'self' https://api.cdek.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech
child-src 'self' https://api.cdek.ru http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://grastin.ru https://grastin.ru
font-src 'self' https://api.cdek.ru https://motorov.net.css.1c-bitrix-cdn.ru fonts.gstatic.com http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/
connect-src 'self' https://api.cdek.ru https://motorov.net http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://bitrix.info https://bitrix.info http://www.1c-bitrix.ru https://www.1c-bitrix.ru http://www.google-analytics.com https://www.google-analytics.com http://giftd.tech https://giftd.tech http://*.giftd.tech http://api.sypexgeo.net https://api.sypexgeo.net http://api.dostavka.guru https://api.dostavka.guru https://*.giftd.tech https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://retailcrm.pro/ https://retailcrm.pro/ http://*.retailcrm.pro/ https://*.retailcrm.pro/ wss://motorov.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.fdwcorp.com *.fullcompass.com *.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aspnetcdn.com *.bing.com *.bizrate.com *.bootstrapcdn.com *.bounceexchange.com *.cloudfront.com *.cloudfront.net *.doubleclick.net *.ecomm-nav.com *.facebook.net *.fdwcorp.com *.forter.com *.fullcompass.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googlecommerce.com *.googletagmanager.com *.gstatic.com *.nextopia.net *.nextopiasoftware.com *.pinterest.com *.quantcount.com *.quantserve.com *.thawte.com *.twitter.com *.veinteractive.com *.whoson.com
img-src 'self' data: ak1s.abmr.net *.s3.amazonaws.com *.bing.com *.bizrate.com *.bizrateinsights.com *.bouncex.net *.bounceexchange.com *.cdnwidget.com *.chango.com *.cloudfront.net *.doubleclick.net *.facebook.com *.fdwcorp.com *.fullcompass.com *.google.com *.google.ca *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.nextopia.net *.paypalobjects.com *.pinterest.com placehold.it pippio.com *.quantserve.com *.scanalert.com *.thawte.com *.twitter.com *.whoson.com
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.bouncex.net *.cdnbasket.net *.cdnwidget.com *.doubleclick.net *.facebook.com *.fdwcorp.com *.forter.com *.fullcompass.com *.google-analytics.com *.veinteractive.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.bounceexchange.com *.doubleclick.net *.facebook.com *.fdwcorp.com *.fullcompass.com *.google.com *.jobsinmadison.com *.twitter.com *.veinteractive.com fullcompass.whoson.com *.youtube.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.fdwcorp.com *.fullcompass.com *.googleapis.com *.nextopia.net tagmanager.google.com *.whoson.com
font-src 'self' data: *.bootstrapcdn.com fonts.gstatic.com tagmanager.google.com
frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' *.fullcompass.com *.fdwcorp.com"
"frame-ancestors 'self' *.classcreator.com *.classconnection.com *.facebook.net *.facebook.com"
connect-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'
frame-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'
img-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'
media-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'
object-src * data:  filesystem:  blob:  'unsafe-inline' 'unsafe-eval'
script-src * blob:  'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.yandex.ru vk.com *.google-analytics.com *.ps-box.ru yastatic.net bitrix.info https://chat.vocalize.ru:8443/ http://sks.arena-expert.ru/ https://sks.arena-expert.ru/ connect.facebook.net *.googletagmanager.com googletagmanager.com tagmanager.google.com mc.webvisor.org mc.webvisor.com https://optimize.google.com
frame-src 'self' http://sks.arena-expert.ru/ https://optimize.google.com *
"default-src 'self' 'unsafe-inline' 'unsafe-eval' nominatim.openstreetmap.org api-maps.yandex.ru stat.sputnik.ru s.ytimg.com static.issuu.com www.1c-bitrix.ru http://firmsonmap.api.2gis.ru analytics.bitrix.info firmsonmap.api.2gis.ru widgets.2gis.com www.bratsk-city.ru http://349000.bratsk-city.ru obrbratsk.ru dumabratsk.ru mc.yandex.ru clck.yandex.ru top-fwz1.mail.ru top-abd.mail.ru yastatic.net bitrix.info youtube.com www.youtube.com youtu.be
img-src informer.yandex.ru 'self' stat.sputnik.ru www.dumabratsk.ru top-fwz1.mail.ru mc.yandex.ru info.weather.yandex.net yastatic.net bitrix.info *.bratsk-city.ru api-maps.yandex.ru *.maps.yandex.net data: blob:"
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com tech-connect.biz:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' assentcompliance.com *.assentcompliance.com http://sandbox.assentcompliance.com *.bamboohr.com cdnjs.cloudflare.com *.doubleclick.net *.eventbrite.ca *.hubspot.com *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com www.youtube.com maxcdn.bootstrapcdn.com *.optmnstr.com wss://*.zopim.com *.zopim.com data: themes.googleusercontent.com www.googletagmanager.com www.youtube-nocookie.com www.facebook.com connect.facebook.net *.hsforms.com *.hs-analytics.net *.hs-scripts.com *.hsforms.net *.hsleadflows.net api.hubapi.com
img-src 'self' 'unsafe-eval' assentcompliance.com *.assentcompliance.com http://sandbox.assentcompliance.com http://www.assentcompliance.com *.bamboohr.com *.doubleclick.net *.ytimg.com *.youtube.com *.google-analytics.com *.hubspot.com img.evbuc.com www.facebook.com connect.facebook.net www.google.ca *.google.com *.gstatic.com www.googletagmanager.com *.zopim.com *.zopim.io data: *.w.org secure.gravatar.com *.optnmstr.com https://a.optnmstr.com *.youtube.com *.linkedin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' assentcompliance.com *.assentcompliance.com *.bamboohr.com cdnjs.cloudflare.com *.doubleclick.net *.eventbrite.ca *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.hubspot.com www.youtube.com *.ytimg.com *.zopim.com www.google.ca sjs.bizographics.com sessions.bugsnag.com *.cloudfront.net connect.facebook.net spdcrv.global.ssl.fastly.net www.googleadservices.com www.googletagmanager.com js.hs-analytics.net js.hs-scripts.com forms.hsforms.com js.hsforms.net js.hsadspixel.net js.hsleadflows.net code.jquery.com *.linkedin.com *.optnmstr.com cdn.speedcurve.com https://a.optmnstr.com maxcdn.bootstrapcdn.com www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bali6nora.com *.juicer.io *.dotmailer-surveys.com *.nr-data.net *.newrelic.com *.hotjar.com *.google-analytics.com fast.fonts.net www.googletagmanager.com player.vimeo.com www.googleadservices.com googleads.g.doubleclick.net www.youtube.com s.ytimg.com *.google.com *.gstatic.com
style-src 'self' 'unsafe-inline' *.juicer.io fast.fonts.net
font-src 'self' 'unsafe-inline' *.juicer.io data:
connect-src 'self' https://onesignal.com https://api.optmnstr.com https://www.google-analytics.com https://*.optmnstr.com https://*.optmnstr.com https://*.optmstr.com
font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com
script-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.optmstr.com https://*.optmnstr.com https://*.onesignal.com https://certify.gpwa.org 'nonce-87cdffcbeb0eb8dfefabff0b6d377d4adadd5b00' 'nonce-fafaaa3c5fecbcdfdced728dfd793039b183ef68' 'nonce-3f2d6ac71467a26d819c5d31437a9054dc21498c' 'nonce-293714bc21629a8b906fcba2d5a94ac3be20d7c1' 'nonce-52c14ee500e85301c39654be5fb09fd4070d6d7c' 'nonce-3b1542a522d97204426188023f49062569c75ebe' 'nonce-33c4f7bf96d3887e583a6b83472dca3e03fe394a'
style-src 'self' 'unsafe-inline' https://onesignal.com https://use.fontawesome.com https://*.googleapis.com
script-src 'unsafe-eval' 'unsafe-inline' 'self' *
script-src 'unsafe-inline' 'unsafe-eval' https: blob:
script-src *.sberbank.si *.googleapis.com *.googletagmanager.com *.google.com *.googleadservices.com *.secondego.com *.iprom.net *.ipromcloud.com *.httpool.com *.toboads.com *.hs-analytics.net *.facebook.net *.google-analytics.com *.hs-scripts.com *.ampproject.org dec.azureedge.net *.contentexchange.me 'unsafe-inline' 'unsafe-eval'
style-src *.sberbank.si *.googleapis.com dec.azureedge.net *.google.com 'unsafe-inline'"
"default-src https: http: blob: javascript: data: 'unsafe-inline' 'unsafe-eval' 'self'
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-meaebwijbg9rwrroffwuvq==' yastatic.net betastatic.yandex.net mc.yandex.ru api-maps.yandex.ru suggest-maps.yandex.ru https://*.maps.yandex.net
script-src 'self' 'unsafe-inline' cdn.polyfill.io cdn.optimizely.com cdn.mxpnl.com www.google-analytics.com js.hs-scripts.com js.hs-analytics.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com"
"default-src 'self' securebooking-belfastairport.com https://maxcdn.bootstrapcdn.com https://secure.adnxs.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' securebooking-belfastairport.com https://www.googleadservices.com https://secure.adnxs.com https://cdn.jsdelivr.net https://cdn.datatables.net https://bat.bing.com https://www.google-analytics.com https://www.google.co.uk https://www.googletagmanager.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com  https://connect.facebook.net
img-src 'self' securebooking-belfastairport.com https://www.facebook.com https://www.google.co.uk https://ir-uk.amazon-adsystem.com https://www.google.com https://bat.bing.com https://stats.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://cdn.datatables.net https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com
font-src 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com
frame-src https://www.facebook.com *.doubleclick.net https://s-static.ak.facebook.com style-src https://maxcdn.bootstrapcdn.com object-src ''"
style-src 'self' blob: data: https: http://nyskiblog.com/ http://fonts.googleapis.com/ http://morriscountyhandwash.com/ 'unsafe-inline'
script-src 'self' https://pagead2.googlesyndication.com https://apis.google.com https://s0.wp.com https://secure.gravatar.com https://stats.wp.com https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://graph.facebook.com 'unsafe-inline'
"default-src 'self' https://googleads.g.doubleclick.net/ https://www.google.com/ads/user-lists/ https://www.google.hu/ads/user-lists/ https://www.youtube.com/embed/ https://server.infinety.hu/
img-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://www.google.com/ads/ https://www.google.hu/ads/ https://maps.googleapis.com/maps/ https://csi.gstatic.com/ https://maps.gstatic.com/ https://maps.google.com/ blob: 'self' https://ad.adverticum.net/banners/ https://ssl.google-analytics.com/ https://www.facebook.com/tr/ https://ap.lijit.com/ https://u.btserve.com/ https://ad-delivery.net/ https://dmp.adform.net/dmp/profile/ https://x.bidswitch.net/ https://cm.g.doubleclick.net/ https://d5p.de17a.com/ https://sync.clickonometrics.pl/ https://ib.adnxs.com/ https://mq.wp.pl/ https://s1.adform.net/ https://adx.adform.net/ https://u.btserve.com/ data: https://www.w3.org/2000/svg/
style-src 'self' https: 'unsafe-inline' https://maxcdn.bootstrapcdn.com/font-awesome/  https://fonts.googleapis.com/
font-src 'self' https://fonts.gstatic.com/stats/ https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://themes.googleusercontent.com/static/fonts/lato/
\t\t\t\t     script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ http://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion.js https://www.google.com/recaptcha/api.js https://maps.google.com/maps/api/ https://maps.google.com/ https://maps.googleapis.com/ https://ad.adverticum.net/g3.js https://ls.hit.gemius.pl/ https://hu.hit.gemius.pl/xgemius.js https://www.googletagmanager.com https://ad.adverticum.net/g3.js https://www.googletagmanager.com/ https://connect.facebook.net/en_us/fbevents.js blob: 'self'
\t\t\t\t     connect-src 'self' https://settings.luckyorange.net/ https://track.adform.net/ wss://in.visitors.live/socket.io/ wss://visitors.live/socket.io/ https://ad.adverticum.net/
child-src 'self' https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net/pagead/ https://bid.g.doubleclick.net/ https://www.google.hu/ads/user-lists/ https://ls.hit.gemius.pl/ https://ad.adverticum.net/external/ https://ad.adverticum.net/banners/ https://occsz.e-cegjegyzek.hu/ https://www.youtube.com/embed/ https://www.facebook.com/tr/ https://sparbanner.kolrus.cloud/
"default-src 'self' www.mega-porno.me mega-porno.me http://img.mega-porno.me megabc.info mega-bc.info https://fex.net *.fex.net https://n161adserv.com 69v.club redirect.mpay69.net redirect.mpay69.org redirect.mpay69.info test.test-mp.info http://mp-https.info http://bobi-bobi.info http://mpay3.info http://plpromos.com http://fderty.com *.vids69.com *.mega-porno.me *.advertserve.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com yandex.st an.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com *.xcvgdf.party 'unsafe-inline' 'unsafe-eval' http://www.mega-porno.me http://mega-porno.me data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.mbank.pl https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://tpc.googlesyndication.com https://ls.hit.gemius.pl https://ghmpl.hit.gemius.pl https://mbank.hit.gemius.pl https://gde-default.hit.gemius.pl https://connect.facebook.net https://www.youtube.com https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://maps.googleapis.com https://www.snrcdn.net
style-src 'self' 'report-sample' 'unsafe-inline' https://www.mbank.pl https://tagmanager.google.com https://platform.twitter.com https://ton.twimg.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.snrcdn.net
img-src 'self' 'report-sample' data: https://www.mbank.pl https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://www.google.pl https://www.google.de https://www.google.co.uk https://www.google.nl https://www.google.fr https://www.google.se https://www.google.no https://www.google.be https://www.google.ie https://www.google.es https://www.google.dk https://www.google.ch https://www.google.hr https://www.google.cz https://www.google.it https://www.google.com.ua https://www.google.sk https://ls.hit.gemius.pl https://ghmpl.hit.gemius.pl https://mbank.hit.gemius.pl https://gde-default.hit.gemius.pl https://www.facebook.com https://s.ytimg.com https://platform.twitter.com https://pbs.twimg.com https://abs.twimg.com https://syndication.twitter.com https://ton.twimg.com https://maps.googleapis.com https://maps.gstatic.com https://khms0.googleapis.com https://khms1.googleapis.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://www.snrcdn.net
font-src 'self' 'report-sample' https://www.mbank.pl https://fonts.gstatic.com
connect-src 'self' 'report-sample' https://www.mbank.pl https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.pl https://ghmpl.hit.gemius.pl https://mbank.hit.gemius.pl https://form.axaubezpieczenia.pl https://syndication.twitter.com https://search.interconsystems.pl https://synerise.com https://proxy.synerise.com https://tc.synerise.com https://tck.synerise.com https://messenger.synerise.com wss://messenger.synerise.com https://dc.synerise.com
media-src 'self' 'report-sample' https://www.mbank.pl https://www.snrcdn.net
object-src 'self' 'report-sample' https://www.mbank.pl https://www.youtube.com
frame-src 'self' 'report-sample' https://www.mbank.pl https://www.googletagmanager.com https://tagmanager.google.com https://bid.g.doubleclick.net https://6100198.fls.doubleclick.net https://tpc.googlesyndication.com https://ls.hit.gemius.pl https://www.youtube.com https://form.mbank.pl https://platform.twitter.com
child-src 'self' 'report-sample' https://www.mbank.pl https://www.googletagmanager.com https://tagmanager.google.com https://bid.g.doubleclick.net https://6100198.fls.doubleclick.net https://ls.hit.gemius.pl https://www.youtube.com https://form.mbank.pl
form-action 'self' 'report-sample' https://www.mbank.pl https://form.mbank.pl https://form.mbank.com.pl
"frame-ancestors http://www.vistaprint.dk https://www.vistaprint.dk http://vistaprint.dk https://vistaprint.dk
form-action 'self' https://www.mailservis.cz https://mailservis.cz https://online.colosseum.eu https://nm.cz http://www.nm.cz https://webq-online.colosseum.eu
connect-src 'self' https://www.mailservis.cz https://online.colosseum.eu https://stats.mailservis.cz https://www.google-analytics.com
img-src 'self' data: https://www.nm.cz https://nm2018-cz.nm.netservis.cz https://www.google-analytics.com https://stats.g.doubleclick.net https://api.mapy.cz https://mapserver.mapy.cz https://csi.gstatic.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapy.cz
font-src 'self' https://www.nm.cz https://fonts.gstatic.com https://api.mapy.cz
script-src 'self' 'nonce-d6019758e7a5956a8f32ba2e62509b083c8a6cc4' 'sha256-neueieo8rwnaejw0jyhrwrarpp+kzgzhk6xbj06ntlw=' https://www.nm.cz https://api.mapy.cz https://www.google-analytics.com
"default-src * 'self' 'unsafe-inline' 'unsafe-eval' data:"
connect-src 'report-sample' 'self' https://www.google-analytics.com https://csi.gstatic.com
script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/analytics.js https://pagead2.googlesyndication.com https://adservice.google.co.uk https://adservice.google.com https://adservice.google.be https://adservice.google.ca https://adservice.google.dk https://adservice.google.es https://adservice.google.com.au https://adservice.google.com.cy https://adservice.google.com.hk https://adservice.google.com.ie https://adservice.google.com.mx https://adservice.google.com.vn https://adservice.google.com.ru https://adservice.google.co.in https://adservice.google.co.nz https://adservice.google.de https://adservice.google.fr https://adservice.google.hu https://adservice.google.it https://adservice.google.im https://adservice.google.nl https://adservice.google.si https://www.googletagservices.com/activeview/js/current/
"default-src https: 'unsafe-inline' 'unsafe-eval' data:"
"default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:
"default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'
script-src * 'self' data: 'unsafe-inline' 'unsafe-eval'
style-src * 'self' data: 'unsafe-inline'
"default-src 'self' https://www.google.com https://hps.github.io https://api.heartlandportico.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mofa.gov.np *.mofa.gov.np *.google.com *.gstatic.com cdn.jsdelivr.net code.jquery.com stackpath.bootstrapcdn.com s.ytimg.com *.facebook.net *.sharethis.com *.youtube.com *.twimg.com cdn.syndication.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com fonts.googleapis.com fonts.gstatic.com
style-src 'self' 'unsafe-inline' *.mofa.gov.np use.fontawesome.com stackpath.bootstrapcdn.com placehold.it *.facebook.net *.sharethis.com  *.youtube.com *.twimg.com cdn.syndication.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com fonts.googleapis.com fonts.gstatic.com
img-src 'self' data: placehold.it mofa.gov.np *.mofa.gov.np *.gstatic.com *.facebook.net *.facebook.com *.sharethis.com lh3.googleusercontent.com *.youtube.com *.twimg.com secure.gravatar.com cdn. *.twitter.com *.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com
frame-src 'self' *.youtube.com *.google.com *.facebook.net *.facebook.com syndication.twitter.com platform.twitter.com
font-src 'self' data: fonts.googleapis.com stackpath.bootstrapcdn.com use.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com
"default-src 'self' https://*.sismo.no https://idporten.difi.no https://*.leseweb.dk https://*.signicat.com 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' *.modulargrid.net https://www.google-analytics.com https://www.googleapis.com https://sentry.io
script-src 'self' www.googletagmanager.com https://www.google-analytics.com *.googleapis.com https://svcs.ebay.com https://cdn.ravenjs.com https://browser.sentry-cdn.com 'sha256-us/oj4ftl5jki9/5nj0/ccw+r4vmfgflr5oepbqjoiw='
"frame-ancestors 'self' https://www.segurodevidas.com.br https://www.seguroestagiario.com.br https://www.segurofacil.com.br
img-src 'self' files.startupsucht.com www.google-analytics.com stats.g.doubleclick.net www.google.com/ads/ga-audiences www.google.de/ads/ga-audiences https://syndication.twitter.com/ data:
style-src 'self' data: cdnjs.cloudflare.com use.fontawesome.com fonts.googleapis.com https://wwww.facebook.com
script-src 'self' ajax.googleapis.com cdnjs.cloudflare.com wwww.facebook.com connect.facebook.net/de_de/sdk.js platform.twitter.com www.google-analytics.com www.googletagmanager.com static.getclicky.com/js in.getclicky.com/in.php www.google.com/recaptcha/ www.gstatic.com/recaptcha/ use.fontawesome.com
frame-src 'self' https://www.google.com/recaptcha/ https://platform.twitter.com/ https://staticxx.facebook.com/ https://www.facebook.com/ https://syndication.twitter.com/
script-src 'self'  'sha256-icrqljo5fqvb/9dsz/r49wijkvaspt2r0jgjjheueje=' 'sha256-+z+q+toxhko7bu9ayoe/bhkrapljz4p/dids/byuabg=' 'sha256-yxwpqcmlfdangyjilv5gt+4utrz5mqo+z9mwmweajpq=' 'sha256-3mtk0gn4auas1pkjg7asgtj0srfcmrurv22y6f4lmts=' https://www.google-analytics.com https://ajax.googleapis.com https://ssl.google-analytics.com https://app.icontact.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
style-src 'self' 'sha256-n6tsydz64ahcaowfwkbuhxxx2frfdxhoal3e3co7gpi=' 'sha256-pazibhr60wkkbrhgozkgch0hxyq4wuzksjop0nwwcns=' 'sha256-bxnhkppwrprdpx9djmxjtn6a64r1okjtv6o8s40sbtg=' 'sha256-wlg7p6ainstqdlsxmhbpwmn6b0j3onlanec3s9szk7w=' https://fonts.googleapis.com 'sha256-sc6m+rkb+psttuobl3hyimyegnbo36uad3wonxmu5wo=' 'sha256-mammj3j+tgihdhxysgljd6dzru0zmxxkz2dvtepaf0o=' 'sha256-1kcpi54djw5knvpsic90sbilpyyskuo4iqrxfy23ady=' 'sha256-rjmtrsijnzl5t3+scifodzhq5kr/o6naonfj6zok/+0=' 'sha256-svrioruf58jmdpiyeiggkvcqyxzrufkwa99g9hllvta=' https://www.google.com https://www.gstatic.com https://fonts.gstatic.com 'sha256-2cx4j+ach0r/8tbnl7pxhpmhow4jorhxg62rbmmtl1q=' 'sha256-fgdbb13p+rpdm1wljgzrwivv0fjxdmsdrfgd7e0chfk=' 'sha256-1kcpi54djw5knvpsic90sbilpyyskuo4iqrxfy23ady=' 'sha256-/bomtcjayoswe8effz5jltnhayu9aclcabiaz134jr4='
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.youtube.com/ https://app.icontact.com
child-src 'self' https://player.vimeo.com https://www.youtube.com/ https://www.google.com https://fonts.gstatic.com 'sha256-2cx4j+ach0r/8tbnl7pxhpmhow4jorhxg62rbmmtl1q='
frame-src 'self' https://www.google.com/ https://app.icontact.com 'sha256-1kcpi54djw5knvpsic90sbilpyyskuo4iqrxfy23ady=' 'sha256-sc6m+rkb+psttuobl3hyimyegnbo36uad3wonxmu5wo='
child-src 'self' *.youtube.com *.youtube-nocookie.com *.bambuser.com *.twitter.com *.vimeo.com
script-src 'self' *.twitter.com *.twimg.com piwik.xnet-x.net
img-src 'self' piwik.xnet-x.net *.twitter.com i.ytimg.com *.twimg.com *.piwik.xnet-x.net data:
"default-src  * blob: 'unsafe-inline' 'unsafe-eval'
frame-src * data: 'unsafe-inline' 'unsafe-eval'
child-src 'self' https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://fast.wistia.net https://www.useloom.com https://www.loom.com https://play.vidyard.com https://player.vimeo.com https://www.youtube.com https://intercom-sheets.com https://www.intercom-reporting.com
connect-src 'self' wss://*.intercom.io https://*.intercom.io https://*.intercom.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://www.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-ijv8em3zksjstsfcka6atgnvbsab08ytmbv6rgcyrf4='
style-src 'self' 'unsafe-inline' https://fonts.intercomcdn.com https://static.intercomassets.com https://static.intercomcdn.com https://marketing.intercomassets.com https://marketing.intercomcdn.com https://intercom.help"
script-src https: 'unsafe-inline' 'unsafe-eval' blob:
connect-src 'self' https://api.github.com/repos/ *.fastly-insights.com sentry.io https://2p66nmmycsj3.statuspage.io
img-src 'self' https://warehouse-camo.cmh1.psfhosted.org/ www.google-analytics.com *.fastly-insights.com
script-src 'self' www.googletagmanager.com www.google-analytics.com *.fastly-insights.com https://cdn.ravenjs.com https://www.youtube.com https://s.ytimg.com
style-src https: 'unsafe-inline' data: blob:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com  http://*.orange.mg https://*.orange.mg https://www.google-analytics.com https://*.facebook.com https://connect.facebook.net https://www.googletagmanager.com
img-src 'self' http://www.orange.mg  https://www.googletagmanager.com https://www.google-analytics.com https://*.facebook.com http://*.facebook.com
img-src 'self' data: https://pbs.twimg.com https://platform.twitter.com https://s1795.t.eloqua.com https://smtrcs.redhat.com https://syndication.twitter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syndication.twimg.com https://img.en25.com https://platform.twitter.com https://secure.eloqua.com https://secure.p01.eloqua.com https://static.redhat.com https://www.redhat.com
"connect-src 'self' *.novoresume.com connect.facebook.net api.usabilla.com
font-src 'self' data: *.novoresume.com fonts.gstatic.com *.googleapis.com d6tizftlrpuof.cloudfront.net
frame-src 'self' *.novoresume.com *.googleapis.com *.google.com
img-src 'self' data: *.novoresume.com csi.gstatic.com *.doubleclick.net *.google.com *.google-analytics.com connect.facebook.net *.googleadservices.com www.facebook.com d6tizftlrpuof.cloudfront.net w.usabilla.com t.co
script-src 'self' 'unsafe-inline' 'unsafe-eval' trackcmp.net *.novoresume.com *.google.com *.google-analytics.com *.googleadservices.com connect.facebook.net www.googletagmanager.com *.doubleclick.net www.facebook.com static.ads-twitter.com analytics.twitter.com api.usabilla.com w.usabilla.com
style-src 'self' 'unsafe-inline' *.novoresume.com d6tizftlrpuof.cloudfront.net *.googleapis.com"
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-oqmqn9ylfcntwlyfdfso2a==' yastatic.net betastatic.yandex.net mc.yandex.ru api-maps.yandex.ru suggest-maps.yandex.ru https://*.maps.yandex.net
script-src 'self' *.transunion.com *.vols7feed.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'
connect-src 'self' *.transunion.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io *.company-target.com r.3gl.net s7.addthis.com *.herokuapp.com unity.cadreon.com app.trustev.com *.hotjar.com wss://*.hotjar.com *.siteintercept.qualtrics.com *.qualtrics.com 'unsafe-eval'
"default-src * 'self' data: 'unsafe-inline' disqus.com *.disqus.com *.disquscdn.com cdn.ampproject.org google.com
script-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
style-src * 'self' data: 'unsafe-inline' cdn.racunalo.com
img-src * 'self' data: blob: 'unsafe-inline' translate.googleapis.com google.com
font-src 'self' data: www.racunalo.com *.racunalo.com *.disqus.com *.disquscdn.com *.gstatic.com fonts.googleapis.com
connect-src * 'self' wss://realtime.services.disqus.com https://realtime.services.disqus.com www.racunalo.com cdn.racunalo.com
form-action * 'self' www.racunalo.com *.racunalo.com www.event-planner.com.hr
sandbox allow-forms allow-same-origin allow-scripts allow-popups
script-src 'self' 'unsafe-inline' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com facebook.net business.facebook.com twitter.com twitter.net linkedin.com linkedin.net pinterest.com pinterest.net instagram.com instagram.net youtube.com youtube.net siteimprove.com dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com 'unsafe-eval'
style-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com facebook.net business.facebook.com twitter.com twitter.net linkedin.com linkedin.net pinterest.com pinterest.net instagram.com instagram.net youtube.com youtube.net siteimprove.com dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com 'unsafe-inline'
child-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com facebook.net business.facebook.com twitter.com twitter.net linkedin.com linkedin.net pinterest.com pinterest.net instagram.com instagram.net youtube.com youtube.net siteimprove.com dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com
font-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com facebook.net business.facebook.com twitter.com twitter.net linkedin.com linkedin.net pinterest.com pinterest.net instagram.com instagram.net youtube.com youtube.net siteimprove.com dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com data:
img-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com facebook.net business.facebook.com twitter.com twitter.net linkedin.com linkedin.net pinterest.com pinterest.net instagram.com instagram.net youtube.com youtube.net siteimprove.com dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com data:
"default-src https: connect-src wss: 'unsafe-eval' 'unsafe-inline'
"frame-ancestors 'self' 'https://accounts.login.idm.telekom.com' 'https://meinkonto.telekom-dienste.de' 'https://www.telekom.de' 'https://www.t-online.de'"
"default-src 'self' https://oebb.at https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com
style-src 'self' 'unsafe-inline' https://*.twitter.com https://*.twimg.com https://apis.google.com https://*.googleapis.com
script-src 'self' https://oebb.at https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://apis.google.com https://*.googleapis.com https://connect.facebook.net https://platform.twitter.com https://cdn.syndication.twimg.com https://at.cloud.fabasoft.com https://www.youtube.com https://*.ytimg.com
img-src 'self' https://oebb.at https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com https://*.ytimg.com https://*.facebook.com https://*.twitter.com https://*.twimg.com https://apis.google.com https://*.googleapis.com https://*.gstatic.com data: blob:
child-src https://oebb.at https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.google.com https://content.googleapis.com https://www.youtube-nocookie.com https://*.facebook.com https://*.twitter.com https://at.cloud.fabasoft.com https://roundme.com https://*.yumpu.com https://www.zepp-cam.at https://*.soundcloud.com
font-src 'self' https://oebb.at https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'   https://w53.net.espci.fr/ https://stats.espci.fr/
img-src 'self' blob: https://www.espci.fr/ https://espci.fr/   https://w53.net.espci.fr/ https://stats.espci.fr/    https://i.ytimg.com
frame-src 'self' https://v.calameo.com/ https://www.canal-u.tv/  https://www.dailymotion.com/ https://www.scoop.it/ https://www.youtube.com/  https://player.vimeo.com/ https://openstreetmap.org/  https://www.openstreetmap.org/ https://openlayers.org/
"script-src https: 'self' 'unsafe-inline' 'unsafe-eval' www.google.com maps.googleapis.com fonts.googleapis.com ajax.googleapis.com www.gstatic.com fonts.gstatic.com www.google-analytics.com docs.google.com www.googletagmanager.com www.googleadservices.com ajax.cloudflare.com connect.facebook.net"
font-src 'self' data: https://domeneoppslag.lab.norid.no https://domeneoppslag.norid.no https://use.fontawesome.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *
script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net ajax.googleapis.com *.yandex.net yandex.st code.createjs.com apis.google.com www.gstatic.com www.google.com ssl.gstatic.com www.googletagmanager.com *.facebook.net www.googleadservices.com vk.com st.top100.ru www.google-analytics.com *.yandex.ru *.adfox.ru *.exist.ru *.exist.parts telegram.org
connect-src * 'self' 'unsafe-inline' 'unsafe-eval'
frame-src 'self' *.exist.ru tc.exist.ru yandex.ru yandex.kz yandex.ua yandex.by *.yandex.ru *.yandex.kz *.yandex.by *.yandex.ua www.facebook.com staticxx.facebook.com vk.com www.google.com api-maps.yandex.ru www.elcats.ru www.japancats.ru www.youtube.com oauth.telegram.org
"default-src 'self' *.google.com *.google-analytics.com googleads.g.doubleclick.net *.googlesyndication.com
script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.google.com *.googletagmanager.com:* *.google-analytics.com:* *.googlesyndication.com:* *.youtube.com:* *.ytimg.com:* about
style-src 'self' data: 'unsafe-inline' *
style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://use.fontawesome.com
connect-src 'self' https://7ltxkwejgd.execute-api.eu-west-2.amazonaws.com https://0nfwriohub.execute-api.eu-west-2.amazonaws.com https://w26ycwsgt3.execute-api.eu-west-2.amazonaws.com
connect-src 'self' https://restcountries.eu https://www.google-analytics.com https://*.adroll.com https://manager.smartlook.com
frame-src 'self' https://www.youtube.com https://*.livechatinc.com https://bid.g.doubleclick.net https://www.google.com
script-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.gstatic.com https://*.licdn.com https://*.linkedin.com https://rec.smartlook.com https://*.adroll.com https://*.livechatinc.com https://bat.bing.com https://code.jquery.com https://connect.facebook.net https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://seal.starfieldtech.com https://verify.authorize.net
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://code.jquery.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/ https://www.google-analytics.com/
style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/ https://fonts.googleapis.com/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: blob:
base-uri  'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://cdn-ca.jivosite.com/ https://cdn-cis.jivosite.com/ https://cdn-fr.jivosite.com/
child-src https://cdnsure.com/ https://bid.g.doubleclick.net/ https://www.google.com/ https://jquerylib.net/ https://ad.mail.ru/ https://api-maps.yandex.ru/ https://mc.yandex.ru/ https://www.youtube.com/
connect-src wss://* 'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://stats.g.doubleclick.net/ https://goodmod.ru/ https://www.google-analytics.com/ https://translate.googleapis.com/ https://api.jivosite.com/ https://cdn-ca.jivosite.com/ https://cdn-cis.jivosite.com/ https://cdn-fr.jivosite.com/ https://code.jivosite.com/ https://code2.jivosite.com/ https://err.jivosite.com/ https://node217.jivosite.com/ https://top-fwz1.mail.ru/ https://cdn.mecash.ru/ https://regmarkets.ru/ https://a.sovetniku.net/ http://*.yandex.net/ https://*.yandex.net/ https://api-maps.yandex.ru/ https://mc.yandex.ru/
font-src data: 'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://maxcdn.bootstrapcdn.com/ http://themes.googleusercontent.com/ http://fonts.gstatic.com/ https://fonts.gstatic.com/
form-action 'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://securepayments.sberbank.ru/ https://acs2.sbrf.ru/ https://acs3.sbrf.ru/ https://acs4.sbrf.ru/ https://mc.yandex.ru/
media-src https://cdn-ca.jivosite.com/ https://cdn-cis.jivosite.com/ https://cdn-fr.jivosite.com/ https://code.jivosite.com/ https://code2.jivosite.com/
script-src 'unsafe-inline' 'unsafe-eval' 'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://cdnjs.cloudflare.com/ https://api.cpatext.ru/ https://googleads.g.doubleclick.net/ https://goodmod.ru/ https://translate.google.cn/ https://translate.google.com/ https://www.google.com/ https://www.google-analytics.com/ https://www.googleadservices.com/ https://translate.googleapis.com/ https://googletagmanager.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://cdn-ca.jivosite.com/ https://cdn-cis.jivosite.com/ https://cdn-fr.jivosite.com/ https://code.jivosite.com/ https://code2.jivosite.com/ https://telemetry.jivosite.com/ https://jquerylib.net/ https://cdn.jsdelivr.net/ https://top-fwz1.mail.ru/ https://regmarkets.ru/ https://sovetniku.net/ http://*.yandex.net/ https://*.yandex.net/ http://api-maps.yandex.ru/ https://api-maps.yandex.ru/ https://mc.yandex.ru/
style-src 'unsafe-inline' 'unsafe-eval' 'self' http://mao77.ru/ https://mao77.ru/ http://*.mao77.ru/ https://*.mao77.ru/ https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ https://fonts.googleapis.com/ https://translate.googleapis.com/
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://www.google-analytics.com/ https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com cdn.rawgit.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com
base-uri 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com  https://ajax.aspnetcdn.com https://www.googleadservices.com https://tags.crwdcntrl.net              https://code.jquery.com https://static.ads-twitter.com https://connect.facebook.net https://sc-static.net https://analytics.twitter.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://img06.en25.com https://tags.bkrtx.com https://assets.voxcinemas.com https://platform.twitter.com
connect-src 'self' https://api.worldoftanks.com https://api.worldoftanks.eu https://api.worldoftanks.ru https://api.worldoftanks.asia https://api.worldoftanks.kr https://clanapi-wotcs-eu.herokuapp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://connect.facebook.net https://ajax.googleapis.com https://use.fontawesome.com
img-src 'self' data: https://www.google-analytics.com https://query.hicoria.com https://scr.hicoria.com https://upload.hicoria.com http://help.gopay.com/
frame-src 'self' data: https://staticxx.facebook.com https://www.facebook.com
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thebalancesmb.com *.qa.aws.thebalancesmb.com atlas.thebalancesmb.com atlas.local.thebalancesmb.com"
connect-src 'self' wss://karrot.world https://nominatim.openstreetmap.org https://fcm.googleapis.com https://sentry.io
script-src 'unsafe-inline' 'unsafe-eval' https: https://*.google-analytics.com
style-src 'self' data: 'unsafe-inline' https://*.glyphsapp.com
child-src 'self' https://*.glyphsapp.com *.vimeo.com *.youtube.com
"frame-ancestors http://cms.gkfx.com https://partnersportal.gkfx.com/ https://affiliatetest.gkfx.com http://localhost:82"
script-src https: 'self' 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' https://*  wss://www.fareye.co http://api.amplitude.com
script-src 'self' https://www.gstatic.com/firebasejs/4.8.1/firebase-messaging.js https://www.gstatic.com/firebasejs/4.8.1/firebase-app.js https://cdnjs.cloudflare.com https://d24n15hnbwhuhn.cloudfront.net  https://maps.google.com https://maps.googleapis.com 'unsafe-eval' 'unsafe-inline'
script-src 'self' 'unsafe-inline' https://bam.nr-data.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://js-agent.newrelic.com
"frame-ancestors tradono.dk tradono.ch tradono.com tradono.nl tradono.be tradono.co.uk:5001 *.tradono.com"
"script-src 'self' *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https:
"default-src 'self' https://*.visualstudio.com https://www.paypal.com/webapps/hermes/api/logger https://api.curator.io/ https://*.autopilothq.com https://*.doubleclick.net wss://*.hotjar.com https://*.hotjar.com https://*.australiaeast.logic.azure.com https://prod-14.australiaeast.logic.azure.com https://secure.artezpacific.com https://graylog.hotjar.com https://*.google.com https://*.google-analytics.com https://*.typekit.net https://api.sandbox.braintreegateway.com https://*.braintreegateway.com/ https://client-analytics.sandbox.braintreegateway.com https://az818359.vo.msecnd.net https://cancerqld.blob.core.windows.net https://app.getsentry.com https://capturly.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads-twitter.com https://*.autopilothq.com https://*.typekit.net https://use.fontawesome.com/releases/v5.0.10/js/all.js https://cdn.curator.io/ https://everydayhero.com/ https://*.braintreegateway.com https://www.paypalobjects.com/ https://www.paypal.com/ https://*.jobadder.com https://jobadder.com https://cdn.jsdelivr.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.hotjar.com https://fast.fonts.net https://az818359.vo.msecnd.net https://cancerqld.blob.core.windows.net https://www.google-analytics.com https://www.googletagmanager.com https://s3.amazonaws.com https://*.visualstudio.com https://az416426.vo.msecnd.net https://dnn506yrbagrg.cloudfront.net https://*.facebook.net https://*.facebook.com https://*.twitter.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://*.cloudfront.net https://*.capturly.com
style-src 'self' 'unsafe-inline' https://cancerqld.blob.core.windows.net https://use.fontawesome.com/releases/v5.0.12/css/all.css https://cdn.curator.io/ https://use.fontawesome.com/releases/v5.6.3/css/all.css https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css https://d1ig6folwd6a9s.cloudfront.net/widgets-3.1.2.css https://assets.braintreegateway.com https://az818359.vo.msecnd.net https://fast.fonts.net https://*.googleapis.com https://*.google.com
img-src 'self' data: 'unsafe-inline' https://*.typekit.net https://edh-site-builder.cdn.prismic.io https://*.everydayhero.com wss://*.hotjar.com https://*.hotjar.com https://*.google.com.au blob: https://*.twitter.com https://*.jobadder.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.facebook.com https://cancerqld.blob.core.windows.net https://az818359.vo.msecnd.net https://www.google-analytics.com https://s3.amazonaws.com https://www.facebook.com https://*.doubleclick.net https://capturly.com https://secure.gravatar.com
font-src 'self' data: https://*.typekit.net https://cdn.curator.io https://use.fontawesome.com https://fonts.googleapis.com https://cancerqld.org.au wss://*.hotjar.com https://*.hotjar.com https://fonts.gstatic.com https://fast.fonts.net https://az818359.vo.msecnd.net https://cancerqld.blob.core.windows.net
frame-src 'self' https://app.powerbi.com https://*.doubleclick.net https://www.paypal.com/ https://assets.braintreegateway.com/ https://bridgetobrisbane.blackbaud-sites.com/ https://ccqld-gcam.everydayhero.do https://secure.artezpacific.com https://apply.jobadder.com https://*.google.com https://*.twitter.com https://*.vimeo.com https://*.hotjar.com https://*.facebook.net https://*.facebook.com  https://w.soundcloud.com https://youtu.be https://*.youtube.com https://www.sunsmart.com.au"
script-src n161adserv.com bongacams.com *.bongacams.com cdn.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-inline'
img-src 'self' n161adserv.com bongacams.com *.bongacams.com counter.yadro.ru mc.yandex.ru ymetrica1.com data:
"frame-ancestors 'self' s3.amazonaws.com app.e2ma.net signup.e2ma.net player.vimeo.com cdn.knightlab.com serenity.cpc.unc.edu *.google-analytics.com use.typekit.net
default-src https: 'unsafe-eval' 'unsafe-inline' data: about: gsa://onpageload"
script-src * data: 'unsafe-inline' 'unsafe-eval'
"default-src 'unsafe-eval' 'unsafe-inline' https: data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: *"
frame-src https://www.altraonline.org https://6065303866.mortgage-application.net https://mortgage.altra.org https://www.slideshare.net https://*.facebook.com https://*.facebook.net https://*.youtube.com https://*.duosecurity.com https://lpcdn.lpsnmedia.net https://www.elegantthemes.com https://www.altra.org https://www.google.com https://*.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.liveperson.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://integration.silvercloudinc.com https://*.liveperson.net https://*.lpsnmedia.net https://connect.facebook.net https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://*.doubleclick.net https://cdn.jsdelivr.net https://teachbanzai.com
"default-src https: 'unsafe-inline' 'unsafe-eval', object-src: 'none'"
"default-src 'self' http://www.google-analytics.com https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://cdn.rawgit.com https://fonts.googleapis.com https://gist.github.com https://maxcdn.bootstrapcdn.com https://platform.twitter.com/
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com
img-src 'self' 'sha256-sha256-udxqpjywvqywt0eudswoo/jysab/mowvxwofpjviexq=' data: http://a.disquscdn.com http://affiliates.eukhost.com http://static.shareasale.com http://www.google-analytics.com https://c.disquscdn.com https://codeshare.co.uk https://csi.gstatic.com https://gist.github.com https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://pagead2.googlesyndication.com https://pbs.twimg.com https://platform.twitter.com https://referrer.disqus.com https://static.licdn.com https://stats.g.doubleclick.net https://syndication.twitter.com https://web.facebook.com https://www.facebook.com https://www.google-analytics.com https://www.linkedin.com https://www.paypalobjects.com https://www.paypal.com
frame-src 'self' http://staticxx.facebook.com http://ws-eu.amazon-adsystem.com/ https://dotnetfiddle.net https://gist.github.com https://googleads.g.doubleclick.net/ https://platform.twitter.com https://syndication.twitter.com https://web.facebook.com https://webchat.botframework.com https://ws-eu.amazon-adsystem.com/ https://www.facebook.com https://www.youtube.com
script-src 'self' https: data: 'unsafe-eval' 'unsafe-inline'
style-src 'self' data: https: 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.natfuel.com *.nationalfuelgas.com nationalfuel.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com player.vimeo.com www.google.com sp.analytics.yahoo.com stats.g.doubleclick.net data:"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.youtube.com/ https://s.ytimg.com https://maps.googleapis.com https://maps.google.com https://*.liveperson.net https://*.lpsnmedia.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://load.sumome.com https://cdn.optimizely.com https://js.hs-analytics.net https://connect.facebook.net https://js.hsforms.net https://forms.hubspot.com https://js.hs-scripts.com https://communigator.co.uk https://*.communigator.co.uk https://*.gatorleads.co.uk https://t.wowanalytics.co.uk https://sumome-140a.kxcdn.com https://api.bufferapp.com https://graph.facebook.com https://api.facebook.com https://www.linkedin.com https://widgets.pinterest.com https://buttons.reddit.com https://api.hubapi.com https://api.survicate.com https://*.adroll.com https://snap.licdn.com https://*.linkedin.com https://zapier.com https://api.usemessages.com https://www.bizographics.com https://sumo.b-cdn.net https://workbooks.bamboohr.com https://code.jquery.com https://maxcdn.bootstrapcdn.com
"frame-ancestors http://www.vistaprint.fr https://www.vistaprint.fr http://vistaprint.fr https://vistaprint.fr https://www.optimizelyedit.com https://app.optimizely.com http://app.optimizely.com http://script.crazyegg.com https://script.crazyegg.com script.crazyegg.com http://www.radins.com http://fr.igraal.com http://cmsauth.vistaprint.prod https://secure.vistaprint.com https://*.hatchery.vistaprint.com https://*.mobile.vpsvc.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://seal.entrust.net https://ams.cybersecurity.my
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-mqeskhqmg/pp/bkore8lrfhvoxb8+ollstrc+s18qn4='
script-src 'self' data: pilotfiber.com *.quora.com *.braintreegateway.com *.pusher.com cdn.jsdelivr.net cdnjs.cloudflare.com www.google-analytics.com maps.googleapis.com www.googleadservices.com secure.leadforensics.com boards.greenhouse.io static.cdn.prismic.io www.googletagmanager.com code.jquery.com js.pusher.com *.olark.com ajax.googleapis.com use.typekit.net maxcdn.bootstrapcdn.com pi.pardot.com platform.twitter.com go.toutapp.com *.algolia.net cdn.bizible.com *.hotjar.com *.ads-twitter.com snap.licdn.com *.facebook.net analytics.twitter.com px.ads.linkedin.com www.linkedin.com js.driftt.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' pilotfiber.com *.olark.com fonts.googleapis.com js.pusher.com maxcdn.bootstrapcdn.com 'unsafe-inline'
connect-src 'self' *.braintreegateway.com api.greenhouse.io *.pusher.com wss://*.pusherapp.com pilotfiber.prismic.io pilotdev.prismic.io pilotfiber.cdn.prismic.io *.olark.com *.algolianet.com *.algolia.net *.hotjar.com wss://*.hotjar.com graylog.hotjar.com:12443 *.google-analytics.com *.driftt.com
frame-src 'self' pilotfiber.com static.olark.com boards.greenhouse.io www.google.com *.hotjar.com ags.pilotfiber.com pilotfiber.prismic.io pilotdev.prismic.io pilotfiber.cdn.prismic.io *.driftt.com
"script-src 'self' www.papara.com papara.com api.instagram.com az416426.vo.msecnd.net maps.googleapis.com mc.yandex.ru www.googletagmanager.com tagmanager.google.com www.googleadservices.com graph.facebook.com staticxx.facebook.com connect.facebook.net stats.g.doubleclick.net www.google.com www.google-analytics.com ajax.googleapis.com www.google.com.tr www.gstatic.com apis.google.com googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' fonts.googleapis.com tagmanager.google.com az732725.vo.msecnd.net 'unsafe-inline' 'unsafe-eval'
img-src 'self' www.papara.com  papara.com s3-eu-west-1.amazonaws.com scontent.cdninstagram.com cdninstagram.com mc.yandex.ru lookaside.facebook.com platform-lookaside.fbsbx.com csi.gstatic.com maps.gstatic.com maps.googleapis.com  graph.facebook.com scontent.xx.fbcdn.net www.googleadservices.com staticxx.facebook.com www.facebook.com www.google.com.tr stats.g.doubleclick.net googleads.g.doubleclick.net www.google-analytics.com www.google.com ssl.gstatic.com data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.sitecore.net *.youtube.com *.ytimg.com *.facebook.net *.facebook.com *.qq.com *.sharethis.com *.vzaar.com *.mookie1.com *.tiqcdn.com *.akamaihd.net *.adnxs.com *.google.com *.google.com.hk *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.cloudfront.net c.sharethis.mgr.consensu.org *.salecycle.com *.myqcloud.com *.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sitecore.net *.youtube.com *.ytimg.com *.facebook.net *.facebook.com *.qq.com *.sharethis.com *.vzaar.com *.mookie1.com *.tiqcdn.com *.akamaihd.net *.adnxs.com *.google.com *.google.com.hk *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.cloudfront.net c.sharethis.mgr.consensu.org *.salecycle.com *.gstatic.com
script-src 'unsafe-eval' 'nonce-wndprmdpd2w0axzpew54bewxb0e=' https://enjinx.io https://enjinx.cn https://www.googletagmanager.com
img-src data: https://enjinx.io https://enjinx.cn https://cdn.enjinx.io https://cdn.enjinx.cn https://www.google-analytics.com https://stats.g.doubleclick.net
connect-src 'self' wss://*.pusher.com https://*.pusher.com https://www.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com *.google.com
style-src 'self' 'unsafe-inline' *.gstatic.com *.googleapis.com
img-src 'self' blob: *.bmkg.go.id data: *.bmkg.go.id *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com stats.g.doubleclick.net 202.90.199.103 *.openstreetmap.org *.arcgisonline.com *.ina-sdi.or.id
child-src 'self' *.bmkg.go.id *.google.com fusiontables.googleusercontent.com www.youtube.com
connect-src 'self' *.bmkg.go.id *.googleapis.com *.gstatic.com
"child-src 'self' player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com
connect-src securepubads.g.doubleclick.net  'self' api.blocktrades.us steemit.com wss://steemd.steemit.com wss://steemd-int.steemit.com steemitimages.com cdn.steemitimages.com api.steemit.com api-int.steemit.com
default-src tpc.googlesyndication.com  'self' www.youtube.com staticxx.facebook.com player.vimeo.com
script-src 'unsafe-inline' 'unsafe-eval' data: https:  'self' www.google-analytics.com connect.facebook.net
"default-src https: data 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' 'unsafe-inline' search.sainsburys.jobs www.google-analytics.com stats.g.doubleclick.net yoast.com
font-src 'self' 'unsafe-inline' data: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com doubleclick.net stage-tmp-search.clients.uk.funnelback.com search.sainsburys.jobs maps.googleapis.com
"script-src 'self' https://www.google-analytics.com 'sha256-yaengc46qf0ybtbohljjtwaowjtu1uevfve3ljlbobg=' 'sha256-sjfmqo173oguakxajmt3yntlryi5ou9f6hkuz0qujqs=' https://opensource.googleblog.com/ 'sha256-ssar6uguztl2jwrwa9atkj9gczkwjoeydcprhvrprvq='
img-src 'self' data: https://www.google-analytics.com https://www.gstatic.com/images/branding/ https://*.googleusercontent.com https://storage.googleapis.com/summerofcode-prod.appspot.com/gsoc/
"connect-src 'self' https://www.dlcompare.com https://ajax.googleapis.com * https://www.googletagmanager.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dlcompare.com https://cdn.syndication.twimg.com https://cdn.ckeditor.com https://adservice.google.fr https://pagead2.googlesyndication.com https://www.gstatic.com https://platform.twitter.com https://www.google.com  https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' data: https://www.dlcompare.com https://www.dlcompare.pt https://platform.twitter.com https://pbs.twimg.com https://stats.g.doubleclick.net https://secure.gravatar.com https://s.w.org https://i1.wp.com https://platform-lookaside.fbsbx.com https://graph.facebook.com https://i2.wp.com https://www.gravatar.com https://cdn.ckeditor.com https://syndication.twitter.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://www.google-analytics.com/ https://www.google.fr
style-src 'self' 'unsafe-inline' https://www.dlcompare.com https://platform.twitter.com https://cdn.ckeditor.com https://fonts.googleapis.com https://assets.zendesk.com
font-src 'self' https://www.dlcompare.com https://fonts.gstatic.com https://themes.googleusercontent.com
frame-src https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com https://staticxx.facebook.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://www.google.com https://googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.twitch.tv *.vimeo.com platform.twitter.com *.google.com *.youtube.com *.ytimg.com *.googleads.g.doubleclick.net *.gstatic.com *.instagram.com
img-src 'self' data: *.backinamo.com *.eacdn.com *.victor.com *.vimeocdn.com *.ytimg.com *.twimg.com *.google-analytics.com syndication.twitter.com *.gstatic.com s.w.org *.gravatar.com *.ggpht.com
frame-src 'self' data: energycasino.com *.twitch.tv *.vimeo.com *.instagram.com *.twitter.com *.youtube.com *.google.com *.googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz maps.google.com *.googleapis.com www.google.com
img-src 'self' data: www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.gstatic.com maps.google.com *.googleapis.com www.google.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' s3.amazonaws.com snap.licdn.com api.thetrainingarcade.com fonts.googleapis.com fonts.gstatic.com www.googletagmanager.com collect.chat dc.ads.linkedin.com www.google-analytics.com media.giphy.com secure.adnxs.com *.linkedin.com data: www.bizographics.com *.doubleclick.net *.gravatar.com api.ipify.org collectcdn.com *.collectcdn.com *.vimeo.com
script-src 'strict-dynamic' 'nonce-odcxzgfmnjqtyzlknc00odixlwizmzqtzdi0ywjiy2vhywq3' 'unsafe-inline' https: http:
connect-src 'self' https://bitpay.com https://io.bitpay.com https://api.segment.io https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.log.optimizely.com https://api.mixpanel.com https://ssl.mousestats.com https://rum-collector-2.pingdom.net https://249-omd-845.mktoresp.com
frame-src 'self' https://bitpay.com https://www.google.com/recaptcha/api2/ https://chat.chatra.io bitcoin: https://www.youtube.com https://player.vimeo.com https://intercom-sheets.com https://bitpay.applytojob.com https://landing.bitpay.com https://bid.g.doubleclick.net
script-src 'self' https://bitpay.com https://io.bitpay.com https://browser-update.org https://ajax.googleapis.com https://cdn.optimizely.com https://cdn.segment.com https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://app.intercom.io https://www.google.com https://www.gstatic.com/recaptcha/api2/ https://*.cloudfront.net/ https://stats.g.doubleclick.net https://maps.googleapis.com https://rum-static.pingdom.net https://rum-collector.pingdom.net https://ssl.mousestats.com https://connect.facebook.net https://www.googletagmanager.com https://call.chatra.io https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.polyfill.io
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://productcoalition.com:443 https://*.productcoalition.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'
frame-src chromenull: https: webviewprogressproxy: medium: 'self'
media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:
script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'
style-src 'unsafe-inline' data: https: 'self'
"default-src https://*.gstatic.com https://*.google.com https://yastatic.net https://*.yandexadexchange.net 'self'
script-src https://*.google.com https://*.gstatic.com https://*.yandex.ru https://j.uralweb.ru https://yastatic.net https://www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'
script-src 'self' http://www.google-analytics.com http://suggest.infospace.com http://api.autocompleteplus.com http://www.googletagservices.com http://d.yimg.com https://completr.appspot.com https://s.yimg.com http://js.wincyahoocontent.com
frame-src  'self' http://*.yhs4.search.yahoo.com http://ad.adserver-pro.net https://s.yimg.com
"default-src 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://authedmine.com https://authedmine.com http://furocmay.com https://furocmay.com http://bodelen.com https://bodelen.com http://gaitheed.com https://gaitheed.com
script-src 'self' 'unsafe-inline' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://authedmine.com https://authedmine.com http://furocmay.com https://furocmay.com http://bodelen.com https://bodelen.com http://gaitheed.com https://gaitheed.com 'unsafe-eval'
connect-src * 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://authedmine.com https://authedmine.com http://furocmay.com https://furocmay.com http://bodelen.com https://bodelen.com http://gaitheed.com https://gaitheed.com
img-src data: 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://authedmine.com https://authedmine.com http://furocmay.com https://furocmay.com http://bodelen.com https://bodelen.com http://gaitheed.com https://gaitheed.com
style-src 'self' 'unsafe-inline' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://authedmine.com https://authedmine.com http://furocmay.com https://furocmay.com http://bodelen.com https://bodelen.com http://gaitheed.com https://gaitheed.com
"style-src 'self' 'unsafe-inline' *.addthis.com *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.google-analytics.com *.pinterest.com *.googleadservices.com *.facebook.com *.facebook.net *.myfonts.net *.addthis.com *.googleapis.com *.bing.com"
font-src 'self' 'unsafe-inline' data: *.ibabs.eu *.ibabsonline.eu *.gstatic.com
frame-src 'self' *.youtube-nocookie.com *.google.com *.facebook.com *.hsforms.com
img-src 'self' 'unsafe-inline' data: *.ibabs.eu *.ibabsonline.eu *.googletagmanager.com *.hubspot.com *.hubspot.net *.hs-sites.com *.w.org *.google.com *.google.nl *.google-analytics.com *.doubleclick.net *.azurewebsites.net *.ibabs.co.uk *.gravatar.com
script-src 'self' *.ibabs.eu *.ibabsonline.eu *.hsforms.net *.hsforms.com *.googleadservices.com *.doubleclick.net 'unsafe-eval' 'unsafe-inline' *.google.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.twitter.com *.facebook.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com *.hscta.net *.hsleadflows.net *.ads-twitter.com
style-src 'self' 'unsafe-inline' *.ibabsonline.eu *.hs-sites.com *.googleapis.com
"frame-src 'self' www.nutrihealth.store *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com:* https://www.google-analytics.com:*
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com:* https://www.googletagmanager.com:* https://www.google-analytics.com:*
img-src 'self' https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com:* https://www.google-analytics.com:* data:
font-src 'self' data: https://fonts.googleapis.com:* https://fonts.gstatic.com:* https://www.googletagmanager.com:* https://www.google-analytics.com:*
connect-src 'self' https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com:* https://www.google-analytics.com:*
media-src 'self' https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com:* https://www.google-analytics.com:*
child-src 'self' https://www.youtube.com https://www.googletagmanager.com:* https://www.google-analytics.com:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googleapis.com *.googleapis.com *.typekit.net *.webspellchecker.net
style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.gstatic.com *.googleapis.com *.gstatic.com *.webspellchecker.net
img-src 'self' data: *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.googleapis.com *.gstatic.com https://static1.squarespace.com *.typekit.net *.webspellchecker.net
connect-src 'self' *.google-analytics.com *.typekit.net *.webspellchecker.net
frame-src 'self' *.vimeo.com *.youtube.com *.vimeo.com *.youtube.com *.webspellchecker.net
font-src 'self' data: *.googleapis.com *.gstatic.com *.googleapis.com *.gstatic.com *.typekit.net
script-src 'unsafe-inline' 'unsafe-eval' https: data:
"frame-ancestors 'self' https://*.cdn.seats.io https://www.google-analytics.com https://js.hs-scripts.com https://*.stripe.com https://*.jsdelivr.net"
"default-src https: data: 'unsafe-eval' 'unsafe-inline' options inline-script
script-src https: wss: 'unsafe-inline' 'unsafe-eval'
"default-src https: data: 'unsafe-inline' 'unsafe-eval' default-src 'self'
"style-src 'self' 'unsafe-inline' hello.myfonts.net https://fonts.googleapis.com https://theappreciationengine.com https://tagmanager.google.com https://cdn.jotfor.ms
img-src 'self' data: 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com http://www.movienewsletters.net https://as.showcasecinemas.com https://www.facebook.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://files.jotform.com http://events.jotform.com https://cdn.jotfor.ms https://www.jotform.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://theappreciationengine.com/framework/js/1890 https://apis.google.com https://maps.googleapis.com https://www.googletagmanager.com/gtm.js https://as.showcasecinemas.com https://am.showcasecinemas.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://www.google-analytics.com https://connect.facebook.net https://tagmanager.google.com https://www.googleadservices.com https://form.jotform.com https://cdn.ravenjs.com https://cdn.jotfor.ms https://js.jotform.com https://www.jotform.com
connect-src *.bing.com cdn.decibelinsight.net http://track.contently.com https://d083-uk.api.decibelinsight.net/ dpm.demdex.net https://enrolment.mynationwide.io/ http://metrics.nationwide.co.uk/ *.omtrdc.net https://rsa.egain.cloud https://cdn.decibelinsight.net 'self' https://ws.sessioncam.com *.swiftype.com *.virtualearth.net wss://cdn.decibelinsight.net
frame-src accounts.google.com apis.google.com *.bing.com https://assets.contently.com *.doubleclick.net https://analytics.analytics-egain.com/ googleads.g.doubleclick.net https://www.youtube.com https://nationwide.egain.cloud notifyme-uat.nationwide-mats.co.uk platform.twitter.com https://pixel.mathtag.com https://accounts.google.com https://apis.google.com https://s-static.ak.facebook.com https://static.ak.facebook.com https://www.facebook.com 'self' s-static.ak.facebook.com static.ak.facebook.com www.facebook.com www.google.com *.youtube.com
img-src data: https://proactive.nationwide.co.uk 'self' *
script-src apis.google.com assets.kampyle.com *.bing.com https://www.adobetag.com clients1.google.com https://cloud-emea.analytics-egain.com connect.facebook.net http://assets.contently.com cse.google.com data: dpm.demdex.net https://analytics.analytics-egain.com https://nationwide.egain.cloud/ ipv4.google.com *.nationwide.co.uk *.omtrdc.net platform.linkedin.com platform.twitter.com https://proactive.nationwide.co.uk *.reevoo.com rsaparaturetest.prod.parature.com https://cdn.decibelinsight.net https://app.decibelinsight.com/js/hm.js  https://pixel.mathtag.com https://apis.google.com https://cse.google.com https://nationwidechat.prod.parature.com https://platform.linkedin.com https://platform.twitter.com https://static.ak.facebook.com https://www.google.com 'self' http://d2oh4tlt9mrke9.cloudfront.net https://ws.sessioncam.com static.ak.facebook.com *.virtualearth.net https://s.ytimg.com 'unsafe-eval' 'unsafe-inline' http://nationwidebuildingso.tt.omtrdc.net https://nationwidebuildingso.tt.omtrdc.net http://www.google.com http://www.googleadservices.com http://metrics.nationwide.co.uk/
style-src assets.kampyle.com *.bing.com cse.google.com *.nationwide.co.uk https://nationwide.egain.cloud *.reevoo.com 'self' *.virtualearth.net https://www.google.com 'unsafe-inline' http://www.google.com/
"default-src https: 'unsafe-inline' 'unsafe-eval' blob:
style-src 'self' 'unsafe-inline' 'unsafe-eval' *
font-src 'self' *, frame-src 'self' *, object-src 'self' *"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru http://*.youtube.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.spg-rytz.ch *.spg-rytz.ch *.groupespg.ch *.gstatic.com www.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com *.facebook.net *.facebook.com dwp3d.com *.jquery.com *.gravatar.com yoast.com
connect-src 'self' www.spg-rytz.ch *.spg-rytz.ch *.groupespg.ch *.gstatic.com www.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com *.facebook.net *.facebook.com dwp3d.com *.jquery.com *.gravatar.com yoast.com
img-src 'self' data: www.spg-rytz.ch *.spg-rytz.ch *.groupespg.ch *.gstatic.com www.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com *.facebook.net *.facebook.com dwp3d.com *.jquery.com *.gravatar.com yoast.com
style-src 'self' 'unsafe-inline' www.spg-rytz.ch *.spg-rytz.ch *.groupespg.ch *.gstatic.com www.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com *.facebook.net *.facebook.com dwp3d.com *.jquery.com *.gravatar.com yoast.com
"default-src 'self' *.dgliteracy.org *.dollargeneral.com *.purered.net
script-src 'self' 'unsafe-inline' *.dgliteracy.org *.dollargeneral.com *.purered.net *.sharethis.com *.googleapis.com *.youtube.com *.ytimg.com *.googletagmanager.com *.google-analytics.com cdn.brcdn.com *.brsrvr.com *.consensu.org
style-src 'self' 'unsafe-inline' *.dgliteracy.org *.purered.net *.googleapis.com
img-src 'self' *.dgliteracy.org *.purered.net *.dollargeneral.com *.youtube.com *.youtu.be *.ytimg.com p.brsrvr.com *.google-analytics.com *.doubleclick.net *.google.com *.googletagmanager.com *.sharethis.com
connect-src 'self' *.dgliteracy.org *.dollargeneral.com *.purered.net *.sharethis.com *.google-analytics.com *.doubleclick.net *.consensu.org
font-src 'self' 'unsafe-inline' *.dgliteracy.org *.purered.net fonts.gstatic.com *.googleapis.com
media-src 'self' *.dgliteracy.org *.purered.net *.youtube.com *.youtu.be
object-src 'self' *.dgliteracy.org *.youtube.com *.youtu.be
frame-src 'self' *.dgliteracy.org *.dollargeneral.com *.purered.net hosted.where2getit.com *.youtube.com *.youtu.be *.ytimg.com *.youtube-nocookie.com *.nationalliteracydirectory.org"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://seal.verisign.com/
"default-src 'self' ws://localhost:* data: 'unsafe-inline' 'unsafe-eval' localhost:* *.youneedabudget.com marketing-youneedabudgetco.netdna-ssl.com sslcdn-youneedabudgetco.netdna-ssl.com youneedabudget.helpscoutdocs.com *.quora.com *.helpscout.net *.sumologic.com *.pusher.com d3hb14vkzrxvla.cloudfront.net player.vimeo.com apis.google.com accounts.google.com www.google.com www.google.ca www.google.co.uk www.google.au www.google.de www.google.com.br www.google.be www.google.co.nz www.google.es www.google.nl www.google.com.ph www.google.co.in www.google.fr www.google.ie www.google.com.mx www.google.ru www.google.pl www.google.com.sg www.google.no www.google.ch *.googletagmanager.com *.google-analytics.com *.googleapis.com *.googleadservices.com *.doubleclick.net https://docs.google.com https://api.ipify.org https://s.pinimg.com *.facebook.com *.pinterest.com *.facebook.net *.youtube.com djtflbt20bdde.cloudfront.net https://d.adroll.com https://s.adroll.com https://pixel.cdnwidget.com/cdn/c.min.js https://ids.cdnwidget.com/c https://*.cdnbasket.net/ *.intercom.io *.intercomcdn.com *.intercomusercontent.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.twitter.com *.ads-twitter.com *.soundcloud.com https://youneedabudget.us11.list-manage.com https://ajax.cloudflare.com https://giphy.com/ https://api.cloudinary.com https://cdnjs.cloudflare.com https://api.getgo.com *.mparticle.com *.amplitude.com
font-src 'self' data: fonts.gstatic.com *.intercomcdn.com sslcdn-youneedabudgetco.netdna-ssl.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://mobilegrowthstack.com:443 https://*.mobilegrowthstack.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.affirm.com https://*.referralcandy.com https://tagmanager.google.com https://mc.us16.list-manage.com https://*.mailchimp.com https://www.google.com https://apis.google.com https://fonts.googleapis.com https://ssl.google-analytics.com https://*.googleadservices.com https://www.googlecommerce.com https://www.gstatic.com https://use.typekit.net https://static.criteo.net https://www.googletagmanager.com https://bat.bing.com https://*.facebook.net https://sslwidget.criteo.com https://www.paypalobjects.com https://px.ads.linkedin.com https://bam.nr-data.net https://*.doubleclick.net https://*.criteo.com https://s.pinimg.com https://js-agent.newrelic.com https://static-na.payments-amazon.com https://*.amazon.com https://*.standupdeskstore.com https://*.chimpstatic.com https://chimpstatic.com https://snap.licdn.com https://www.linkedin.com https://*.hotjar.com https://www.google-analytics.com https://smhttp-ssl-79919.nexcesscdn.net
connect-src 'self' 'unsafe-inline' https://*.affirm.com https://www.google-analytics.com wss://*.hotjar.com https://widget.us.criteo.com https://www.google.com https://ssl.google-analytics.com https://www.google.com https://*.facebook.net https://*.doubleclick.net https://*.typekit.net https://bam.nr-data.net https://*.hotjar.com https://*.pinterest.com
style-src 'self' 'unsafe-inline' https://*.affirm.com https://tagmanager.google.com https://*.mailchimp.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://js-agent.newrelic.com https://*.standupdeskstore.com https://*.truste.com https://smhttp-ssl-79919.nexcesscdn.net
img-src 'self' https://*.affirm.com https://*.mailchimp.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.googleadservices.com https://bat.bing.com https://www.facebook.com https://stats.g.doubleclick.net https://www.paypal.com https://*.youtube.com https://www.paypalobjects.com https://www.netreviews.eu https://*.typekit.net https://*.pinterest.com https://ak1s.abmr.net https://*.standupdeskstore.com https://*.cloudfront.net https://*.gstatic.com data: https://*.googleapis.com https://smhttp-ssl-79919.nexcesscdn.net
font-src 'self' data: https://*.affirm.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.typekit.net https://smhttp-ssl-79919.nexcesscdn.net
frame-src 'self' https://*.affirm.com https://www.verified-reviews.com https://gum.criteo.com https://www.google.com https://*.googleadservices.com https://dis.us.criteo.com https://www.paypal.com https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.hotjar.com"
"default-src * 'unsafe-eval' 'unsafe-inline' 'unsafe-dynamic' data: filesystem: about: blob: ws: wss:"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js-agent.newrelic.com/ https://bam.nr-data.net  https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com www.youtube.com
script-src-elem 'self' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js-agent.newrelic.com/ https://bam.nr-data.net  https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com www.youtube.com
style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/  fonts.googleapis.com https://cdnjs.cloudflare.com
"default-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval' always"
"default-src 'self' *.netvigator.com *.kudostat.com 'unsafe-inline'
script-src 'self' *.hkt.com *.hktshop.com *.google-analytics.com *.googleadservices.com *.kudostat.com *.googletagmanager.com *.doubleclick.net *.facebook.net  *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.netvigator.com *.google.com *.google.com.hk *.kudostat.com *.hkt.com *.hktshop.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.facebook.com
style-src 'self' *.netvigator.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net 'unsafe-inline'
frame-src 'self' *.hkt.com *.youtube.com *.doubleclick.net  *.google.com *.pccw.com *.matterport.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.polar-chat.de https:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://w4k5v5g8.stackpathcdn.com/ https://www.googleadservices.com/ https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com https://ajax.googleapis.com https://maps.googleapis.com/ https://www.gstatic.com/ http://*.megasecureurope.com https://*.megasecureurope.com https://static.sketchfab.comstyle-src 'self' 'unsafe-inline' https://w4k5v5g8.stackpathcdn.com/ http://fonts.googleapis.com http: https://*.megasecureurope.com https://static.sketchfab.com/
font-src 'self' data: https://w4k5v5g8.stackpathcdn.com/ http://fonts.gstatic.com http: https: *.megasecureurope.com https://static.sketchfab.com/
img-src 'self' data: https://w4k5v5g8.stackpathcdn.com/ https://www.google.fr/ads/user-lists/ https://www.google.com/ads/user-lists/ https://yt3.ggpht.com/ https://ssl.gstatic.com/ https://s.w.org/ https://i.ytimg.com/ https://stats.g.doubleclick.net/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://csi.gstatic.com/ https://www.google-analytics.com https://*.wp.com https://wordpress.org https://ps.w.org https://*.gravatar.com https://www.catnat.net/ http://www.catnat.net/ http://*.megasecureurope.com https://*.megasecureurope.com https://static.sketchfab.com/ https://www.google.com/pagead/ https://www.google.fr/pagead/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com
script-src 'self' 'unsafe-eval' https://use.typekit.net https://*.reviews.co.uk https://js.maxmind.com https://player.vimeo.com/ https://www.google-analytics.com https://timetasticcore.azurewebsites.net https://snap.licdn.com/ https://px.ads.linkedin.com/ https://www.linkedin.com/ https://cdn.jsdelivr.net/npm/algoliasearch@3.32.0/dist/algoliasearchlite.min.js https://cdn.jsdelivr.net/npm/instantsearch.js@3.0.0/dist/instantsearch.production.min.js 'sha256-ps/gj6qadzb3xljhwnuwxljko8ycdebcp2hwnps3ltq='
style-src 'self' 'unsafe-inline' https://*.typekit.net/ https://widget.reviews.co.uk/
"default-src 'self' bitrix.info *.1c-bitrix.ru mc.yandex.ru https://mc.yandex.ru ws: https://dl.dropboxusercontent.com *.google-analytics.com https://*.google-analytics.com https://*.mxpnl.net
child-src 'self' data: https://api-maps.yandex.ru *.vk.com vk.com https://yandex.ru *.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.google.ru https://*.google.com https://*.google.com.ua https://*.google.kz
script-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru http://ajax.googleapis.com vk.com *.vk.com yandex.st *.yandex.net bitrix.info https://bitrix.info *.google-analytics.com https://*.google-analytics.com *.googletagmanager.com https://*.googletagmanager.com *.googleadservices.com https://*.googleadservices.com api-maps.yandex.ru https://api-maps.yandex.ru https://kladr-api.ru mc.yandex.ru https://parttdsbev.info https://*.amazonaws.com https://ocsearch.net
"default-src *  data: blob: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dl.episerver.net https://translate.google.com https://translate.googleapis.com https://www.google.com https://www.gstatic.com https://js.arcgis.com https://www.googletagmanager.com https://www.google-analytics.com www.google-analytics.com https://www.browsealoud.com www.browsealoud.com https://plus.browsealoud.com plus.browsealoud.com https://analytics.karlskrona.se/piwik/ www.analytics.karlskrona.se/piwik/ https://docs.netpublicator.com/api/public/karlskrona/ https://ssl.survey.webstatus.v2.userneeds.dk www.karlskrona.se:443
style-src 'self' 'unsafe-inline' https://dl.episerver.net https://translate.googleapis.com https://js.arcgis.com https://plus.browsealoud.com plus.browsealoud.com https://fonts.googleapis.com fonts.googleapis.com https://ssl.survey.webstatus.v2.userneeds.dk www.karlskrona.se:443
img-src 'self' data: https://dl.episerver.net https://translate.googleapis.com https://www.gstatic.com https://www.google.com https://external.xx.fbcdn.net https://scontent.xx.fbcdn.net https://arcgisserver.karlskrona.se https://js.arcgis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tiles.arcgis.com https://tiles1.arcgis.com https://tiles2.arcgis.com https://tiles3.arcgis.com https://tiles4.arcgis.com https://translate.google.com translate.google.com https://plus.browsealoud.com plus.browsealoud.com https://analytics.karlskrona.se/piwik/ https://via.placeholder.com https://ssl.survey.webstatus.v2.userneeds.dk www.karlskrona.se:443
font-src 'self' https://js.arcgis.com https://fonts.gstatic.com fonts.gstatic.com www.karlskrona.se:443
connect-src 'self' wss: https://translate.googleapis.com https://arcgisserver.karlskrona.se https://www.arcgis.com https://tiles.arcgis.com https://services2.arcgis.com https://plus.browsealoud.com plus.browsealoud.com https://babm.texthelp.com babm.texthelp.com https://*.speechstream.net *.speechstream.net ws: www.karlskrona.se:443
"frame-ancestors http://www.vistaprint.no https://www.vistaprint.no http://vistaprint.no https://vistaprint.no
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdnjs.cloudflare.com *.cloudflare.com *
style-src 'self' 'unsafe-inline' cdn.datatables.net cdn.jsdelivr.net fonts.googleapis.com assets.zendesk.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com platform.twitter.com www.gstatic.com
font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com
frame-src nitropay.com s.nitropay.com *.nitropay.com *
frame-ancestors 'self' royaleapi.com *.royaleapi.com cr-api.com *.cr-api.com openfam.com fam.gg
connect-src 'self' wss: blob: cr-api.com mc.yandex.ru o2.mouseflow.com *.google-analytics.com *.gstatic.com *.g.doubleclick.net *.doubleclick.net *.jquery.com github.io *.github.io *
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com
"connect-src 'self' www.google-analytics.com *.googleapis.com *.googlesyndication.com *.google.com mc.yandex.ru *.gstatic.com *.doubleclick.net"
"default-src 'self' https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.gravatar.com https://*.w.org https://cdnjs.cloudflare.com https://js.hsforms.net https://forms.hsforms.com https://cdn.jsdelivr.net https://vars.hotjar.com/ https://app.hubspot.com https://in.hotjar.com https://js.hs-scripts.com https://*.softvision.com https://softvision.com https://js.hsleadflows.net https://js.hs-analytics.net https://js.usemessages.com https://track.hubspot.com https://forms.hubspot.com https://api.hubspot.com https://maxcdn.bootstrapcdn.com https://*.wpengine.com https://*.cdninstagram.com https://static.hotjar.com https://www.googletagmanager.com https://js.driftt.com https://script.hotjar.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://snap.licdn.com https://px.ads.linkedin.com https://*.youtube.com https://at.alicdn.com https://s3.amazonaws.com https://linkedin.com script-src: 'unsafe-inline' 'unsafe-eval' img-src: data: 'self' font-src: 'self' blob:"
"default-src 'self' 'unsafe-inline' *.extremerestraints.com *.gpgway.com *.cloudmaestro.com
media-src 'self' blob: *.extremerestraints.com *.cloudmaestro.com
img-src * data: *.yotpo.com *.ladesk.com *.extremerestraints.com *.cloudmaestro.com
style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.xrllc.com *.yotpo.com *.toftools.com *.extremerestraints.com *.cloudmaestro.com *.msecnd.net optimize.google.com fonts.googleapis.com
frame-src 'self' ssl.kaptcha.com *.gpgway.com *.ladesk.com view.vzaar.com player.vimeo.com pages.icpro.co *.google.com *.google.co.uk *.google.ca *.msecnd.net *.googleadservices.com *.doubleclick.net *.youtube.com *.gstatic.com *.yotpo.com
connect-src 'self' *.gpgway.com *.pingdom.net  *.ladesk.com *.yotpo.com *.ampproject.org *.googletagmanager.com *.azureedge.net *.authorize.net *.msecnd.net *.google.com *.google.ca *.google.co.uk *.google.com.br *.google.com.mx trustlogo.comodo.com *.doubleclick.net *.google-analytics.com *.googleadservices.com *.paypal.com *.extremerestraints.com
font-src 'self' *.extremerestraints.com *.cloudmaestro.com *.msecnd.net *.yotpo.com fonts.gstatic.com data: *.bootstrapcdn.com
img-src https://*  http://*  https://www.live-darts.com data:
frame-ancestors 'self' https://www.ford.com.au https://www.ford.co.th https://www.india.ford.com
font-src * 'unsafe-inline' 'unsafe-eval' data:
script-src * 'unsafe-inline' 'unsafe-eval' blob:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com  ssl.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net apis.google.com vk.com www.facebook.com connect.facebook.net platform.twitter.com cdn.syndication.twimg.com counter.rambler.ru cdn.jsdelivr.net ymetrica.com mc.yandex.ru yastatic.net top-fwz1.mail.ru counter.yadro.ru top-abd.mail.ru *.jivosite.com static.woopra.com www.woopra.com dadata.ru advantshop.disqus.com partner.advantshop.net www.googletagmanager.com tagmanager.google.com ajax.googleapis.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com *.googleapis.com *.facebook.net *.fbcdn.net *.google.com *.google.pl *.gstatic.com https://www.google-analytics.com https://leadmy.pl
style-src 'self' 'unsafe-inline' *.fbcdn.net *.googleapis.com
child-src 'self' *.youtube.com *.vimeo.com *.facebook.com *.doubleclick.net https://www.google.com
connect-src 'self' 'unsafe-inline' https://cartea-mea.ro/ https://www.google-analytics.com
img-src 'self' https://cartea-mea.ro/ http://*.trafic.ro https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://cartea-mea.ro/ https://secure.trafic.ro https://www.google-analytics.com
font-src 'self' maxcdn.bootstrapcdn.com fonts.gstatic.com data:
connect-src 'self' blob: *.bg.co.uk *.wgp-bgs.co.uk *.birdguides.com *.birdguides-cdn.com https://vimeo.com https://api.raygun.io https://apikeys.civiccomputing.com https://clapi.civiccomputing.com ws://am.freshrelevance.com http://am.freshrelevance.com *.traveldesk.io
"default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.rubiconproject.com https://wordpress.com https://*.wp.com https://*.adform.net https://cdn.polyfill.io https://*.hit.gemius.pl https://*.orcinus.ai https://*.pingdom.net https://shop.wolterskluwer.hu https://wolterskluwer.hu https://*.googlesyndication.com https://adservice.google.co.in https://static.addtoany.com https://*.optimonk.com https://*.linkedin.com https://*.facebook.com https://connect.facebook.net https://*.twitter.com https://*.gstatic.com https://ad.adverticum.net https://cdnjs.cloudflare.com https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://*.google.ie https://*.google.hu https://www.googletagmanager.com https://service.maxymiser.net https://*.mookie1.com https://*.googleapis.com https://*.adnxs.com https://*.adroll.com https://sjs.bizographics.com https://bs.serving-sys.com https://ams.creativecdn.com https://secure.gravatar.com https://img.en25.com https://hugde.adocean.pl https://eu-static.sociomantic.com https://ads.eu.criteo.com https://*.t.eloqua.com https://*.2mdn.net https://rdi.eu.criteo.com https://calculators.rsm.hu https://*.doubleverify.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.googleadservices.com https://ssl.google-analytics.com https://superhost.postaffiliatepro.com https://assets.zendesk.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://mysiteauditor.com https://de0119acqsjjz.cloudfront.net https://ajax.googleapis.com
img-src 'self' https://www.google.pl https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.paypal.com https://stats.g.doubleclick.net https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://mysiteauditor.com https://static.payu.com https://secure.payu.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.zendesk.com https://de0119acqsjjz.cloudfront.net
frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://seofabryka.pl https://www.youtube.com
script-src 'self' 'unsafe-inline' https://use.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com
"frame-ancestors self adapti.me app.adapti.me api.adapti.me"
"script-src 'self' *.exist.ru www.google.com www.gstatic.com
connect-src *.exist.ru *.exist.kz *.exist.parts www.google.com www.gstatic.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com use.fontawesome.com code.ionicframework.com
script-src 'self' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com googleads.g.doubleclick.net *.googleadservices.com b92.yahoo.co.jp b97.yahoo.co.jp s.yimg.jp https://yubinbango.github.io/yubinbango-data/
"script-src 'unsafe-inline' 'unsafe-eval' newslab.su www.newslab.su ssl.p.jwpcdn.com www.youtube.com s.ytimg.com maps.google.com maps.googleapis.com pagead2.googlesyndication.com adservice.google.com adservice.google.ru cdn.ampproject.org code.jquery.com vk.com api-maps.yandex.ru www.instagram.com platform.instagram.com relap.io top-fwz1.mail.ru mediator.imgsmail.ru collector.mediator.media static.criteo.net cas.criteo.com ad.mail.ru ajax.googleapis.com newslab.ru www.newslab.ru s.newslab.ru cdnjs.cloudflare.com jsn.24smi.net js-agent.newrelic.com bam.nr-data.net cdn.onthe.io tt.onthe.io www.googletagmanager.com an.yandex.ru yastatic.net www.google-analytics.com mc.yandex.ru radario.ru
style-src 'self' 'unsafe-inline' s.newslab.ru fonts.googleapis.com ajax.googleapis.com relap.io ssl.p.jwpcdn.com
"default-src 'self' data: 'unsafe-inline' https: *
"default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.snapshotdesign.com https://*.drpower.com https://*.neutonpower.com https://*.generacpowerproducts.com https://*.drdealer.com https://*.chp.com https://www.youtube.com https://img.youtube.com https://partstream.arinet.com https://services.arinet.com https://static.formstack.com https://sunward.formstack.com https://www.gstatic.com https://*.tbe.taleo.net https://www.google.com/ https://*.googleapis.com https://*.google-analytics.com https://ajax.aspnetcdn.com/ https://chart.apis.google.com https://maps.google.com  https://maps.gstatic.com https://ajax.aspnetcdn.com https://fonts.gstatic.com
script-src 'self' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ 'unsafe-inline' 'nonce-odusmjqwlde3nywyncw1lde3nywxmcw3oq=='
img-src 'self' https://www.google-analytics.com https://www.facebook.com https://cdn.discordapp.com
connect-src 'self' https://discordapp.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io ws://127.0.0.1:* http://127.0.0.1:*
frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://www.youtube.com/
media-src blob: https://*.wistia.com https://*.readspeaker.com https://*.medicosearch.ch https://tagboard.com https://*.tagboard.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.doctena.ch https://*.medicosearch.ch https://browser-update.org https://www.puls-berufe.ch https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://tagboard.com https://*.tagboard.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.twitter.com https://ton.twimg.com https://cdn.syndication.twimg.com https://csi.gstatic.com
connect-src 'self' https://blog.hirslanden.ch https://*.wistia.com https://*.litix.io https://*.akamaihd.net https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://*.tagboard.com https://tagboard.com
style-src 'self' 'unsafe-inline' https://cloud.typography.com https://*.medicosearch.ch https://*.sprechzimmer.ch https://*.twitter.com https://ton.twimg.com https://www-prod.hirslanden.ch https://*.tagboard.com https://tagboard.com
frame-src 'self' https://hirslanden-news.createsend.com https://www.google.com https://*.doctena.com https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.ch https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://*.twitter.com https://ton.twimg.com https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://www.facebook.com
child-src 'self' blob: https://staticxx.facebook.com https://fast.wistia.com https://s7.addthis.com https://*.twitter.com https://ton.twimg.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com"
frame-src 'self' http://s7.addthis.com/ https://www.youtube.com https://www.google.com http://worksafebcmedia.com https://worksafebcmedia.com
img-src 'self' data: http://polldaddy.com https://polldaddy.com https://gtrk.s3.amazonaws.com http://www.google-analytics.com https://b3.caspio.com https://stats.g.doubleclick.net https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com data:
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: http://www.reddit.com http://www.linkedin.com http://graph.facebook.com http://m.addthis.com http://m.addthisedge.com http://s7.addthis.com https://polldaddy.com/ https://polldaddy.com/ http://i.polldaddy.com https://i.polldaddy.com https://tagmanager.google.com www.googletagmanager.com ajax.googleapis.com www.google-analytics.com www.google.com http://b3.caspio.com https://usageanalytics.coveo.com https://www.gstatic.com http://dnn506yrbagrg.cloudfront.net https://dnn506yrbagrg.cloudfront.net https://b3.caspio.com https://s3.amazonaws.com/trk.cetrk.com https://www.youtube.com/iframe_api
style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' api.oa-bsa.org www.google-analytics.com use.typekit.com www.google.com use.typekit.net code.jquery.com stackpath.bootstrapcdn.com www.gstatic.com cdn.knightlab.com cdnjs.cloudflare.com static.addtoany.com api.instagram.com ajax.googleapis.com maps.googleapis.com connect.facebook.net platform.twitter.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.knightlab.com stackpath.bootstrapcdn.com
connect-src 'self' http://api.oa-bsa.org api.oa-bsa.org www.google-analytics.com use.typekit.com www.google.com use.typekit.net performance.typekit.net www.gstatic.com cdnjs.cloudflare.com static.addtoany.com api.instagram.com ajax.googleapis.com maps.googleapis.com
"script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'"
"default-src https://8631039.fls.doubleclick.net/ https://www.google-analytics.com https://www.googletagmanager.com/ https://www.pantene.com/ https://pantene-assets-prod.azureedge.net https://cdn1.pricespider.com/ https://cdn.pricespider.com/ https://pantene-assets-nonprod.azureedge.net/ https://pantene-nonprod.azureedge.net/ https://www.youtube.com/ https://pgconsumersupport.secure.force.com/ http://d.agkn.com/ https://api.mapbox.com https://cdn.pricespider.com https://d.agkn.com/ https://pantenenonprod.z20.web.core.windows.net/ https://cdn.contentful.com https://pantene-nonprod.azurewebsites.net/  https://pantene.com/  'unsafe-inline'
img-src data:  https://px.moatads.com/ https://d.agkn.com/ https://aa.agkn.com https://static.agkn.com https://pantene.com https://www.pantene.com https://cdn.pricespider.com/  https://cdn1.pricespider.com/ https://pantene-assets-prod.azureedge.net https://pantene-nonprod.azureedge.net https://l.betrad.com https://betrad.com https://c.betrad.com/ https://www.google.com/ https://stats.g.doubleclick.net https://tiles.mapbox.com/ https://b.tiles.mapbox.com/ https://a.tiles.mapbox.com https://api.mapbox.com/ https://cdn.pricespider.com https://embeddedcloud.pricespider.com/ https://pantenenonprod.z20.web.core.windows.net/ https://pantene-nonprod.azurewebsites.net/ https://panteneprod.blob.core.windows.net/ https://pantenenonprod.blob.core.windows.net https://images.ctfassets.net/ https://cdn.contentful.com https://azcdn.odyssey.pgsitecore.com https://14daychallengeassetsprod.azureedge.net https://www.google-analytics.com
script-src 'unsafe-eval' 'unsafe-inline' https://z.moatads.com/ https://www.google-analytics.com https://www.googletagmanager.com/ https://www.pantene.com/ https://mpsnare.iesnare.com https://cdn1.pricespider.com/ https://cdn.pricespider.com/ https://cdn.polyfill.io/ https://pantene-nonprod.azureedge.net/ https://optout.betrad.com/ http://www.google-analytics.com/ https://www.googletagmanager.com/ https://check.pricespider.com https://locate.pricespider.com/ https://api.mapbox.com https://track.pricespider.com https://track.pricespider.com http://cdn.pricespider.com https://www.youtube.com/ https://c.betrad.com/ https://js.agkn.com https://cdn.contentful.com http://c.betrad.com/ https://www.google-analytics.com/ https://pantenenonprod.z20.web.core.windows.net/ https://pantene-nonprod.azurewebsites.net/ https://pantene.com/
connect-src https://www.google-analytics.com https://www.googletagmanager.com/ https://www.pantene.com/ https://embeddedcloud.pricespider.com/ https://cdn1.pricespider.com https://cdn.pricespider.com/ https://images.ctfassets.net/ https://pantene-assets-prod.azureedge.net/ https://panteneprod.blob.core.windows.net/ https://pantene-nonprod.azureedge.net/ http://api.bazaarvoice.com/ https://preview.contentful.com/  https://api.mapbox.com https://a.tiles.mapbox.com/ https://pantenenonprod.z20.web.core.windows.net/ https://www.google-analytics.com/ https://pantene-nonprod.azurewebsites.net/ https://pantene.com/ https://cdn.contentful.com https://haircode.azurewebsites.net/ https://stg.api.bazaarvoice.com
"frame-ancestors 'self' http://www.dietacomemagrecimento.com/ http://www.realtep.com/ http://maremice.com.br/
"default-src 'self' 'unsafe-inline' data: https://img.haplogroup.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://img.haplogroup.org https://www.google-analytics.com https://cdn.mxpnl.com
connect-src 'self' 'unsafe-inline' https://img.haplogroup.org https://www.google-analytics.com https://api.mixpanel.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.alexametrics.com *.googleapis.com
"default-src 'self' data: blob: https://*.plek.co https://plek.co
style-src 'self' 'unsafe-inline' https://*.plek.co https://plek.co https://fonts.googleapis.com https://*.twitter.com https://*.twimg.com https://*.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.plek.co https://plek.co https://apis.google.com https://*.twitter.com https://*.facebook.net https://*.twimg.com https://*.jwpcdn.com https://assets.zendesk.com https://static.zdassets.com https://internationalwaterassociation.zendesk.com https://*.zopim.com https://cdnjs.cloudflare.com https://js.live.net
font-src 'self' data: https://*.plek.co https://plek.co https://fonts.gstatic.com https://*.bootstrapcdn.com
img-src * data: blob: https://*.plek.co https://plek.co
frame-src 'self' https://*.plek.co https://plek.co https://*
worker-src 'self' data: blob: https://*.plek.co https://plek.co https://*
connect-src 'self' wss://* ws://* https://*.plek.co https://plek.co http://logs.ilumy.com:9000 https://reporting.ilumy.com https://*.zendesk.com https://*.zdassets.com https://api.giphy.com https://*.twitter.com"
"img-src 'self' *.riogrande.com cdn.powerreviews.com www.facebook.com www.linkedin.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.com.ar t.powerreviews.com lpcdn.lpsnmedia.net products.riogrande.com ct.pinterest.com googleads.g.doubleclick.net res.cloudinary.com www.paypalobjects.com www.paypal.com ak1s.abmr.net privymktg.com google-analytics.com static.licdn.com www.googletagmanager.com *.privy.com bat.bing.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com ajax.googleapis.com www.gstatic.com platform.twitter.com *.cloudflare.com *.cloudfront.net cdn.syndication.twimg.com vjs.zencdn.net ajax.aspnetcdn.com www.uniflip.com
style-src 'self' 'unsafe-inline' vjs.zencdn.net *.twitter.com *.twimg.com
frame-src 'self' *.twitter.com www.google.com custom.statenet.com freesecure.timeanddate.com
img-src 'self' www.google-analytics.com *.doubleclick.net www.google.com *.twitter.com *.twimg.com www.uniflip.com data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com/ http://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.js https://maps.google.com/
style-src 'unsafe-inline' 'self' http://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css https://fonts.googleapis.com/css https://maxcdn.bootstrapcdn.com
script-src 'self' https://api-maps.yandex.ru https://www.google.com https://www.gstatic.com https://mc.yandex.ru https://informer.yandex.ru https://www.google-analytics.com  'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://mc.yandex.ru https://connect.facebook.net
img-src 'self' data: https://stats.g.doubleclick.net https://mc.yandex.ru https://api-maps.yandex.ru https://informer.yandex.ru https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://*.maps.yandex.net
frame-src https://mc.yandex.ru https://api-maps.yandex.ru https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://phoenix-dnr.ru
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src 'self' *.salecycle.com d16fk4ms6rqz1v.cloudfront.net cdn.decibelinsight.net
"default-src 'self' 'unsafe-inline' *.spitzbergen.de spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no *.ithemes.com *.sucuri.net
img-src 'self' *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no *.jan-mayen.net *.jan-mayen.com *.antarktis.net *.antarctic.eu *.tile.openstreetmap.org ps.w.org s.w.org *.roundshot.com pw.rolf-stange.de www.ftp-server.no data:
font-src 'self' 'unsafe-inline' *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no *.openstreetmap.org *.rolf-stange.de data:
style-src 'self' 'unsafe-inline' *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no a.tile.openstreetmap.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no pw.rolf-stange.de www.openstreetmap.org *.ithemes.com *.sucuri.net s.w.org https://pw.rolf-stange.de *.roundshot.com
media-src 'self' *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no
frame-src 'self' *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no *.jan-mayen.net *.jan-mayen.com *.antarktis.net *.antarctic.eu https://portlongyear.roundshot.com https://longyearbyen.roundshot.com https://turistport.roundshot.com/ https://kappamsterdam.roundshot.com/ https://sveaspitzbergen.roundshot.com/ https://www.youtube-nocookie.com https://eiderpod.roundshot.com/ *.rolf-stange.de
connect-src *.sucuri.net *.ithemes.com *.spitzbergen.de *.spitsbergen-svalbard.com *.spitsbergen-svalbard.no *.roundshot.com pw.rolf-stange.de"
frame-src 'self' https://www.google.com/recaptcha/ www.world-lolo.com www.facebook.com www.youtube.com w.soundcloud.com www.mixcloud.com www.dailymotion.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com
"frame-ancestors http://www.vistaprint.at https://www.vistaprint.at http://vistaprint.at https://vistaprint.at
style-src 'self' https://*.whonix.org http://*.kkkkkkkkkk63ava6.onion http://*.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion 'unsafe-inline'
img-src 'self' data: https://*.whonix.org http://*.kkkkkkkkkk63ava6.onion http://*.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
connect-src https://mention-me.com https://*.mention-me.com https://*.pingdom.net https://www.google-analytics.com https://*.intercom.io wss://*.intercom.io https://js.intercomcdn.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://api.appcues.net wss://api.appcues.net https://fast.appcues.com https://www.google.com
frame-src 'self' https://mention-me.com https://*.mention-me.com https://www.youtube.com https://*.facebook.com https://my.appcues.com https://intercom-sheets.com https://www.google.com https://secure-stats.pingdom.com
script-src  'unsafe-inline' 'self' https://tag.mention-me.com https://static.mention-me.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://rum-static.pingdom.net https://www.google-analytics.com https://stats.g.doubleclick.net https://js-agent.newrelic.com https://bam.nr-data.net https://fast.appcues.com https://d3tcta4is3p1kw.cloudfront.net https://js.hs-analytics.net https://js.hs-scripts.com https://bat.bing.com https://static.ads-twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://sjs.bizographics.com https://px.ads.linkedin.com https://connect.facebook.net https://analytics.twitter.com https://platform.twitter.com https://developers.kakao.com https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com https://www.google.com
script-src 'self' 'unsafe-eval' 'unsafe-inline'  connect.facebook.net www.googletagservices.com yandex.st *.doubleclick.net *.googleadservices.com  *.googlesyndication.com *.criteo.com *.criteo.net vk.com *.vk.com *.imgsmail.ru *.google.com *.google.ru connect.mail.ru *.connect.mail.ru *.ok.ru *.adriver.ru *.r-99.com cdn.mxpnl.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.gstatic.com yandex.ru *.yandex.ru yastatic.net cdnjs.cloudflare.com  *.yandex.net oimenkr.com *.2mdn.net 2mdn.net   *.twitter.com *.google.com.ua *.google.by *.google.cz *.google.kz *.google.de *.google.es js.mamydirect.com  abp.smartadcheck.de *.ampproject.org  *.adfox.ru mc.webvisor.org *.google.ge *.google.ee *.google.me *.google.co.uk *.google.be *.google.no *.google.bg *.google.fr *.google.az *.google.is *.google.lu *.google.in *.google.lv *.google.nl *.google.iq *.google.dk *.google.kg *.google.com.tr *.google.fi *.google.md *.google.me *.google.gr *.google.it *.google.pl *.google.co.il *.google.hu *.google.ae *.google.co.ve *.google.ch *.google.co.uz *.google.co.th
style-src 'unsafe-inline' 'unsafe-eval' 'self'  *
frame-src 'self' *.googlesyndication.com *.facebook.com  facebook.com vk.com *.vk.com apis.google.com connect.odnoklassniki.ru *.ok.ru connect.mail.ru accounts.google.com  *.doubleclick.net  *.doubleclick.net  *.youtube.com www.google.com *.criteo.com  *.criteo.net *.gstatic.com yandex.ru *.yandex.ru *.r-99.com oimenkr.com *.oimenkr.com   *.yandexadexchange.net yandexadexchange.net *.2mdn.net 2mdn.net *.twitter.com yastatic.net *.yandex.net *.googletagservices.com *.vimeo.com *.hpmdnetwork.ru ams.creativecdn.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *"
connect-src * ws: swapi.co https://*.tiles.mapbox.com https://api.mapbox.com
img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com t.co *.prismic-io.s3.amazonaws.com *.prismic.io data: blob:  *.doubleclick.net *.google.com *.google.is *.google.co.uk *.livechatinc.com *.2paynow.com 2paynow.com *.alipay.com *.adroll.com *.yahoo.com *.bidswitch.net *.adnxs.com *.rlcdn.com *.openx.net *.mouseflow.com *.3lift.com simage2.pubmatic.com pixel.advertising.com dsum-sec.casalemedia.com pixel.rubiconproject.com sync.outbrain.com trc.taboola.com
font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com localhost:7331 *.livechatinc.com *.googleusercontent.com
script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.livechatinc.com *.prismic.io *.facebook.com *.facebook.net blob:  ajax.cloudflare.com *.adroll.com *.mouseflow.com
style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com fonts.gstatic.com
frame-src *.prismic.io *.facebook.com *.connect.facebook.net *.google.com *.youtube.com *.vimeo.com *.livechatinc.com v.qq.com"
"script-src 'self' 'unsafe-inline' platform.twitter.com code.jquery.com www.google-analytics.com cdn.syndication.twimg.com
style-src 'self' 'unsafe-inline' use.fontawesome.com platform.twitter.com fonts.googleapis.com http://fonts.googleapis.com
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://cdn.jsdelivr.net https://tagmanager.google.com https://maxcdn.bootstrapcdn.com https://config1.veinteractive.com
font-src 'self' https://fonts.gstatic.com data: https://maxcdn.bootstrapcdn.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com www.gstatic.com www.googletagmanager.com stats.g.doubleclick.net newcastle.gi www.newcastle.co.uk online.newcastle.co.uk dax.comscore.eu www.symantec.com t1.stormiq.com *.fls.doubleclick.net staticxx.facebook.net fls.doubleclick.net *.tradedoubler.com  ssl.google-analytics.com ajax.googleapis.com apis.google.com platform.twitter.com js.stormiq.com tracking.dc-storm.com uk.sitestat.com www.googleadservices.com use.typekit.net dev.visualwebsitedeveloper.com dev.visualwebsiteoptimizer.com fordeu.d3.sc.omtrdc.net maps.googleapis.com tagmanager.google.com cdn.inspectlet.com gateway5.whoson.com connect.facebook.net  static.ads-twitter.com www.googleadservices.com 4270844.fls.doubleclick.net gb-gmtdmp.mookie1.com secure.adnxs.com track.omguk.com d.impactradius-event.com analytics.twitter.com eforms.paragon-group.co.uk ad.doubleclick.net  pbfclick.co.uk googleads.g.doubleclick.net connect.facebook.net www.google.co.uk pubads.g.doubleclick.net connect.facebook.net www.googleadservices.com static.hotjar.com script.hotjar.com hosted5.whoson.com bat.bing.com v2.visualwebsiteoptimizer.com www.images-home.com www.facebook.com"
"default-src 'self' https://static.addtoany.com https://kapi.kakao.com  http://m.addthis.com  http://postcode.map.daum.net  https://log.cizion.com http://sciencelevelup.kofac.re.kr http://opencontents.kofac.re.kr  http://www.youtube.com http://cdn.pobbang.com http://s7.addthis.com http://www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://static.addtoany.com http://www.google-analytics.com  http://t1.daumcdn.net http://dmaps.daum.net http://dev.livere.co.kr  http://101.livere.co.kr  http://s0.wp.com http://developers.kakao.com http://m.addthisedge.com http://m.addthis.com http://s7.addthis.com  https://ssl.google-analytics.com https://connect.facebook.net http://s7.addthis.com http://wp.com
img-src 'self' https://static.addtoany.com  https://stats.g.doubleclick.net http://www.google-analytics.com  http://101.livere.co.kr https://ssl.google-analytics.com https://s-static.ak.facebook.com
style-src 'self' 'unsafe-inline' https://static.addtoany.com  http://fonts.googleapis.com https://fonts.googleapis.com http://101.livere.co.kr
script-src 'strict-dynamic' 'nonce-ztu5ndizmtqtmtczmc00ntdilwe1nwytmda2mmq3odc4yjm0' 'unsafe-inline' https: http:
img-src 'self' data: www.google-analytics.com maps.gstatic.com maps.googleapis.com secure.gravatar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com
child-src 'self' https://belastingdienst.nl https://*.belastingdienst.nl https://*.cdn.optimizely.com https://secure.opinionlab.com https://*.readspeaker.com https://www.anbi-instellingen.nl
img-src 'self' https://n01d05.cumulus-cloud.com https://*.readspeaker.com data: https://*.belastingdienst.nl
script-src 'self' https://*.belastingdienst.nl https://cdn.optimizely.com https://f1-eu.readspeaker.com https://bdtm.containers.piwik.pro 'unsafe-eval' 'unsafe-inline'
style-src 'self' https://*.belastingdienst.nl https://f1-eu.readspeaker.com 'unsafe-inline'"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https: https://s3-eu-west-1.amazonaws.com
font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com esurf.biz:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
img-src 'self' data: https://maps.gstatic.com https://*.googleapis.com https://ssl.google-analytics.com"
"default-src https: 'self' 'unsafe-eval' 'unsafe-inline' *.mailchimp.com *.gstatic.com *.jsdelivr.net *.googleapis.com
"default-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://ajax.googleapis.com/
script-src 'self' https://www.gstatic.cn *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.tranedigitalrewards.com https://cdn.datatables.net https://www.recaptcha.net https://ajax.aspnetcdn.com  https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.google.com  https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com https://*.msecnd.net *.acceleratoradmin.com 'unsafe-inline' https://www.googletagmanager.com *.mxpnl.com
style-src 'self' *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.tranedigitalrewards.com https://ajax.aspnetcdn.com https://cdn.datatables.net https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com  https://cdnjs.cloudflare.com 'unsafe-inline'
connect-src 'self'  *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com  https://www.google-analytics.com *.visualstudio.com *.acceleratoradmin.com https://api.mixpanel.com
font-src https://ajax.aspnetcdn.com 'self' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.acceleratoradmin.com
img-src 'self' https://www.google-analytics.com *.acceleratoradmin.com https://www.google-analytics.com https://www.googletagmanager.com data:
frame-src https://www.google.com *.swiftprepaid.com *.acceleratoradmin.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.lincolnelectricdigitalrewards.com *.adpclientappreciation.com *.youtube.com https://youtu.be"
script-src 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.sanayi.gov.tr *.youtube.com *.google-analytics.com *.ytimg.com *.twitter.com *.twimg.com
style-src 'unsafe-inline' *.googleapis.com *.sanayi.gov.tr *.twitter.com *.twimg.com
img-src data: *.sanayi.gov.tr *.ytimg.com *.google-analytics.com *.twitter.com *.twimg.com
child-src twitter.com *.youtube.com *.google.com *.sanayi.gov.tr *.twitter.com
script-src 'self' 'report-sample' https://cdn.innocraft.cloud https://www.youtube.com https://connect.facebook.net
img-src 'self' data: https://thecorrespondent.innocraft.cloud https://i.ytimg.com
connect-src 'self' https://campaign.thecorrespondent.com https://thecorrespondent.innocraft.cloud https://sentry.io
child-src https://youtube.com https://www.youtube.com https://player.vimeo.com https://staticxx.facebook.com https://platform.twitter.com https://media.mtvnservices.com
frame-src https://youtube.com https://www.youtube.com https://player.vimeo.com https://staticxx.facebook.com https://platform.twitter.com https://media.mtvnservices.com
"default-src 'self' player.vimeo.com *.vimeocdn.com packages.umbraco.org our.umbraco.org  *.facebook.com *.facebook.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' oss.maxcdn.com *.googleapis.com maxcdn.bootstrapcdn.com *.googletagmanager.com *.google-analytics.com *.google-analytics.com cdnjs.cloudflare.com *.simpli.fi *.gstatic.com *.youtube.com *.doubleclick.net  static.doubleclick.net s.ytimg.com *.googleadservices.com connect.facebook.net static.ctctcdn.com *.google.com *.hotjar.com cdn.calculatestuff.com *.google.co.uk woodcountyhospital.activehosted.com *.cloudfront.net
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com static.ctctcdn.com
img-src 'self' data: cdnjs.cloudflare.com *.google-analytics.com *.doubleclick.net *.gravatar.com i.simpli.fi *.gstatic.com *.googleapis.com maps.googleapis.com umbraco.tv *.umbraco.tv googleads.g.doubleclick.net fast.wistia.com *.wistia.com www.facebook.com *.umbraco.org um.simpli.fi *.umbraco.com *.cloudfront.net
font-src 'self' data: maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com
connect-src 'self' www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net insights.hotjar.com our.umbraco.org listgrowth.ctctcdn.com *.constantcontact.com in.hotjar.com our.umbraco.com *.hotjar.com wss://*.hotjar.com
frame-src 'self' vars.hotjar.com *.youtube.com woodcountyhospital.applytojob.com fast.wistia.com *.wistia.com *.facebook.com *.google.com widgets.calculatestuff.com"
"frame-ancestors 'self' *.facebook.com *.fbcdn.net *.google-analytics.com *.google.com webvisor.com *.yandex.ru"
"script-src 'unsafe-inline' https: http: 'unsafe-eval'
font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com"
"frame-src 'self' update-photo.swellgives.com *.facebook.com www.google.com *.twitter.com *.addthis.com www.google-analytics.com *.youtube.com *.vimeo.com
script-src 'self' 'unsafe-inline' *.google-analytics.com *.google.com *.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com *.paysafe.com *.iubenda.com static.zdassets.com https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.zopim.com https://admin.typeform.com
style-src 'self' 'unsafe-inline' data: https://tagmanager.google.com https://fonts.googleapis.com
font-src 'self' data: https://fonts.gstatic.com https://*.zopim.com
connect-src 'self' wss: ws: https://v2.zopim.com https://www.google-analytics.com https://ekr.zdassets.com https://*.zendesk.com hits-i.iubenda.com *.paysafe.com
img-src 'self' data: https://www.googletagmanager.com https://www.gstatic.com https://*.zopim.com cdn.iubenda.com https://www.google-analytics.com
frame-src 'self' *.smartvalor.io *.paysafe.com https://*.iubenda.com https://www.google.com https://oliverfeldmeier.typeform.com https://valorplatform.lon.netverify.com
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com
script-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com oss.maxcdn.com ajax.googleapis.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  eval *.g.doubleclick.net *.yandex.ua *.google.cn *.google.com.om *.google.com.lb *.google.com.eg *.google.com.au *.google.sk *.google.hr *.google.ie *.google.tm *.google.no *.google.pt *.google.nl *.google.at *.google.se *.google.ro *.google.bg *.google.com.ph *.google.ge *.google.fi *.google.md *.google.co.uk *.google.ae *.google.cz *.google.es *.google.hu *.google.co.uz *.google.az *.google.it *.google.ee *.google.co.il *.google.kz *.google.kg *.google.de *.google.pl *.google.lv *.google.co.kr *.google.com.tr ymetrica1.com *.google.ca *.google.fr *.instagram.com instagram.com *.google.com.ua *.google.ru *.google.com *.google.com.tj *.google.lu *.google.ch *.google.lt *.google.com.sg *.google.me *.google.com.qa *.google.gr *.google.rs *.google.com.cy *.google.co.in *.google.be *.google.com.hk ymetrica.com mc.webvisor.org yastatic.net *.yastatic.net yandex.st *.yandex.ru *.yandex.net *.mail.ru *.api.twitter.com  *.facebook.net vk.com *.yandex.fr *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.googlesyndication.com *.g.doubleclick.net *.googletagmanager.com googletagmanager.com vk.com *.googlesyndication.com apis.google.com www.gstatic.com login.vk.com *.facebook.com *.api.twitter.com *.twitter.com *.odnoklassniki.ru ok.ru phdt.ru i9d.ru google.com *.google.com *.googleapis.com *.ampproject.org yandexmetrica.com metrika-informer.com
font-src 'self' *.yastatic.net yastatic.net *.gstatic.com *.bootstrapcdn.com data:
frame-src 'self' *.yandex.net *.webvisor.org mc.webvisor.org *.g.doubleclick.net *.yandex.ua *.yandex.fr *.yandex.ru ymetrica1.com *.yastatic.net *.yandexadexchange.net yandexadexchange.net *.instagram.com *.youtube.com youtube.com *.g.doubleclick.net *.google.com
img-src 'self' *.yandex.ru *.yandex.fr *.yandex.ua *.webvisor.org *.yadro.ru *.ytimg.com i.ytimg.com img.youtube.com *.mail.ru data:
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://media.mopolis.de http://syndication.twitter.com https://syndication.twitter.com http://pbs.twimg.com https://pbs.twimg.com http://abs.twimg.com https://abs.twimg.com http://platform.twitter.com https://platform.twitter.com https://optimize.google.com https://www.googletagmanager.com https://www.facebook.com https://ssl.gstatic.com https://www.google.com
style-src 'self' data: 'unsafe-inline' http://platform.twitter.com https://platform.twitter.com https://fonts.googleapis.com https://optimize.google.com https://tagmanager.google.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://pagead2.googlesyndication.com https://ajax.googleapis.com http://platform.twitter.com https://platform.twitter.com http://cdn.syndication.twimg.com https://cdn.syndication.twimg.com http://mopolis.us17.list-manage.com https://cdn.mouseflow.com https://platform.instagram.com http://platform.instagram.com https://www.instagram.com https://optimize.google.com https://cdn.ampproject.org https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://connect.facebook.net
connect-src *.twitter.com *.mouseflow.com *.mopolis.de mopolis.local *.google-analytics.com *.ampproject.org *.ampproject.net amp-error-reporting.appspot.com https://stats.g.doubleclick.net *.google.com *.google.de
frame-src 'self' data: 'unsafe-inline' http://www.youtube.com https://www.youtube.com http://www.youtube-nocookie.com https://www.youtube-nocookie.com http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com https://www.google.com https://www.instagram.com https://optimize.google.com https://www.mopolis.de https://www.facebook.com *.ampproject.net https://open.spotify.com
form-action 'self' data: http://syndication.twitter.com https://syndication.twitter.com http://platform.twitter.com https://platform.twitter.com https://www.facebook.com
"frame-ancestors http://www.vistaprint.in https://www.vistaprint.in http://vistaprint.in https://vistaprint.in
"frame-ancestors 'self' www.sprint.com shop.sprint.com mysprint.sprint.com m.sprint.com es.sprint.com sprint.inq.com static.inq.com api-sprint.touchcommerce.com auth-sprint.touchcommerce.com portal-sprint.touchcommerce.com chatrouter-sprint.inq.com cobrowse-sprint.inq.com forms-sprint.inq.com media-sprint.inq.com api.touchcommerce.com auth.touchcommerce.com portal.touchcommerce.com chatrouterv3.inq.com cobrowse.inq.com formsv3.inq.com mediav3.inq.com"
"default-src 'self' data: https://consentcdn.cookiebot.com https://secure.comodo.com https://secure.trust-provider.com https://bid.g.doubleclick.net https://plugins.help.com https://vars.hotjar.com https://insights.hotjar.com https://youtube.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3.amazonaws.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://secure.comodo.net https://consent.cookiebot.com https://cdn.optimizely.com https://www.google-analytics.com https://static.hotjar.com https://secure.comodo.com https://secure.trust-provider.com https://plugins.help.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://script.hotjar.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://plugins.help.com
img-src 'self' data: https://googleads.g.doubleclick.net https://www.gstatic.com https://www.google.com.tr https://www.google.ro https://www.google.com.au https://www.google.mk https://www.google.co.th https://www.google.co.in https://www.google.ru https://secure.comodo.com https://secure.trust-provider.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://stats.g.doubleclick.net
object-src 'self' https://secure.comodo.com https://secure.trust-provider.com https://www.youtube.com https://youtube.googleapis.com
connect-src 'self' https://logx.optimizely.com https://stats.g.doubleclick.net https://secure.comodo.com https://secure.trust-provider.com https://www.youtube.com https://in.hotjar.com https://insights.hotjar.com https://www.google-analytics.com
script-src 'self' img.onehash.com browser.sentry-cdn.com www.google.com www.gstatic.com *.facebook.net *.cloudflare.com www.google-analytics.com player.twitch.tv *.googleapis.com cvp.twitch.tv www.youtube.com f0a903cc-ef01-4bb4-82d5-d3098aed1fdb.curacao-egaming.com https://widget.userengage.com 'nonce-0ccc092f-ae89-44e0-86b6-585e3a676015'
connect-src 'self' img.onehash.com wss://*.onehash.com *.doubleclick.net www.youtube.com *.twitch.tv *.ttvnw.net api.mixpanel.com *.googleapis.com app.getsentry.com 8b750flw.jjysjnuego.com https://app.userengage.com wss://widget.userengage.com
style-src 'self' 'unsafe-inline' www.youtube.com player.twitch.tv translate.google.com translate.googleapis.com
img-src 'self' data: www.facebook.com www.google-analytics.com *.doubleclick.net www.gstatic.com translate.google.com f0a903cc-ef01-4bb4-82d5-d3098aed1fdb.curacao-egaming.com https://app.userengage.com
child-src 'self' www.youtube.com player.twitch.tv www.twitch.tv www.google.com www.facebook.com connect.facebook.net
"connect-src 'self' *.100gadgets.by *.100gadgets.ru 100gadgets.ru mc.yandex.ru
child-src 'self' data: https://api-maps.yandex.ru *.vk.com vk.com market.ynadex.ru yandex.ru *.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.google.ru https://*.google.com https://*.google.com.ua https://*.google.kz
script-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://www.mnogo.ru https://mnogo.ru http://www.mnogo.ru http://mnogo.ru https://mc.yandex.ru http://ajax.googleapis.com vk.com *.vk.com market.yandex.ru yandex.st *.yandex.net bitrix.info https://bitrix.info *.google-analytics.com https://*.google-analytics.com *.googletagmanager.com https://*.googletagmanager.com *.googleadservices.com https://*.googleadservices.com api-maps.yandex.ru https://api-maps.yandex.ru https://kladr-api.ru mc.yandex.ru https://parttdsbev.info https://*.amazonaws.com https://ocsearch.net
"script-src 'nonce-45c32a864761b6ac0ae00274b2a05b0ab130dee0' 'strict-dynamic' https: http:
font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.livechatinc.com https://themes.googleusercontent.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://cdn.livechatinc.com https://secure.livechatinc.com https://cdnjs.cloudflare.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com
img-src 'self' https://secure.livechatinc.com https://maps.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.gravatar.com https://www.smjobs.com data:"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://designpub.ru:443 https://*.designpub.ru:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' *.uni-bamberg.de *.mapbox.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' fonts.googleapis.com dnstest2.ficora.fi dnstest.traficom.fi cdn.reactandshare.com data.reactandshare.com cdnjs.cloudflare.com occhat.elisa.fi stat.viestintavirasto.fi 10.250.193.20 'nonce-501914c1-1998-46c3-af9b-7b8330a02af9'
img-src 'self' data: *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi www.youtube.com registry.qadomain.fi registry.domain.fi data.reactandshare.com fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com occhat.elisa.fi
style-src 'self' fonts.googleapis.com dnstest2.ficora.fi dnstest.traficom.fi cdn.reactandshare.com data.reactandshare.com cdnjs.cloudflare.com occhat.elisa.fi 'nonce-501914c1-1998-46c3-af9b-7b8330a02af9'
font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com occhat.elisa.fi
frame-src 'self' *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi www.youtube.com registry.qadomain.fi registry.domain.fi data.reactandshare.com fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com occhat.elisa.fi
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aspnetcdn.com *.bizographics.com *.brandfolder.com *.ckeditor.com *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleleadservices.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.licdn.com *.linkedin.com *.msecnd.net *.mxpnl.com *.livechatinc.com svc.webspellchecker.net cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' *.ckeditor.com *.cloudflare.com *.googleapis.com *.gstatic.com svc.webspellchecker.net pro.fontawesome.com
img-src 'self' data: *.brandfolder.com *.cloudflare.com *.doubleclick.net *.facebook.com *.google.com *.google.com.kw *.google.com.sa *.google.com.ae *.google-analytics.com *.googletagmanager.com *.livechatinc.com bilbayt.azureedge.net bilbaytdev.blob.core.windows.net bilbaytstaging.blob.core.windows.net bilbayt.blob.core.windows.net cdn.ckeditor.com picsum.photos *.gstatic.com *.googleapis.com
media-src 'self' data: *.cloudflare.com bilbayt.azureedge.net
frame-src 'self' *.brandfolder.com *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com brandfolder.com localhost:5003 bilbayt-admin-staging.azurewebsites.net admin.bilbayt.com *.livechatinc.com
font-src 'self' data: *.cloudflare.com *.googleapis.com *.gstatic.com svc.webspellchecker.net pro.fontawesome.com
connect-src 'self' *.mixpanel.com *.services.visualstudio.com *.livechatinc.com *.google-analytics.com https://api.bilbayt.com https://bilbayt-api.azurewebsites.net https://bilbayt-api-staging.azurewebsites.net https://bilbayt-api-staging-deploy.azurewebsites.net https://admin.bilbayt.com https://bilbayt-admin-staging.azurewebsites.net https://bilbayt-admin-staging-deploy.azurewebsites.net https://bilbayt.service.signalr.net https://bilbayt-staging.service.signalr.net https://bilbayt-test.service.signalr.net *.doubleclick.net *.facebook.com localhost:5001 localhost:5003 svc.webspellchecker.net wss://bilbayt.service.signalr.net wss://bilbayt-staging.service.signalr.net wss://bilbayt-test.service.signalr.net ws://admin.bilbayt.com ws://bilbayt-admin-staging.azurewebsites.net ws://localhost:5003
form-action 'self' *.facebook.com *.facebook.net *.gotapnow.com http://live.gotapnow.com https://www.knetpaytest.com.kw https://www.knetpay.com.kw https://test.payments.tap.company https://sandbox.payments.tap.company https://secure.payments.tap.company
"default-src * data: blob: 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' dr6wcybhxxu9c.cloudfront.net cdnjs.cloudflare.com
style-src 'self' 'unsafe-inline' data: dr6wcybhxxu9c.cloudfront.net cdnjs.cloudflare.com fonts.googleapis.com
img-src 'self' data: dr6wcybhxxu9c.cloudfront.net cdnjs.cloudflare.com
font-src 'self' data: cdnjs.cloudflare.com fonts.google.com fonts.gstatic.com
"frame-src https://docs.google.com https://player.vimeo.com https://instagram.com https://www.instagram.com https://twitter.com https://www.youtube.com https://web.facebook.com https://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com  https://syndication.twitter.com https://accounts.google.com https://vars.hotjar.com https://w.soundcloud.com"
"default-src data: https: 'unsafe-eval' 'unsafe-inline'"
"default-src 'self' yastatic.net *.yandex.ru *.yandex.net *.googlesyndication.com *.disqus.com log24.ru
frame-src 'self' yastatic.net *.yastatic.net *.disqus.com *.vimeo.com *.youtube.com *.doubleclick.net *.s2block.com *.tizerlady.biz *.travelpayouts.com *.tizerlady.info *.lcads.ru *.google.com *.directadvert.ru *.yandex.st *.leadiacloud.com *.yandex.ru s3-eu-west-1.amazonaws.com *.googleapis.com *.s1block.com s1block.com *.s1venus.biz *.ladycash.ru vk.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com *.cloudfront.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.disqus.com *.yastatic.net *.yandex.net *.s2block.com *.tizerlady.biz log24.ru *.copyright-law.ru *.tizerlady.info *.str100.ru *.lcads.ru *.google.com *.directadvert.ru *.yandex.st *.leadiacloud.com *.yandex.ru *.googleapis.com *.s1venus.biz *.ladycash.ru vk.com s1block.com *.s1block.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com *.google.ru *.yastatic.net yastatic.net *.cloudfront.net
"frame-ancestors 'self' *.chemistwarehouse.com.au *.epharmacy.com.au *.mychemist.com.au htmlbuilder.com.au *.htmlbuilder.com.au *.chemistwarehouse.hk *.mybeautyspot.com.au"
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ 'unsafe-inline' 'nonce-ndismtg1ldizoswyndqsntmsmjezldi0nsw2oa=='
connect-src 'self' https://discordapp.com https://api.greenhouse.io https://api.github.com https://sentry.io ws://127.0.0.1:* http://127.0.0.1:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://onesignal.com server.connecto.io cdn.qgraph.io *.facebook.net www.googleadservices.com cdnjs.cloudflare.com www.google-analytics.com player.vimeo.com use.typekit.net code.createjs.com oss.maxcdn.com togetherjs.com www.s2d6.com s.yimg.com *.analytics.yahoo.com cdn.trackjs.com usage.trackjs.com cdn.ampproject.org cdn.onesignal.com api.littleapp.in
img-src * https://d23uu0nprippzl.cloudfront.net https://www.google.co.in data: https://littleapp.files.wordpress.com http://c1.nvy.com http://c2.nvy.com http://c3.nvy.com *.nvy.com usage.trackjs.com *.facebook.com www.google-analytics.com www.google.com sp.analytics.yahoo.com stats.g.doubleclick.net www.googleadservices.com chart.googleapis.com eploop.go2pixel.org
font-src 'self' themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com https://googleads.g.doubleclick.net
frame-src https://www.google.co.in https://couponraja.go2cloud.org https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://nvy.com https://www.youtube.com https://docs.google.com payoom.go2cloud.org https://af0y.com https://eploop.go2pixel.org tracking.vcommission.com coupondunia.go2cloud.org uspl.go2cloud.org track.in.omgpm.com paritycube.go2cloud.org jiodeals.go2cloud.org poly.go2cloud.org trk.atomex.net little.localdon.com scandid.postaffiliatepro.com icubes.go2cloud.org www.shouut.com www.tpclick.com www.pixelhere.com www.facebook.com https://www.google.com
connect-src 'self' www.google-analytics.com *.analytics.yahoo.com api.quantumgraph.com
"frame-ancestors 'self' gtcbeta.zonarsystems.net gtclegacy.zonarsystems.net groundtrafficcontrol.zonarsystems.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://eu2.thunderhead.com https://responder.wt-safetag.com https://d1r27qvpjiaqj3.cloudfront.net https://cdn.wbtrk.net https://fbc.wcfbc.net https://cdn.cbtrk.net https://cdb.cbtrk.net https://az416426.vo.msecnd.net https://act.webmasterplan.com https://p.webmasterplan.com https://wt1.rqtrk.eu https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com/ https://www.google.de/ https://server.adform.net connect.facebook.net cdn.embedly.com http://bat.bing.com/bat.js https://w.usabilla.com https://d6tizftlrpuof.cloudfront.net http://c1.rfihub.net http://a.rfihub.com js.adsrvr.org https://*.serving-sys.com
style-src 'self' 'unsafe-inline' https://eu2.thunderhead.com cdn.embedly.com
img-src 'self' data: https://*.wt-eu02.net https://*.g.doubleclick.net https://www.google.com/ https://www.google.de/ https://fbc.wcfbc.net ctfassets.net *.ctfassets.net https://images.contentful.com https://eu2.thunderhead.com www.facebook.com www.instagram.com i-cdn.embed.ly https://partners.webmasterplan.com https://p.adsymptotic.com https://wt1.rqtrk.eu bat.bing.com https://d6tizftlrpuof.cloudfront.net https://w.usabilla.com
frame-src https://partners.webmasterplan.com https://p.webmasterplan.com https://hal9000.redintelligence.net www.facebook.com staticxx.facebook.com cdn.embedly.com https://*.g.doubleclick.net https://server.adform.net http://20785428p.rfihub.com http://a.rfihub.com https://20785430p.rfihub.com insight.adsrvr.org d1eoo1tco6rr5e.cloudfront.net https://d6tizftlrpuof.cloudfront.net
connect-src 'self' https://dc.services.visualstudio.com https://eu2.thunderhead.com https://act.webmasterplan.com https://www.googleadservices.com api-cdn.embed.ly
form-action 'self' data: http://search.ebscohost.com/login.aspx http://eds.b.ebscohost.com/
font-src 'self' data: https://hello.myfonts.net/ https://cdn.embedly.com https://api-cdn.embed.ly
img-src 'self' data: https: https://digitalnz.org
media-src 'self' data: https: https://digitalnz.org
connect-src 'self' https: https://www.googletagmanager.com www.google-analytics.com *.digitalnz.org digitalnz.org https://cdn.embedly.com https://api-cdn.embed.ly https://cdn.embedly.com https://api-cdn.embed.ly
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://connect.facebook.net https://platform.twitter.com https://cdn.embedly.com https://api-cdn.embed.ly
style-src 'self' data: 'unsafe-inline' http://hello.myfonts.net/ https://cdn.embedly.com https://api-cdn.embed.ly
frame-src https://nlnztest.altarama.com https://askalibrarian.natlib.govt.nz https://www.youtube.com https://player.vimeo.com https://cdn.embedly.com https://api-cdn.embed.ly
frame-ancestors 'self' https://nlnztest.altarama.com https://askalibrarian.natlib.govt.nz https://www.youtube.com https://player.vimeo.com https://cdn.embedly.com https://api-cdn.embed.ly
script-src  'self' 'unsafe-inline' 'unsafe-eval' *.mihtool.com https://cdnjs.cloudflare.com https://yastatic.net yastatic.net  https://*.yastatic.net *.slus.name https://*.slus.name:3000 *.yastatic.net *.mail.com https://*.gstatic.com *.gstatic.com https://*.google.com *.google.com vk.com *.effad.ru effad.ru *.me-talk.ru disgusting.ru yandex.st *.yadro.ru *.yandex.ru *.ok.ru *.rf-sp.ru https://rf-sp.ru *.tbex.ru *.google-analytics.com *.googleapis.com *.jivosite.com *.jquery.com *.gismeteo.ru *.siteheart.com 38mama.ru me-talk.ru top-fwz1.mail.ru st.top100.ru https://jsconsole.com
style-src 'self' 'unsafe-inline' *.rf-sp.ru 38mama.ru *.chathelp.ru *.slus.name https://cdnjs.cloudflare.com https://*.gstatic.com *.slus.name:3000
style-src 'self' 'unsafe-inline' https://cloud.webtype.com https://fonts.googleapis.com vjs.zencdn.net
font-src 'self' https://cloud.webtype.com https://fonts.gstatic.com data:
img-src 'self' shoplogos.commerce-connector.de maps.gstatic.com maps.googleapis.com pls.webtype.com *.google-analytics.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com secure.pay1.de *.google-analytics.com vjs.zencdn.net
frame-src 'self' 'unsafe-inline' 'unsafe-eval' secure.pay1.de *.youtube.com player.vimeo.com
style-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com * 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' go.ero-advertising.com juicyads.com *.juicyads.com crate.widgetbot.io *.pantsu.cat *
child-src juicyads.com *.juicyads.com widgetbot.io *
connect-src 'self' r.remarketingpixel.com *.urldelivery.com go.ero-advertising.com etahub.com n.pc1ads.com native.propellerads.com syndication.exosrv.com *.exosrv.com *.widgetbot.io pagead2.googlesyndication.com *.googlesyndication.com
script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com cdnjs.cloudflare.com *.google-analytics.com
img-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://www.google.com data: ssl.google-analytics.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d2a4hncphh3gxw.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://connect.nosto.com https://cdn.distiltag.com https://platform.twitter.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.tumblr.com https://*.pinterest.com https://cdn.ravenjs.com https://cdn.inspectlet.com https://js.stripe.com
style-src 'self' 'unsafe-inline' https://d2a4hncphh3gxw.cloudfront.net https://fonts.googleapis.com
frame-src https://n-distil.areyouahuman.com/ https://*.facebook.com https://www.googletagmanager.com https://*.twitter.com https://*.tumblr.com https://*.pinterest.com https://inktale.com https://js.stripe.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://common.higcapital.com https://maxcdn.bootstrapcdn.com https://ssl.google-analytics.com https://pi.pardot.com
"default-src https: wss: data: 'unsafe-inline' 'unsafe-eval'"
"default-src http://localhost:5001 https://www.slb.com http://dyna-drill.com http://www.dyna-drill.com https://www.dyna-drill.com www.google-analytics.com https://indd.adobe.com 'self'
script-src http://localhost:5001 data: https://www.google-analytics.com https://www.slb.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'
style-src http://localhost:5001 https://maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'"
"default-src 'self' fruux.com *.fruux.com www.google.com
script-src 'self' www.google-analytics.com ssl.google-analytics.com cdn.heapanalytics.com en.gravatar.com cdn.ravenjs.com www.google.com www.gstatic.com
img-src 'self' data: www.google-analytics.com ssl.google-analytics.com *.doubleclick.net heapanalytics.com secure.gravatar.com placehold.it s3.eu-central-1.amazonaws.com
script-src 'self' 'unsafe-inline' *.googletagmanager.com *.mil.ru *.xn--90anlfbebar6i.xn--p1ai *.rambler.ru *.yandex.ru *.maps.yandex.net *.mail.ru *.google-analytics.com *.google.com cdnjs.cloudflare.com
object-src 'self' *.mil.ru *.vintera.tv *.cdnvideo.ru *.youtube.com
style-src 'self' 'unsafe-inline' *.mil.ru *.googleapis.com
img-src 'self' mil.ru *.yandex.net *.yadro.ru *.mil.ru data: counter.yadro.ru *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru
media-src 'self' *.mil.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.xn--90anlfbebar6i.xn--p1ai
frame-src 'self' http://mil.ru/ mil.ru *.mil.ru vk.com *.vk.com ok.ru *.ok.ru *.yandex.net *.yandex.ru *.yadro.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtube.com *.youtu.be *.google.com
font-src 'self' fonts.gstatic.com *.mil.ru *.vintera.tv *.cdnvideo.ru *.mil.ru *.youtube.com *.youtube.com *.youtu.be *.google.com
frame-ancestors 'self' http://mil.ru http://*.mil.ru https://mil.ru https://*.mil.ru
script-src * 'self' 'unsafe-inline' 'unsafe-eval' blob:
child-src * 'self' blob: https://*.ampproject.org
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://jp-lambert.me:443 https://*.jp-lambert.me:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors https://peticaopublica.com http://peticaopublica.com https://peticaopublica.com.br http://peticaopublica.com.br https://www.peticaopublica.com http://www.peticaopublica.com https://www.peticaopublica.com.br http://www.peticaopublica.com.br
"default-src http: https: data 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.horizondiscovery.com *.hotjar.com *.hsforms.com             *.hubspot.com *.litix.io *.t.eloqua.com *.typeform.com *.typekit.net *.wistia.com *.wistia.net             *.zopim.com black.bird.eu blob: cdnjs.cloudflare.com connect.facebook.net data:             embedwistia-a.akamaihd.net fonts.gstatic.com googleads.g.doubleclick.net             horizondiscovery.applytojob.com img03.en25.com js.hs-analytics.net js.hs-scripts.com js.hsforms.net             js.hsleadflows.net stats.g.doubleclick.net v2.zopim.com wss://*.hotjar.com wss://*.zopim.com             www.facebook.com www.google-analytics.com www.google.co.uk www.google.com www.googleadservices.com             www.googletagmanager.com www.horizondiscovery.com www.youtube.com flowplayer.org"
"frame-src 'self' *.google.com google.com *.youtube.com youtube.com assets.adobedtm.com
"defaukt-src https: data 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com connect.facebook.net  *.pinterest.com
img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net  apprendreavecplaisir.com sg-autorepondeur.com www.facebook.com img.youtube.com *.pinterest.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google-analytics.com
"script-src 'strict-dynamic' 'nonce-exb24mhmdjmlmlk' 'self' 'unsafe-inline' https:
default-src  'self' 'unsafe-inline' https: wss:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://mikulskibartosz.name:443 https://*.mikulskibartosz.name:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors 'self' http://*.episerverhosting.com http://*.schroders.com https://*.episerverhosting.com https://*.schroders.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://www.google-analytics.com
"default-src * 'unsafe-eval' 'unsafe-inline' data:
frame-ancestors 'self' app.optimizely.com apps.facebook.com fonts.googleapis.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ajax.aspnetcdn.com stats.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com tagmanager.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com maps.googleapis.com www.youtube.com s.ytimg.com supertext.bamboohr.com https://localhost:44399 widget.intercom.io js.intercomcdn.com nexus-long-poller-b.intercom.io widget.privy.com platform-api.sharethis.com cdn.tynt.com de.tynt.com en.tynt.com fr.tynt.com it.tynt.com ws.sharethis.com snap.licdn.com px.ads.linkedin.com widget.trustpilot.com
style-src 'self' 'unsafe-inline' cloud.webtype.com supertext.bamboohr.com fonts.googleapis.com tagmanager.google.com cdn-images.mailchimp.com widget.privy.com assets.privy.com platform-api.sharethis.com blob: cdn.rawgit.com
img-src 'self' www.supertext.ch pls.webtype.com www.google.com www.google.ch www.google.de www.google.it www.google.fr www.google.es www.google.co.uk www.googletagmanager.com stats.g.doubleclick.net ssl.google-analytics.com ssl.gstatic.com www.gstatic.com www.google-analytics.com google-analytics.com www.googleadservices.com https://googleads.g.doubleclick.net csi.gstatic.com maps.googleapis.com maps.gstatic.com www.bamboohr.com resources.bamboohr.com js.intercomcdn.com static.intercomassets.com gifs.intercomcdn.com data: widget.privy.com assets.privy.com events.privy.com api.privy.com privymktg.com ic.tynt.com www.zoiper.com
frame-src 'self' www.youtube.com docs.google.com www.google.com 192.168.0.115 c.sharethis.mgr.consensu.org widget.trustpilot.com
font-src 'self' cloud.webtype.com fonts.gstatic.com themes.googleusercontent.com js.intercomcdn.com data:
connect-src 'self' https://www.google-analytics.com www.google.com www.google.de www.google.en stats.g.doubleclick.net supertext.bamboohr.com api-iam.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com js.intercomcdn.com https://nexus-long-poller-b.intercom.io https://nexus-long-poller-a.intercom.io https://groupshare.supertext.com:4430 http://grsh-srvr-test.northeurope.cloudapp.azure.com:4430 api.privy.com events.privy.com tri.privy.com l.sharethis.com c.sharethis.mgr.consensu.org https://localhost:44399
script-src * https://ssl.google-analytics.com https://pxlssl.ibpxl.com  https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com 'unsafe-inline' 'unsafe-eval'
script-src 'unsafe-eval' 'unsafe-inline' 'self' pacificlight.com.sg maps.googleapis.com cdn.datatables.net loader.webspellchecker.net cdnjs.cloudflare.com fonts.googleapis.com www.googletagmanager.com s.ytimg.com www.google.com www.gstatic.com www.google-analytics.com ajax.googleapis.com
img-src 'self' pacificlight.com.sg www.google.com maps.gstatic.com maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net *.amazonaws.com data:
style-src 'self' 'unsafe-inline' pacificlight.com.sg fonts.googleapis.com
font-src 'self' pacificlight.com.sg fonts.googleapis.com fonts.gstatic.com
frame-src 'self' pacificlight.com.sg www.youtube-nocookie.com www.google.com www.youtube.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://medyanin50tonu.com:443 https://*.medyanin50tonu.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
font-src 'self' *.cloudfront.net *.hotjar.com *.intercomcdn.com data:
img-src 'self' data: https://www.gravatar.com *.wp.com https://share.pingdom.com https://*.junecode.com
connect-src 'self' *.cobinhood.com cobinhood.com wss://*.cobinhood.com cobinhood.zendesk.com ekr.zdassets.com api.amplitude.com storage.googleapis.com sentry.io onesignal.com api.taplytics.com ping.taplytics.com mainnet.infura.io tokeninsight.com *.crazyegg.com s3.amazonaws.com/trk.cetrk.com/
frame-src 'self' www.google.com cobinhood.atlassian.net cobinhood.onesignal.com cobinhood.os.tc onesignal.com www.youtube.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com onesignal.com
script-src 'self' blob: www.google-analytics.com cdn.amplitude.com www.gstatic.com connect.facebook.net cobinhood.atlassian.net www.google.com cdn.taplytics.com ajax.cloudflare.com assets.zendesk.com static.zdassets.com cdn.onesignal.com onesignal.com script.crazyegg.com s3.amazonaws.com/trk.cetrk.com/"
"default-src 'self' *.gstatic.com https://csi.gstatic.com https://maps.gstatic.com *.googleapis.com https://maps.googleapis.com https://fonts.googleapis.com *.player.vimeo.com https://player.vimeo.com http://player.vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.euroland.com https://tools.euroland.com *.cloudflare.com http://cdnjs.cloudflare.com *.twimg.com https://cdn.syndication.twimg.com *.doubleclick.net http://stats.g.doubleclick.net *.youtube.com https://www.youtube.com http://www.youtube.com *.eurolandir.com https://tools.eurolandir.com *.gravatar.com https://www.gravatar.com *.umbraco.org https://dashboard.umbraco.org *.communisis.com https://www.communisis.com *.google-analytics.com http://www.google-analytics.com *.google.com https://tagmanager.google.com *.wistia.net http://fast.wistia.net https://fast.wistia.net *.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.linkedin.com https://imp2.ads.linkedin.com https://dc.ads.linkedin.com *.adnxs.com https://secure.adnxs.com http://t.co *.co https://analytics.twitter.com *.twitter.com http://static.ads-twitter.com *.ads-twitter.com https://secure.leadforensics.com/js/130960.js *.leadforensics.com http://cdn.pardot.com *.pardot.com https://pv.idomoo.com *.idomoo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com https://csi.gstatic.com https://maps.gstatic.com *.googleapis.com https://maps.googleapis.com https://fonts.googleapis.com *.player.vimeo.com https://player.vimeo.com http://player.vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.euroland.com https://tools.euroland.com *.cloudflare.com http://cdnjs.cloudflare.com *.twimg.com https://cdn.syndication.twimg.com *.doubleclick.net http://stats.g.doubleclick.net *.youtube.com https://www.youtube.com http://www.youtube.com *.eurolandir.com https://tools.eurolandir.com *.gravatar.com https://www.gravatar.com *.umbraco.org https://dashboard.umbraco.org *.communisis.com https://www.communisis.com *.google-analytics.com http://www.google-analytics.com *.google.com https://tagmanager.google.com *.wistia.net http://fast.wistia.net https://fast.wistia.net *.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.linkedin.com https://imp2.ads.linkedin.com https://dc.ads.linkedin.com *.adnxs.com https://secure.adnxs.com http://t.co *.co https://analytics.twitter.com *.twitter.com http://static.ads-twitter.com *.ads-twitter.com https://secure.leadforensics.com/js/130960.js *.leadforensics.com http://cdn.pardot.com *.pardot.com https://pv.idomoo.com *.idomoo.com
style-src 'self' 'unsafe-inline' *.googleapis.com https://fonts.googleapis.com *.google.com https://tagmanager.google.com *.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.linkedin.com https://imp2.ads.linkedin.com https://dc.ads.linkedin.com *.adnxs.com https://secure.adnxs.com http://t.co *.co https://analytics.twitter.com *.twitter.com http://static.ads-twitter.com *.ads-twitter.com https://secure.leadforensics.com/js/130960.js *.leadforensics.com
img-src 'self' *.gstatic.com https://csi.gstatic.com https://maps.gstatic.com *.googleapis.com https://maps.googleapis.com https://fonts.googleapis.com *.player.vimeo.com https://player.vimeo.com http://player.vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.euroland.com https://tools.euroland.com *.cloudflare.com http://cdnjs.cloudflare.com *.twimg.com https://cdn.syndication.twimg.com *.doubleclick.net http://stats.g.doubleclick.net *.youtube.com https://www.youtube.com http://www.youtube.com *.eurolandir.com https://tools.eurolandir.com *.gravatar.com https://www.gravatar.com *.umbraco.org https://dashboard.umbraco.org *.communisis.com https://www.communisis.com *.google-analytics.com http://www.google-analytics.com *.google.com https://tagmanager.google.com *.wistia.net http://fast.wistia.net https://fast.wistia.net *.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.linkedin.com https://imp2.ads.linkedin.com https://dc.ads.linkedin.com *.adnxs.com https://secure.adnxs.com http://t.co *.co https://analytics.twitter.com *.twitter.com http://static.ads-twitter.com *.ads-twitter.com  https://secure.leadforensics.com/js/130960.js *.leadforensics.com http://cdn.pardot.com *.pardot.com https://pv.idomoo.com *.idomoo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com mjcdn.aayulogic.com ajax.googleapis.com d31qbv1cthcecs.cloudfront.net v2.zopim.com secure.statcounter.com www.google-analytics.com pagead2.googlesyndication.com cdn.ravenjs.com connect.facebook.net platform.twitter.com apis.google.com www.google.com www.gstatic.com maps.googleapis.com
connect-src 'self' wss: sentry.io mjcdn.aayulogic.com
img-src 'self' data: cdnjs.cloudflare.com mjcdn.aayulogic.com www.google.com.np certify.alexametrics.com www.google.com d5nxst8fruw4z.cloudfront.net maps.googleapis.com maps.gstatic.com www.google-analytics.com c.statcounter.com stats.g.doubleclick.net ssl.gstatic.com csi.gstatic.com www.facebook.com syndication.twitter.com
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com mjcdn.aayulogic.com fonts.googleapis.com www.google.com ajax.googleapis.com
font-src 'self' data: mjcdn.aayulogic.com fonts.gstatic.com
frame-src googleads.g.doubleclick.net www.youtube.com accounts.google.com content.googleapis.com www.facebook.com www.google.com staticxx.facebook.com platform.twitter.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.gstatic.com *.googleapis.com *.intercom.io *.google-analytics.com *.intercomcdn.com *.facebook.net *.youtube.com
frame-ancestors 'self' https://*.bigcommerce.com https://*.mybigcommerce.com https://*.ecwid.com https://*.shopify.com https://*.myshopify.com https://*.tictail.com"
img-src 'self' https: data: blob: https://witchcraft.cafe
media-src 'self' https: data: https://witchcraft.cafe
connect-src 'self' blob: https://witchcraft.cafe wss://witchcraft.cafe
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:
form-action 'self' https://syndication.twitter.com/ https://platform.twitter.com/ https://connect.facebook.net/
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://www.google.com https://www.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://static.hackertarget.com https://checkout.stripe.com https://js.stripe.com https://checkout.stripe.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://cdnjs.cloudflare.com https://ajax.googleapis.com
font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://themes.googleusercontent.com
frame-src 'self' https://api.hackertarget.com https://player.vimeo.com https://static.hackertarget.com https://checkout.stripe.com https://js.stripe.com https://www.youtube.com https://connect.facebook.net https://www.facebook.com https://s-static.ak.facebook.com
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://iplclub.com http://*.iplclub.com
script-src 'strict-dynamic' 'nonce-zmmxnjkwzmqtytgzzs00ztdilwi0mjktmdm3mdc3yznhnmzk' 'unsafe-inline' https: http:
child-src 'self' blackfire.io www.youtube.com api.recurly.com https://www.google.com/recaptcha/ *.twimg.com syndication.twitter.com platform.twitter.com goo.gl
connect-src 'self' app.getsentry.com *.intercom.io wss://*.intercom.io *.intercomcdn.com www.google-analytics.com *.algolia.net *.algolianet.com api.recurly.com bam.nr-data.net beacon.blackfire.io
font-src 'self' fonts.gstatic.com js.intercomcdn.com d2vqbs7xgyce6n.cloudfront.net
frame-src blackfire.io www.youtube.com api.recurly.com https://www.google.com/recaptcha/ *.twimg.com syndication.twitter.com platform.twitter.com goo.gl bid.g.doubleclick.net
script-src 'self' 'unsafe-eval' www.googletagmanager.com www.gstatic.com https://www.google.com/recaptcha/api.js ajax.googleapis.com www.google-analytics.com apis.google.com d2vqbs7xgyce6n.cloudfront.net js.recurly.com api.recurly.com platform.twitter.com syndication.twitter.com *.twimg.com static.ads-twitter.com analytics.twitter.com *.intercom.io js.intercomcdn.com cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net www.googleadservices.com googleads.g.doubleclick.net 'unsafe-inline' 'sha384-mns2hxtrw1r/kffnoydlx1ao4ore/m/wephxlnatzg3gkivtg9mfyj6t8vu0w2ub' 'sha384-ko7dykh26rksa8cg6ihxn8qpzvysfwy9tysqcg9bkbqr6ct759d58glmxtvebu3k'
style-src 'self' 'unsafe-inline' d2vqbs7xgyce6n.cloudfront.net fonts.googleapis.com syndication.twitter.com platform.twitter.com *.twimg.com cdn.jsdelivr.net js.recurly.com
worker-src https: data: 'unsafe-inline' 'unsafe-eval'
script-src https: data: 'unsafe-inline' 'unsafe-eval'
"frame-ancestors my.milpark.ac.za www.milpark.ac.za milpark.ac.za 'self'"
font-src 'self' data: https://fonts.gstatic.com https://themes.googleusercontent.com https://*.wp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com/analytics.js https://*.ampproject.org https://cdnjs.cloudflare.com https://ajax.googleapis.com www.google-analytics.com https://*.addthis.com https://*.facebook.com https://*.twitter.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://*.bootstrapcdn.com https://*.wp.com https://*.gravatar.com
style-src 'self' https://secure.gravatar.com https://*.wp.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://*.gravatar.com 'unsafe-inline' https://fonts.googleapis.com
img-src 'self' data: https://*.doubleclick.net https://secure.gravatar.com www.google-analytics.com https://*.google.com https://*.google.com.tr https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://*.wp.com https://pixel.wp.com
frame-src 'self' www.google-analytics.com https://*.google.com https://*.google.com.tr https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://secure.gravatar.com https://*.wp.com
"default-src * data: 'unsafe-inline' https://maps.metager.de https://*.metager3.de
"script-src 'self' 'unsafe-inline' 'unsafe-eval' vk.com https://vk.com mc.yandex.ru clck.yandex.ru yandex.st www.google-analytics.com https://www.google-analytics.com www.gstatic.com pagead2.googlesyndication.com https://pagead2.googlesyndication.com
frame-src 'self' vk.com https://vk.com https://login.vk.com apis.google.com platform.twitter.com rootgadget.com tpc.googlesyndication.com googleusercontent.com googleads.g.doubleclick.net https://googleads.g.doubleclick.net mc.yandex.ru www.youtube.com
connect-src 'self' mc.yandex.ru www.google-analytics.com https://www.google-analytics.com rootgadget.com
connect-src 'self' *.mktoresp.com wss://*.24live.co https://*.google-analytics.com
style-src 'self' *.disquscdn.com *.24liveblog.com *.googleapis.com *.cloudflare.com *.marketo.com *.mktoresp.com 'unsafe-inline'
img-src 'self' *.facebook.com adcanopus.go2cloud.org catch.polyvalent.co.in *.hockeycurve.com *.googleusercontent.com *.google.com *.g.doubleclick.net *.google.co.in *.cloudfront.net *.fbcdn.net *.flixcart.com *.flipkart.com *.amazonaws.com *.googleapis.com *.s3.amazonaws-medium.com *.photobucket.com *.taglr.com *.google.com/ *.google.co.in *.hockeycurve.com *.youtube.com/ *.g.doubleclick.net/
script-src 'self' 'nonce-a996ff92-79f6-4163-b9b9-83fc0343fe5d' 'unsafe-inline' cdn.polyfill.io *.facebook.net *.google.com *.taglr.com *.cloudflare.com http://static.clevertap.com https://d2r1yp2w7bby2u.cloudfront.net https://*.cloudfront.net http://wzrkt.com https://*.amazonaws.com *.hockeycurve.com/taglr-001.js *.googletagmanager.com *.googleadservices.com http://ads.google.com/ *.youtube.com/ http://googleads.g.doubleclick.net/
style-src 'self' 'unsafe-inline' blob: *.googleapis.com
frame-src *.facebook.com *.google.com *.g.doubleclick.net *.taglr.com"
script-src 'self' https://www.googletagservices.com/ https://unpkg.com/ https://api-maps.yandex.ru https://suggest-maps.yandex.ru http://*.maps.yandex.net https://yandex.ru https://*.google.com.sg https://*.google.com http://*.rambler.ru https://*.google-analytics.com https://*.google.co.uz https://*.google.ru https://*.google.co.uk https://*.googlesyndication.com https://*.googleapis.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' 'unsafe-inline' blob: https://unpkg.com/ https://cdn.my-styles.ru
connect-src 'self' https://nominatim.openstreetmap.org/ https://googleads.g.doubleclick.net https://*.googlesyndication.com http://*.googleapis.com https://*.gstatic.com
img-src 'self' http://wow.link/ http://iplogger.org/ https://*.doubleclick.net https://*.googleapis.com https://*.google-analytics.com https://*.yadro.ru https://*.gstatic.com https://*.googlesyndication.com https://api.tiles.mapbox.com/ https://unpkg.com/ https://*.ggpht.com https://*.maps.yandex.net https://*.yandex.ru data:
frame-src 'self' www.google.com api-maps.yandex.ru http://www.youtube.com https://www.youtube.com *.addthis.com http://vk.com https://vk.com http://login.vk.com https://login.vk.com http://mc.yandex.ru https://mc.yandex.ru http://mdata.yandex.ru https://mdata.yandex.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://xn--80aqhfdfbaipr3n.xn--p1ai http://mc.yandex.ru https://mc.yandex.ru http://mdata.yandex.ru https://mdata.yandex.ru *.addthis.com counter.rambler.ru www.google-analytics.com *.mail.ru http://counter.millionpodarkov.ru vk.com
connect-src 'self' https://yandex.ru https://sovetnik.market.yandex.ru http://mc.yandex.ru https://mc.yandex.ru http://mdata.yandex.ru https://mdata.yandex.ru *.addthis.com *.addthisedge.com www.google-analytics.com
img-src 'self' data: yastatic.net http://xn--80aqhfdfbaipr3n.xn--p1ai counter.yadro.ru *.rambler.ru *.mail.ru http://*.yandex.ru https://*.yandex.ru *.addthis.com *.addthisedge.com www.google-analytics.com vk.com *.vk.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: d2wy8f7a9ursnm.cloudfront.net cdnjs.cloudflare.com yastatic.net *.studwork.org ajax.googleapis.com www.google-analytics.com *.google.com *.gstatic.com mc.yandex.ru *.chatra.io www.googletagmanager.com
style-src 'self' *.studwork.org *.googleapis.com *.google.com *.chatra.io *.ultragold.org ultragold.org 'unsafe-inline'
img-src 'self' data: *.algebra24.ru studwork.org studwork.s3.eu-central-1.amazonaws.com s3.eu-central-1.amazonaws.com *.studwork.org *.google.com www.google-analytics.com mc.yandex.ru *.gstatic.com *.doubleclick.net *.chatra.io *.ultragold.org ultragold.org www.googletagmanager.com
font-src 'self' *.studwork.org *.gstatic.com *.ultragold.org ultragold.org
connect-src 'self' ws: wss: *.studwork.org mc.yandex.ru *.chatra.io *.ultragold.org ultragold.org *.bugsnag.com *.googleapis.com
frame-src 'self' https://www.youtube.com/ yastatic.net *.studwork.org *.chatra.io *.google.com
"script-src 'nonce-zxejim4s2x' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: http:
frame-src 'self' www.youtube.com looker.wwsga.me search-mmdreams-analytics-w4huthgvvrfbi4xoos6qxqys64.eu-west-1.es.amazonaws.com
img-src 'self' data: indreams.me *.indreams.me assets.indreams.me notify.bugsnag.com www.google-analytics.com
script-src 'self' indreams.me *.indreams.me www.youtube.com s.ytimg.com d2wy8f7a9ursnm.cloudfront.net www.google-analytics.com 'nonce-5rfe4ywjrk' 'nonce-9a3917gbb'
style-src 'self' indreams.me *.indreams.me fonts.googleapis.com 'unsafe-inline'"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.platypi.io https://*.platypicms.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com http://*.google-analytics.com https://*.googleadservices.com https://*.gstatic.com https://*.pardot.com https://*.facebook.net https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://*.instagram.com https://*.cdninstagram.com https://*.twitter.com http://*.twitter.com https://*.t.co http://*.t.co https://t.co http://t.co https://*.linkedin.com https://*.disqus.com https://*.disquscdn.com https://*.doubleclick.net https://*.vo.msecnd.net https://*.typekit.net https://*.licdn.com https://*.twimg.com https://*.akamaihd.net https://*.infusionsoft.com https://*.redditstatic.com https://*.blob.core.windows.net https://*.g.doubleclick.net https://*.ticketbiscuit.com https://*.ticketmaster.com https://*.eventbrite.com https://*.ticketfly.com https://*.stubhub.com https://*.preptix.com https://*.soundcloud.com http://*.soundcloud.com https://twitframe.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' menu-doma.ru advapi.ru http://10.20.2.42:15871 *.akamaihd.net *.amazonaws.com *.ytimg.com http://*.whisla.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net http://vk.com https://vk.com https://pp.vk.me *.ok.ru fonts.googleapis.com w.uptolike.com api-maps.yandex.ru mc.yandex.ru yandex.st yastatic.net *.yandex.ru http://block.s1block.com *.gnezdo.ru n.cashandfavor.ru n.busyprice.ru n.servemoney.ru n.levelpay.ru n.goodkind.ru n.cashheaven.ru n.moneytrap.ru n.pandre10.ru http://st.n.lc2ads.ru http://n.lc2ads.ru http://st-n.lc2ads.ru http://st.lcads.ru ad.ladycash.ru banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru code.jquery.com cdn.sendpulse.com pushprofit.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru *.yadro.ru https://*.yadro.ru hvjudtzf.ru webvisor.com yastatic.net
object-src 'self' https://*.google.com *.google.com http://*.ytimg.com *.macromedia.com *.adobe.com https://*.adobe.com https://*.googleapis.com http://fonts.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yastatic.net *.gnezdo.ru n.cashandfavor.ru n.busyprice.ru n.servemoney.ru n.levelpay.ru n.goodkind.ru n.cashheaven.ru n.moneytrap.ru n.pandre10.ru http://st.n.lc2ads.ru http://n.lc2ads.ru http://st-n.lc2ads.ru http://st.lcads.ru ad.ladycash.ru banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru hvjudtzf.ru webvisor.com yastatic.net
style-src 'self' 'unsafe-inline' menu-doma.ru https://*.google.com *.google.com fonts.googleapis.com https://* http://netdna.bootstrapcdn.com http://*.yandex.ru https://*.yandex.ru mc.yandex.ru *.gnezdo.ru n.cashandfavor.ru n.busyprice.ru n.servemoney.ru n.levelpay.ru n.goodkind.ru n.cashheaven.ru n.moneytrap.ru n.pandre10.ru http://st.n.lc2ads.ru http://n.lc2ads.ru http://st-n.lc2ads.ru http://st.lcads.ru ad.ladycash.ru banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru hvjudtzf.ru webvisor.com yastatic.net
img-src * data: menu-doma.ru https://*.google.com *.google.com *.gnezdo.ru n.cashandfavor.ru n.busyprice.ru n.servemoney.ru n.levelpay.ru n.goodkind.ru n.cashheaven.ru n.moneytrap.ru n.pandre10.ru http://st.n.lc2ads.ru http://n.lc2ads.ru http://st-n.lc2ads.ru http://st.lcads.ru ad.ladycash.ru banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru *.yadro.ru https://*.yadro.ru hvjudtzf.ru webvisor.com yastatic.net
media-src 'self' * mediastream: * banermaner.com https://*.google.com *.google.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru *.gnezdo.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru hvjudtzf.ru webvisor.com yastatic.net
frame-src 'self' 'unsafe-eval' blocking.stat *.yahoo.com *.hubrus.com http://yandex.sc http://www.youtube.com https://www.youtube.com http://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com *.google.com http://vk.com https://vk.com https://pp.vk.me *.ok.ru awaps.yandex.ru player.vimeo.com *.yandex.net www.facebook.com yandexadexchange.net *.yandex.ru banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru *.gnezdo.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru w.uptolike.com ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru hvjudtzf.ru webvisor.com yastatic.net
font-src 'self' menu-doma.ru * fonts.googleapis.com https://themes.googleusercontent.com
connect-src 'self' https://www.youtube.com *.googlevideo.com https://*.gstatic.com mc.yandex.ru *.yandex.net streaming.video.yandex.ru yandex.st banermaner.com thor-media.ru t.thor-media.ru m.thor-media.ru i.thor-media.ru news.2xclick.ru 2xclick.ru news.nest.spb.su nest.spb.su medshowtiz.ru medicinetizer.ru *.gnezdo.ru n1vzzp6c4ycn.ru ru7mee8nhmz8.ru ru7mee8nhmz8.ru mdrek1.ru mdrek2.ru mdrek3.ru an.yandex.ru hvjudtzf.ru newsmmv9ls.ru https://tm46k0ij.ru hvjudtzf.ru webvisor.com yastatic.net
child-src 'self' yastatic.net *.yandex.ru webvisor.com"
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' minetilbud.dk az416426.vo.msecnd.net cdn.polyfill.io ft-polyfill-service.herokuapp.com policy.cookieinformation.com https://policy.app.cookieinformation.com track.adform.net www.google-analytics.com www.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://bat.bing.com https://maps.googleapis.com
style-src 'self' data: 'unsafe-inline' minetilbud.dk fonts.googleapis.com
img-src 'self' data: minetilbud.dk img.minetilbud.dk minetilbud2.azureedge.net minetilbud.azureedge.net img2minetilbud.azureedge.net imgminetilbud.azureedge.net az593773.vo.msecnd.net dmp.adform.net track.adform.net www.facebook.com bat.bing.com www.google-analytics.com https://www.facebook.com https://web.facebook.com https://maps.gstatic.com https://maps.googleapis.com
font-src 'self' data: fonts.gstatic.com static.hotjar.com
connect-src 'self' https://events.launchdarkly.com https://app.launchdarkly.com https://mt-emailvalidation.azurewebsites.net https://minetilbud.azure-api.net minetilbud.dk dc.services.visualstudio.com
child-src 'self' minetilbud.dk fkdstorage.blob.core.windows.net track.adform.net
frame-src 'self' minetilbud.dk kataloger.minetilbud.dk fkdstorage.blob.core.windows.net https://www.youtube.com track.adform.net https://www.facebook.com https://staticxx.facebook.com https://candidate.hr-manager.net
"default-src 'self' https: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.pstatic.net openapi.map.naver.com *.kakao.com *.daumcdn.net *.googleapis.com *.google.com *.google-analytics.com *.gstatic.com cdnjs.cloudflare.com *.youtube.com static.doubleclick.net stats.g.doubleclick.net cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'
style-src   'self' 'unsafe-inline'               cipafilter.com *.cipafilter.com *.googleapis.com
font-src    'self'                               cipafilter.com *.cipafilter.com *.googleapis.com
img-src     'self' data:                         cipafilter.com *.cipafilter.com
script-src  'self' 'unsafe-inline' 'unsafe-eval' cipafilter.com *.cipafilter.com
child-src   'self'                               cipafilter.com *.cipafilter.com *.youtube.com"
style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://www.google.com
img-src 'self' https://www.google-analytics.com https://chart.googleapis.com https://www.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google.com https://www.google-analytics.com https://static.doubleclick.net
"frame-ancestors 'self' http://customer-hornbach.loop21.net https://customer-hornbach.loop21.net http://public-location-hornbach.loop21.net https://public-location-hornbach.loop21.net"
"content-security-policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.pioneerelectronics.com embedded.pricespider.com embeddedcloud.pricespider.com youtube.com www.google.com ajax.googleapis.com
img-src 'self' data: adservice.google.com maps.google.com *.cloudfront.net *.googleapis.com www.google.com *.gstatic.com *.google-analytics.com jwpltx.com www.facebook.com p.typekit.net t.co cm.g.doubleclick.net ad.doubleclick.net *.fls.doubleclick.net pixel.sojern.com s3.amazonaws.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.amazonaws.com *.cloudfront.net *.google.com *.google-analytics.com *.googleapis.com *.jwpcdn.com *.webspellchecker.net *.sacramento.aero use.typekit.com use.fontawesome.com connect.facebook.net platform.twitter.com analytics.twitter.com static.ads-twitter.com beacon.sojern.com
style-src 'self' 'unsafe-inline' *.typekit.com *.fontawesome.com *.amazonaws.com *.googleapis.com *.google.com *.sacramento.aero cloud.typography.com
font-src 'self' data: *.fonts.net *.gstatic.com use.typekit.com use.fontawesome.com
connect-src 'self' stats.concordant.com.au https://*.algolia.net https://*.algolianet.com shaun.report-uri.com
frame-src 'self' assets.shaun.net www.youtube.com twitter.com platform.twitter.com syndication.twitter.com
img-src 'self' assets.shaun.net shaun.imgix.net stats.concordant.com.au syndication.twitter.com platform.twitter.com *.twimg.com data:
script-src 'self' 'unsafe-eval' assets.shaun.net stats.concordant.com.au cdnjs.cloudflare.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com
style-src 'self' 'unsafe-inline' assets.shaun.net cdnjs.cloudflare.com fonts.googleapis.com platform.twitter.com ton.twimg.com
"frame-ancestors http://www.vistaprint.co.uk https://www.vistaprint.co.uk http://vistaprint.co.uk https://vistaprint.co.uk https://www.optimizelyedit.com https://app.optimizely.com http://app.optimizely.com http://script.crazyegg.com https://script.crazyegg.com script.crazyegg.com http://www.radins.com http://fr.igraal.com http://cmsauth.vistaprint.prod https://secure.vistaprint.com https://*.hatchery.vistaprint.com https://*.mobile.vpsvc.com
img-src * data: 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.geographyofrussia.com https://geographyofrussia.com *.airpano.ru *.liveinternet.ru vk.com *.vk.com ok.ru *.ok.ru *.yandex.ru yandex.ru https://yastatic.net *.google.ru google.ru *.google.com google.com https://*.google.ru https://google.ru https://*.google.com https://google.com https://www.google.com *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://api-maps.yandex.ru an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com
frame-src 'self' *.geographyofrussia.com https://geographyofrussia.com https://yastatic.net vk.com *.vk.com ok.ru *.ok.ru *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com interneturok.ru *.youtube.ru *.airpano.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com
connect-src 'self' *.geographyofrussia.com https://geographyofrussia.com https://yastatic.net ok.ru *.ok.ru *.airpano.ru mc.yandex.ru https://translate.googleapis.com an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.geographyofrussia.com https://geographyofrussia.com ok.ru *.ok.ru *.airpano.ru *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com data:
font-src 'self' *.geographyofrussia.com https://geographyofrussia.com ok.ru *.ok.ru *.airpano.ru *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com data:
img-src 'self' *.geographyofrussia.com https://geographyofrussia.com https://www.google.com vk.com https://vk.com ok.ru *.ok.ru *.airpano.ru counter.yadro.ru *.yandex.net *.yandex.ru yandex.ru yandex.st *.googlesyndication.com *.doubleclick.net *.googleapis.com *.gstatic.com https://*.yandex.net https://*.yandex.ru https://*.googlesyndication.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com data:
object-src 'self' *.geographyofrussia.com https://geographyofrussia.com https://yastatic.net ok.ru *.ok.ru *.airpano.ru download.macromedia.com tiq.travelpod.com *.gstatic.com an.yandex.ru https://*.gstatic.com an.yandex.ru https://an.yandex.ru https://mc.yandex.ua https://mc.yandex.by https://mc.yandex.md https://adservice.google.com.ua https://adservice.google.kz https://adservice.google.md https://mc.yandex.kz https://csi.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ajax.aspnetcdn.com stats.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com tagmanager.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com maps.googleapis.com www.youtube.com s.ytimg.com supertext.bamboohr.com https://localhost:44399 widget.intercom.io js.intercomcdn.com nexus-long-poller-b.intercom.io widget.privy.com platform-api.sharethis.com cdn.tynt.com de.tynt.com en.tynt.com fr.tynt.com it.tynt.com ws.sharethis.com snap.licdn.com px.ads.linkedin.com
style-src 'self' 'unsafe-inline' cloud.webtype.com supertext.bamboohr.com fonts.googleapis.com tagmanager.google.com cdn-images.mailchimp.com widget.privy.com assets.privy.com platform-api.sharethis.com blob:
frame-src 'self' www.youtube.com docs.google.com www.google.com 192.168.0.115 c.sharethis.mgr.consensu.org
style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.bookcdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.google.com *.googletagmanager.com *.google-analytics.com *.cloudflare.com *.fontawesome.com *.histats.com *.fx-exchange.com *.booked.net
img-src 'self' *.google.com *.googleapis.com *.google-analytics.com *.doubleclick.net data: *.gstatic.com *.histats.com *.bookcdn.com
"style-src data: blob: 'unsafe-inline' *
script-src 'self' *.googlesyndication.com *.google.com *.google.com.br *.doubleclick.net *.googletagmanager.com *.googletagservices.com *.google-analytics.com https://cdn.ampproject.org https://d31qbv1cthcecs.cloudfront.net https://whos.amung.us 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tag.simpli.fi/sifitag/ https://translate.googleapis.com https://translate.google.com https://*.google-analytics.com https://ajax.googleapis.com https://bbox.blackbaudhosting.com
style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://fast.fonts.net http://ajax.googleapis.com https://bbox.blackbaudhosting.com
img-src 'self' data: https://www.google.com https://www.gstatic.com https://translate.googleapis.com https://www.google-analytics.com http://qs1016.pair.com https://bbox.blackbaudhosting.com
frame-src 'self' https://www.google.com/maps/ https://player.vimeo.com https://cdn.yoshki.com https://www.ustream.tv https://www.youtube.com https://bbox.blackbaudhosting.com
"script-src 'unsafe-eval' 'unsafe-inline' 'self' https://f1-eu.readspeaker.com *.episerver.net minsida.siriusit.net web103.reachmee.com s.ytimg.com image.providesupport.com *.youtube.com *.newrelic.com *.googletagmanager.com *.google-analytics.com script *.nr-data.net *.ytimg.com *.googleapis.com *.doubleclick.net tagmanager.google.com googleads.g.doubleclick.net csi.gstatic.com *.vo.msecnd.net
"script-src 'unsafe-inline' 'unsafe-eval' http: https:
font-src 'self' https://fonts.googleapis.com https://use.fontawesome.com https://fonts.gstatic.com data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com data:
img-src 'self' http://thumbnail.accenture.com http://www.gravatar.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://search.fwd.com.hk/ https://api.fwd.co.th/ https://kkbv2.api.sociaplus.com/ https://fwd.api.useinsider.com/ *.useinsider.com http://search.fwd.com.hk/ https://search.fwd.com.ph/ http://search.fwd.com.ph/ https://connect.fwd.co.th https://line.fwd.co.th https://www.gstatic.com https://www.google.com https://maps.googleapis.com www.google-analytics.com tagmanager.google.com *.googleapis.com www.googletagmanager.com *.livechatinc.com connect.facebook.net *.turn.com *.zopim.com *.zopim.io cdn-akamai.mookie1.com tags.tiqcdn.com t.mookie1.com b3.mookie1.com *.zopim.com api.map.baidu.com *.maxmind.com *.map.bdimg.com *.bdstatic.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io *.googleadservices.com *.adnxs.com *.doubleclick.net cloudfront.net *.mimecast.com  *.adsrvr.org *.facebook.com *.youtube.com *.ytimg.com *.visualwebsiteoptimizer.com bs.serving-sys.com *.taboola.com
connect-src 'self' https://api.fwd.co.th/ https://kkbv2.api.sociaplus.com/ https://api.useinsider.com/ https://location.api.useinsider.com/ https://hit.api.useinsider.com https://fwd.api.useinsider.com/ https://category-collector.api.useinsider.com/ http://dev.surfer.seasonalife.com/* https://surfer.seasonalife.com/* *.surfer.seasonalife.com *.seasonalife.com  https://image.useinsider.com/ https://*.api.useinsider.com https://search.fwd.com.hk/ wss://directline.botframework.com *.botframework.com http://search.fwd.com.hk/ https://search.fwd.com.ph/ http://search.fwd.com.ph/ https://connect.fwd.co.th https://line.fwd.co.th https://portal.fwd.com.vn wss://*.zopim.com *.maxmind.com api.map.baidu.com *.adnxs.com *.turn.com *.adsrvr.org *.facebook.com *.vimeo.com *.youtube.com *.taboola.com
"default-src https://sewtime.ru https://1c-bitrix.ru https://api-maps.yandex.ru https://api.consultsystems.ru https://bitrix.info https://consultsystems.ru https://google-analytics.com https://helpdesk.bitrix24.ru https://marketplace.1c-bitrix.ru https://mc.yandex.ru https://quicksale-chat.consultsystems.ru https://quicksale-mail.consultsystems.ru https://update.consultsystems.ru https://widget.consultsystems.ru https://webvisor.com https://youtube.com https://www.1c-bitrix.ru https://www.mcafeesecure.com https://www.google-analytics.com https://www.youtube.com https://*.1c-bitrix-cdn.ru https://*.amazonaws.com https://*.bitrix.info https://*.maps.yandex.net https://code.jivosite.com https://cdn.jivosite.com wss://node266.jivosite.com http://sewtime.ru http://bitrix.info http://marketplace.1c-bitrix.ru http://webvisor.com
img-src https: data: blob: 'self'http://marketplace.1c-bitrix.ru
script-src 'self' 'unsafe-inline' 'sha256-tmonwilldh/9c8a4bcpchqlpvdlhy4rp9i8ivjgxzwe=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
frame-src 'self' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://*.inspsearchapi.com http://*.yahoo.com http://ad.adserver-pro.net https://*.yimg.com
connect-src 'self' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com/ads-api-v3
child-src 'self' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://*.inspsearchapi.com http://*.yahoo.com http://ad.adserver-pro.net https://*.yimg.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: http://www.google-analytics.com https://www.google-analytics.com http://cdn.appdynamics.com https://cdn.appdynamics.com http://col.eum-appdynamics.com https://col.eum-appdynamics.com
"frame-ancestors https://bbwf.zyxel.com https://www.zyxel.com https://nebula.zyxel.com http://172.23.10.12"
"default-src https://patook.com:443 https://*.akamaized.net https://www.patook.com:443 https://*.giphy.com https://*.google-analytics.com https://*.fbcdn.net https://*.vimeo.com https://*.jquery.com https://*.facebook.net https://*.facebook.com https://*.doubleclick.net https://*.googleapis.com https://*.google.com https://*.gstatic.com  https://*.googlesyndication.com https://*.vimeocdn.com 'unsafe-inline' 'unsafe-eval' img-src:  https://patook.com:443 https://www.patook.com:443 https://*.giphy.com https://*.google-analytics.com https://*.fbcdn.net https://*.vimeo.com https://*.jquery.com https://*.facebook.net https://*.facebook.com https://*.doubleclick.net https://*.googleapis.com https://*.google.com https://*.gstatic.com  https://*.googlesyndication.com https://*.vimeocdn.com data:"
"default-src 'self' *.fjordnet.com *.accenture.com 'unsafe-eval' 'unsafe-inline'
script-src 'self' https://maps.googleapis.com https://api.instagram.com https://d3js.org https://use.typekit.net https://ajax.googleapis.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval'
frame-src 'self' *.fjordnet.com *.accenture.com https://w.soundcloud.com https://player.vimeo.com https://www.youtube.com
media-src 'self' *.fjordnet.com *.accenture.com https://player.vimeo.com https://*.vimeocdn.com https://www.youtube.com
connect-src 'self' *.fjordnet.com *.accenture.com https://www.juicer.io https://www.google-analytics.com https://google-analytics.com https://stats.g.doubleclick.net"
script-src 'unsafe-eval' 'unsafe-inline' 'nonce-dgjfpfmjg/44j8ir2fvhlg==' mc.yandex.ru social.yandex.ru yastatic.net
img-src 'self' data: avatars.yandex.net avatars.mds.yandex.net avatars.mdst.yandex.net mc.yandex.ru ext.captcha.yandex.net yastatic.net
script-src 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://www.google-analytics.com https://www.nabidkamajetku.cz/ https://nabidkamajetku.cz/
img-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net https://www.googletagmanager.com data:
style-src 'self' 'unsafe-inline' https://www.nabidkamajetku.cz/ https://nabidkamajetku.cz/
script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.gstatic.com https://www.google.com https://js.intercomcdn.com https://static.ads-twitter.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://widget.intercom.io https://analytics.twitter.com
connect-src https://api.changelly.com https://*.savvytech.com https://*.savvy.io https://*.paybear.io wss://*.savvytech.com wss://*.savvy.io https://*.intercom.io wss://*.intercom.io
img-src 'self' data: https://lipis.github.io https://*.savvytech.com https://*.savvy.io https://chart.googleapis.com https://pb-wallet-images.s3.amazonaws.com https://www.googletagmanager.com https://*.intercomcdn.com https://www.facebook.com https://t.co https://www.google-analytics.com https://static.intercomassets.com https://*.doubleclick.net https://www.google.com https://www.google.ru https://www.google.sk
"script-src 'self' 'unsafe-inline' 'unsafe-eval' track.yello.de *.usabilla.com *.cloudfront.net *.mouseflow.com *.ekomi.com *.wt-safetag.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.adform.net *.adjust.com *.dwin1.com *.awin1.com *.zenaps.com *.intelliad.de *.thunderhead.com
img-src 'self' data: track.yello.de *.contentful.com *.ctfassets.net *.usabilla.com *.cloudfront.net *.mouseflow.com *.wcfbc.net *.doubleclick.net *.google.com *.google.de *.googletagmanager.com *.googleusercontent.com *.awin1.com *.intelliad.de *.tradedoubler.com *.thunderhead.com
frame-src *.usabilla.com *.cloudfront.net *.ekomi.com *.youtube.com *.doubleclick.net *.adform.net *.awin1.com *.intelliad.de *.rfihub.com
connect-src 'self' track.yello.de dc.services.visualstudio.com *.mouseflow.com *.ekomi.com *.zenaps.com *.thunderhead.com
"script-src 'unsafe-inline' 'unsafe-eval' *.key-systems.net *.rrpproxy.net ispcomfort.net *.ispcomfort.net
style-src 'unsafe-inline' *.key-systems.net *.rrpproxy.net ispcomfort.net *.ispcomfort.net fonts.googleapis.com fonts.gstatic.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://mts.googleapis.com https://mts1.googleapis.com https://mts0.googleapis.com http://fonts.googleapis.com https://fonts.googleapis.com https://themes.googleusercontent.com https://code.jquery.com http://*.flickr.com https://*.flickr.com https://farm8.staticflickr.com https://*.google.com https://www.googleapis.com
img-src 'self' placehold.it data: www.google-analytics.com www.gravatar.com https://ghost.etch.co
font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com
script-src 'self' 'nonce-d36bd686-1e10-4d86-b8d6-9587f16789cd' 'unsafe-inline' data: cdn.polyfill.io www.google-analytics.com
style-src 'self' blob: fonts.googleapis.com/css 'unsafe-inline'
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.aboutespanol.com *.qa.aws.aboutespanol.com atlas.aboutespanol.com atlas.local.aboutespanol.com"
form-action 'self' https://r.girogate.de https://www.sandbox.paypal.com https://www.paypal.com https://hooks.stripe.com https://stripe.com
style-src 'self' 'nonce-e2c67359e0c0d557a2084513a70d0967' 'sha256-47deqpj8hbsa+/timw+5jceuqerkm5nmpjwzg3hsufu=' 'sha256-oteu7nehdo6qutiwo0f2tmyrdhskwczruggoxxhgj8o='
script-src 'self' 'nonce-e2c67359e0c0d557a2084513a70d0967' https://www.google-analytics.com https://cdn.ampproject.org https://js.stripe.com https://cdn.trackjs.com
connect-src 'self' https://fonts.googleapis.com https://api.stripe.com https://capture.trackjs.com
img-src 'self' https://www.google.com https://www.google.de https://www.google-analytics.com https://usage.trackjs.com https://stats.g.doubleclick.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com/analytics.js
script-src 'self' https://db.itvstudios.de 'unsafe-inline' 'unsafe-eval'
style-src 'self' 'unsafe-inline' https://db.itvstudios.de' 'fonts.gstatic.com 'fonts.googleapis.com'
connect-src https: 'self' wss://www.englishdom.com/wss/ wss://*.zopim.com/
"default-src 'self' style-src 'self' script-src 'self' *.franklintempletonindia.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com fonts.googleapis.com az416426.vo.msecnd.net
"default-src 'self'  *.google-analytics.com *.googletagmanager.com  *.facebook.com *.google.com *.jquery.com *.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com  *.facebook.com *.facebook.net *.google.com *.jquery.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.newrelic.com *.nr-data.net *.googleapis.com
font-src 'self' data: *.gstatic.com *.googleapis.com
"default-src 'self' *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com  *.workaci.com
frame-src 'self' *.matterport.com forms.hubspot.com *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com
img-src 'self' data: *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com *.hubspot.com *.hubspot.net *.amazonaws.com *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com *.automatedlogic.com *.bapihvac.com *.aic-wireless.com *.dwyer-inst.com *.kmccontrols.com *.alerton.com *.honeywell.com *.kele.com *.functionaldevices.com *.veris.com *.belimo.us *.inteccontrols.com *.cloudfront.net *.fullcontact.com *.belimo.com
script-src 'self' *.hsleadflows.net *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com *.hs-analytics.net *.usemessages.com forms.hubspot.com *.hs-scripts.com *.hsleadflows.net 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' webflow.com *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com *.hubspot.com *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com
font-src 'self' data: 'unsafe-inline' *.gstatic.com *.googleapis.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de itzbund.de *.bka.de bka.de www.facebook.com
img-src 'self' piwik.itzbund.de *.itzbund.de pbs.twimg.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mepcontent.eu https://*.mepcontent.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.wistia.com https://*.google.com https://*.addthis.com https://*.addthisedge.com https://*.googletagmanager.com https://load.sumome.com https://*.litix.io https://*.kxcdn.com https://*.hotjar.com https://*.leady.com https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com https://cdn.jsdelivr.net https://*.pardot.com https://*.visualwebsiteoptimizer.com wss: https://optanon.blob.core.windows.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://go.stabiplan.com https://fast.wistia.com https://*.jquery.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com
object-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.akamaihd.net https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com blob: https://*.jquery.com
style-src 'self' 'unsafe-inline' https://*.mepcontent.eu https://*.mepcontent.com https://*.googleapis.com https://*.google.com https://*.kxcdn.com https://pushcrew.com https://optanon.blob.core.windows.net https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com https://*.jquery.com
img-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.visualwebsiteoptimizer.com https://*.litix.io https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.google.com.bn https://*.google.com.mx https://*.google.com.vn https://*.google.co.kr https://*.google.co.nz https://*.google.co.uk https://*.google.az https://*.google.by https://*.google.cl https://*.google.de https://*.google.es https://*.google.fr https://*.google.it https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.sk https://*.google.tn https://*.google.tr https://*.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://*.akamaihd.net https://*.wistia.com https://*.ggpht.com https://*.pushcrew.com https://pushcrew.com https://static.hotjar.com https://*.leady.com https://*.addthis.com https://*.bing.com https://*.pingdom.net https://*.adnxs.com https://*.linkedin.com data: blob: https://localhost:* https://content2:* https://optanon.blob.core.windows.net https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com https://www.facebook.com https://*.jquery.com https://*.intercomcdn.com https://*.intercomassets.com https://*.intercomusercontent.com
media-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.akamaihd.net https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com blob: https://*.jquery.com https://js.intercomcdn.com
frame-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.wistia.com https://*.addthis.com https://*.google.com https://*.youtube.com https://*.twitter.com https://*.facebook.com https://*.hotjar.com https://*.doubleclick.net https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com https://*.cloudfront.net https://*.jquery.com
font-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.gstatic.com https://*.wistia.com https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com cdnjs.cloudflare.com data: https://*.jquery.com https://js.intercomcdn.com
connect-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.google.com https://*.google-analytics.com https://*.akamaihd.net https://*.wistia.com https://*.addthis.com/ https://sumome.com https://*.hotjar.com https://sumo.com https://*.litix.io/ https://*.pingdom.net https://*.popcornmetrics.com https://*.herokuapp.com https://*.optinmonster.com https://*.optmstr.com https://*.mixpanel.com wss: https://*.jquery.com https://*.intercom.io https://*.intercomcdn.com https://*.intercomusercontent.com https://app.getsentry.com
child-src 'self' https://*.mepcontent.eu https://*.mepcontent.com https://*.wistia.com https://*.addthis.com https://*.google.com https://*.youtube.com https://*.twitter.com https://*.facebook.com https://*.hotjar.com https://*.popcornmetrics.com https://*.optinmonster.com https://*.optmstr.com blob: https://*.jquery.com https://share.intercom.io https://intercom-sheets.com https://player.vimeo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com www.google.com/recaptcha/ www.gstatic.com  js-agent.newrelic.com bam.nr-data.net maps.googleapis.com www.google-analytics.com *.addthisedge.com *.addthis.com *.hs-scripts.com *.hs-analytics.net chimpstatic.com *.chimpstatic.com *.mailchimp.com *.list-manage.com
img-src 'self' data: 'unsafe-inline' palma.mycar.ir fileupload.mycar.ir trustseal.enamad.ir logo.samandehi.ir www.google-analytics.com stats.g.doubleclick.net csi.gstatic.com maps.googleapis.com maps.gstatic.com www.google.com/ads/ga-audiences *.addthis.com *.addthisedge.com *.hubspot.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.mailchimp.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.signere.no *.unipluss.no *.boligtorget.no https://connect.facebook.net/nb_no/all.js https://connect.facebook.net/en_us/all.js https://ssl.google-analytics.com/ga.js https://cdnjs.cloudflare.com/ajax/libs/toastr.js/2.0.1/js/toastr.js http://code.jquery.com/jquery-1.9.1.min.js https://maps.google.com/maps/api/js https://s7.addthis.com/js/250/addthis_widget.js https://s7.addthis.com/static/menu.c20a7f164de4760a4fae.js https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js https://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.validate.unobtrusive.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/jquery-ui.min.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.7/jquery.validate.min.js http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.js https://m.addthis.com/live/red_lojson/300lo.json
object-src 'self' *.signere.no *.unipluss.no *.boligtorget.no
style-src 'self' 'unsafe-inline' *.signere.no *.unipluss.no *.boligtorget.no https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/jquery-ui.css https://cdnjs.cloudflare.com/ajax/libs/toastr.js/2.0.1/css/toastr.css https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css https://fonts.googleapis.com
img-src 'self' *.signere.no *.unipluss.no *.boligtorget.no data: https://ssl.google-analytics.com https://www.facebook.com https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_flat_75_ffffff_40x100.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_glass_65_ffffff_1x400.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-icons_222222_256x240.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_glass_75_dadada_1x400.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png https://az66320.vo.msecnd.net/bori-bilder/ https://az66320.vo.msecnd.net/leiebolig-bilder/
frame-src 'self' *.signere.no *.unipluss.no *.boligtorget.no https://www.facebook.com https://staticxx.facebook.com https://s7.addthis.com
font-src 'self' *.signere.no *.unipluss.no *.boligtorget.no https://fonts.gstatic.com
"default-src 'self' 'unsafe-inline' ' unsafe-eval' https://*.xisecurenet.com
frame-src 'self' *.twitter.com cdnjs.cloudflare.com smct.co *.signifyd.com acdn.adnxs.com tags.tiqcdn.com s7.addthis.com bid.g.doubleclick.net *.vimeo.com www.facebook.com *.fls.doubleclick.net www.yahoo.com google.de couponfollow.com *.hola.org gsa://onpageload opera://js-inject connect.facebook.net assets.pinterest.com  www.googletagmanager.com tpc.googlesyndication.com *.paypal.com cj.dotomi.com *.givingassistant.org *.kaspersky-labs.com *.hotjar.com www.emjcd.com *.googleapis.com *.dotmailer-surveys.com *.youtube.com *.youtu.be
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: cdn.syndication.twimg.com *.twitter.com d10lpsik1i8c69.cloudfront.net *.bing.com  cdnjs.cloudflare.com *.dotmailer-surveys.com *.bench.ca *.signifyd.com *.hotjar.com loadingpagesson.club *.kaspersky-labs.com *.opendns.com img.ucweb.com *.addthis.com m.addthisedge.com www.google.com www.google-analytics.com tpc.googlesyndication.com  www.googleadservices.com tagmanager.google.com www.googletagmanager.com www.gstatic.com googleads.g.doubleclick.net www.facebook.com connect.facebook.net www.paypalobjects.com www.paypal.com seal.thawte.com t.trackedlink.net secure.adnxs.com tags.tiqcdn.com chimpstatic.com ib.adnxs.com cdn.districtm.ca pixel.adacado.com assets.pinterest.com *.googleapis.com http://ajax.googleapis.com *.trackedlink.net smct.co
"frame-ancestors 'self', frame-ancestors 'self' https://*.facebook.com, frame-ancestors 'self', frame-ancestors 'self' https://*.facebook.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.youtube.com *.adobedtm.com
"default-src 'self' golos.io st1.letitplay.io www.youtube.com *.facebook.com *.goldvoice.club googleads.g.doubleclick.net
child-src 'self' docs.google.com www.youtube.com acceptable.a-ads.com w.soundcloud.com *.facebook.com player.vimeo.com googleads.g.doubleclick.net www.google.com/maps/ coub.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com unpkg.com *.facebook.com widget.letitplay.io pagead2.googlesyndication.com storage.googleapis.com googleads.g.doubleclick.net ajax.googleapis.com adservice.google.ru adservice.google.com www.google-analytics.com *.facebook.net mc.yandex.ru use.fontawesome.com cloud.tinymce.com plugins.tinymce.com *.gstatic.com
style-src 'self' 'unsafe-inline' *.gstatic.com use.fontawesome.com cdn.fontawesome.com cloud.tinymce.com fonts.googleapis.com
img-src * data: storage.googleapis.com pagead2.googlesyndication.com
font-src data: use.fontawesome.com cdn.fontawesome.com cloud.tinymce.com fonts.gstatic.com
connect-src 'self' http://127.0.0.1:51280/ wss://ws.golos.io wss://api.golos.cf https://api.steemit.com wss://ws.goldvoice.club st1.letitplay.io api.letitplay.io *.facebook.com www.google-analytics.com googleads.g.doubleclick.net csi.gstatic.com api.blockcypher.com mc.yandex.ru api.imgur.com
style-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.surveygizmo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.addthis.com *.google-analytics.com *.addthisedge.com *.surveygizmo.com *.ytimg.com *.youtube.com *.asgproxyauth1 10.8.60.42 10.8.60.44 *.appsource.cool *.srvvtrk.com *.asgproxyauth2
font-src 'self' data: *.gstatic.com *.surveygizmo.com *.asgproxyauth1
img-src 'self' data: *.google-analytics.com *.g.doubleclick.net *.paypal.com *.googletagmanager.com *.akamaihd.net *.apesquebec.org *.surveygizmo.com *.gstatic.com *.asgproxyauth1 *.appsource.cool *.addthis.com *.cloudfront.net
connect-src 'self' *.addthis.com *.akamaihd.net *.google-analytics.com *.g.doubleclick.net
frame-src 'self' *.addthis.com *.akamaihd.net *.soundcloud.com 10.8.60.44 *.googletagmanager.com *.onpageload
form-action 'self' http://www.apesquebec.org *.apesquebec.org *.surveygizmo.com *.asgproxyauth1
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data:  https://scontent.xx.fbcdn.net https://graph.facebook.com/
font-src 'self' data: http://fonts.gstatic.com:443 https://static.tacdn.com/ http://fonts.googleapis.com/
img-src 'self' data: https://scontent.xx.fbcdn.net/ http://media.biotropica.fr https://media.biotropica.fr https://maps.google.com https://secure.gravatar.com:443 https://p.travelsmarter.net/ https://www.google.com/ https://www.gueudry.fr/ http://www.google-analytics.com/ http://crn.wem.fr https://service.ariba.com/ https://maps.googleapis.com/ https://csi.gstatic.com/ https://www.tripadvisor.fr/ https://www.google-analytics.com/ https://maps.gstatic.com/ https://stats.g.doubleclick.net/ https://media.immo-facile.com/ http://gauge.social9.com/ https://www.facebook.com/
style-src 'self' 'unsafe-inline' data: https://media.biotropica.fr http://fonts.googleapis.com/ https://sharecdn.social9.com/ https://static.tacdn.com/ http://widget.opinionsystem.fr/
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com/ https://www.googletagmanager.com https://ajax.googleapis.com/ https://www.gstatic.com/ https://www.google.com/ https://stats.patakes.fr/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.jscache.com/ https://static.doubleclick.net/ https://ajax.googleapis.com/ https://sharecdn.social9.com/ http://www.google-analytics.com/ https://www.google.com/ https://static.tacdn.com/ https://maps.google.com/ https://www.tripadvisor.fr/ https://www.tripadvisor.com/ https://cdnjs.cloudflare.com/ http://gaugecdn.social9.com/ http://widget.opinionsystem.fr/ https://connect.facebook.net/
frame-src 'self' 'unsafe-inline' https://www.google.com https://www.youtube.com/ https://maps.google.fr/ https://staticxx.facebook.com/ https://www.facebook.com/
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  eval *.googleapis.com yandex.by *.yandex.by *.google.cn *.google.com.tw *.yandex.fr *.yandex.kz *.yandex.ua *.g.doubleclick.net *.google.com.om *.google.com.lb *.google.com.eg *.google.com.au *.google.sk *.google.hr *.google.ie *.google.tm *.google.no *.google.pt *.google.nl *.google.at *.google.se *.google.ro *.google.bg *.google.com.ph *.google.ge *.google.fi *.google.md *.google.co.uk *.google.ae *.google.cz *.google.es *.google.hu *.google.co.uz *.google.az *.google.it *.google.ee *.google.co.il *.google.kz *.google.kg *.google.de *.google.pl *.google.lv *.google.co.kr *.google.com.tr ymetrica1.com *.google.ca *.google.fr *.google.com.ua *.google.ru *.google.com *.google.com.tj *.google.lu *.google.ch *.google.lt *.google.com.sg *.google.me *.google.com.qa *.google.gr *.google.rs *.google.com.cy *.google.co.in *.google.be *.google.com.hk ymetrica.com *.webvisor.org yastatic.net *.yastatic.net yandex.st *.yandex.ru *.yandex.net *.mail.ru *.api.twitter.com *.facebook.com *.facebook.net vk.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.googlesyndication.com *.g.doubleclick.net *.googletagmanager.com googletagmanager.com vk.com yandex.ru pagead2.googlesyndication.com apis.google.com www.gstatic.com login.vk.com graph.facebook.com *.twitter.com www.odnoklassniki.ru ok.ru *.facebook.com *.instagram.com phdt.ru i9d.ru *.google.com google.com *.googleapis.com *.ampproject.org *.googletagservices.com
font-src 'self' *.googleusercontent.com gstatic.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com data:
frame-src 'self' *.webvisor.org yastatic.net *.g.doubleclick.net *.yandex.ru ymetrica1.com *.yastatic.net *.yandexadexchange.net yandexadexchange.net *.instagram.com *.youtube.com *.youtube.com *.g.doubleclick.net *.google.com
img-src 'self' *.yandex.ru *.yandex.fr *.webvisor.org mc.webvisor.org *.yadro.ru *.youtube.com *.ytimg.com http://*.ytimg.com *.googlesyndication.com yastatic.net *.mds.yandex.net *.yandex.net *.mail.ru data:
"script-src 'self' https://www.homebank.kz https://homebank.kz https://cdn.homebank.kz *.zopim.com https://static.zdassets.com *.homebank.kz *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.googletagmanager.com api-maps.yandex.ru *.yandex.net 'unsafe-inline' 'unsafe-eval'
connect-src 'self' wss: https://*.googleapis.com https://cdnjs.cloudflare.com https://apis.google.com https://*.googleusercontent.com/ https://cdn.ckeditor.com/ https://www.dropbox.com https://dl.dropboxusercontent.com https://js.stripe.com https://fonts.gstatic.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.google.com https://*.firebaseio.com https://cdn.ckeditor.com/ https://js.stripe.com/v2/
img-src 'self' data: https://*.googleusercontent.com https://firebasestorage.googleapis.com https://cdn.ckeditor.com/ https://*.stripe.com https://www.dropbox.com https://dl.dropboxusercontent.com
style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://cdn.ckeditor.com/ https://cdnjs.cloudflare.com/
frame-src 'self' https://js.stripe.com https://*.firebaseio.com https://*.firebaseapp.com
img-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://samourai.kayako.com https://assets.kayako.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://code.jquery.com https://d2wy8f7a9ursnm.cloudfront.net https://www.googletagmanager.com https://samourai.kayakocdn.com https://assets.kayako.com
connect-src 'self' wss://kre.kayako.net https://samourai.kayako.com https://apps.kayako.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' st.ayesh.me www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru
img-src data: https: blob: *.moatads.com
"default-src https: blob: mediastream: data: 'self' 'unsafe-inline' 'unsafe-eval'
style-src 'self' https: data: 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:"
"script-src 'self' https://www.google-analytics.com/ https://pi.pardot.com/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ 'unsafe-inline' 'unsafe-eval'
"default-src 'self' http://localhost:* ws://localhost:* track.hubspot.com google-analytics.com www.google-analytics.com www.googleadservices.com api.hubapi.com cdn.polyfill.io www.google.com api.hubspot.com googleads.g.doubleclick.net js.hs-analytics.net js.hsleadflows.net forms.hubspot.com js.hsadspixel.net js.hs-analytics.ne js.usemessages.com js.hs-scripts.com www.googletagmanager.com maxcdn.bootstrapcdn.com 'unsafe-inline' www.healthcheck360.com 'unsafe-eval'
frame-src 'self' http://banalyze.net  https://banalyze.net http://bodyclick.net https://bodyclick.net https://clcktms.ru http://xxx-hunt-m.com https://xxx-hunt-m.com http://ejywtxa2agahkqt.ru https://ejywtxa2agahkqt.ru https://efbvrlg6dnjyllx.ru http://fbbamvq2fdinvtx.ru https://fbbamvq2fdinvtx.ru https://hmqzhs0csdealn.ru https://ekkhgwp5atpuxdq.ru https://adultadv.ru/ http://pftfk.com https://pftfk.com https://xxx-hunt-er.xyz https://tools.bongacams.com http://tools.bongacams.com http://bongacams.com http://xxx-hunt-er.xyz http://twoadv.ru https://twoadv.ru  https://bongacams.com https://*.bongacams.com http://*.twitter.com http://twitter.com https://*.twitter.com https://twitter.com  https://*.facebook.net http://*.facebook.net https://*.facebook.com http://*.facebook.com http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://vk.com https://vk.com https://*.vk.com http://*.vk.com https://*.ok.ru http://*.ok.ru http://*.mail.ru https://*.mail.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru
img-src 'self' 'unsafe-inline' 'unsafe-eval' * data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ok.ru http://*.ok.ru http://*.mail.ru https://*.mail.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru http://vk.com https://vk.com https://*.vk.com http://*.vk.com http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.google-analytics.com https://*.google-analytics.com https://*.facebook.net http://*.facebook.net https://*.facebook.com http://*.facebook.com http://*.twitter.com http://twitter.com https://*.twitter.com https://twitter.com https://mp-https.info http://mpay69.com http://mpay69.biz https://xxx-hunt-m.com http://xxx-hunt-m.com http://plusadv.ru https://clcktms.ru https://adultadv.ru/ http://pftfk.com https://pftfk.com https://bongacams.com https://*.bongacams.com https://efbvrlg6dnjyllx.ru http://ejywtxa2agahkqt.ru https://ejywtxa2agahkqt.ru https://plusadv.ru https://hmqzhs0csdealn.ru https://ekkhgwp5atpuxdq.ru http://goldadv2.ru https://goldadv2.ru http://bongacams.com https://tools.bongacams.com http://tools.bongacams.com https://xxx-hunt-er.xyz http://xxx-hunt-er.xyz http://twoadv.ru https://twoadv.ru https://fbbamvq2fdinvtx.ru http://fbbamvq2fdinvtx.ru https://golayazv.com http://*.golayazv.com https://bodyclick.net http://bodyclick.net http://banalyze.net  https://banalyze.net
"frame-src 'self' *.futurumshop.nl *.futurumshop.com *.robinhq.com *.2mdn.net *.akstat.io *.doubleclick.net *.mpstat.us *.youtube-nocookie.com bolfelicitatie.b05-apps.nl platform.twitter.com player.autheos.com secure.ogone.com securewebregistrations.net tpc.googlesyndication.com view.publitas.com *.facebook.com *.google.com *.visualstudio.com *.vimeo.com *.criteo.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.bing.com *.googleadservices.com robincontentdesktop.blob.core.windows.net sslwidget.criteo.com *.doubleclick.net *.gstatic.com *.youtube.com *.issuu.com 'unsafe-inline' *.facebook.net *.google-analytics.com
default-src 'self' 'unsafe-inline' 'unsafe-eval' chrome-extension: *.hozya.ru https://hozya.ru http://hozya18.ru https://hozya18.ru http://hozya55.ru https://hozya55.ru http://hozya59.ru https://hozya59.ru vk.com *.vk.com https://vk.com https://*.vk.com 2gis.ru *.2gis.ru https://2gis.ru https://*.2gis.ru 2gis.com *.2gis.com https://2gis.com https://*.2gis.com yandex.ru *.yandex.ru mc.yandex.ru dl.metabar.ru https://yandex.ru https://*.yandex.ru https://mc.yandex.ru https://dl.metabar.ru yastatic.net *.yastatic.net https://yastatic.net https://*.yastatic.net youtube.com *.youtube.com https://youtube.com https://*.youtube.com google-analytics.com *.google-analytics.com https://google-analytics.com https://*.google-analytics.com docs.google.com https://docs.google.com http://docs.google.com https://*.g.doubleclick.net googleadservices.com https://googleadservices.com http://googleadservices.com *.googleadservices.com https://*.googleadservices.com http://*.googleadservices.com googletagmanager.com https://googletagmanager.com http://googletagmanager.com *.googletagmanager.com https://*.googletagmanager.com http://*.googletagmanager.com onesignal.com https://onesignal.com *.onesignal.com https://*.onesignal.com os.tc https://os.tc *.os.tc https://*.os.tc
"connect-src 'self' wss://*.service.signalr.net:5001 https://*.service.signalr.net:5001 https://*.azurewebsites.net wss://*.azurewebsites.net
img-src 'self' data: https://*.tile.openstreetmap.org https://*.blob.core.windows.net
script-src 'self' https://*.flyingblue.com https://gateway.zscalertwo.net https://gateway.zscloud.net https://*.usabilla.com https://*.hotjar.com https://*.youtube.com https://*.youku.com https://*.google.com https://*.google-analytics.com https://*.iadvize.com https://*.r42tag.com https://*.relay42.com https://*.optimizely.com 'unsafe-eval' 'unsafe-inline'"
"frame-src 'self' *.google.de google.de *.unud.ac.id *.google.com google.com *.youtube.com youtube.com *s7.addthis.com s7.addthis.com
"default-src 'self' *.dwd.de *.readspeaker.com *.twitter.com *.youtube.com
script-src 'self' *.dwd.de *.readspeaker.com *.twitter.com *.twimg.com *.youtube.com *.jwpcdn.com *.ytimg.com 'unsafe-inline' 'unsafe-eval' data:
style-src 'self' *.dwd.de *.twitter.com *.twimg.com 'unsafe-inline' data:
frame-src 'self' *.dwd.de twitter.com *.twitter.com *.youtube.com
child-src 'self' *.dwd.de twitter.com *.twitter.com *.youtube.com
img-src 'self' data: http://via.placeholder.com/ https://*.ashconnect.com http://*.gstatic.com http://*.googleapis.com https://app.validic.com https://*.typekit.net https://*.ashcompanies.com https://*.api.ashcompanies.com https://*.googleapis.com  https://csi.gstatic.com https://www.google-analytics.com http://www.google-analytics.com https://stats.g.doubleclick.net/ https://www.facebook.com/ https://www.google.com/ https://dev.api.healthyroads.com https://stg.api.healthyroads.com/ https://preprod.api.healthyroads.com https://api.healthyroads.com/ https://www.googletagmanager.com/
media-src 'self' https://dev.api.healthyroads.com  https://preprod.api.healthyroads.com  https://api.healthyroads.com/ https://stg.api.healthyroads.com/ https://*.api.ashcompanies.com
frame-src 'self' 'unsafe-inline' https://www.facebook.com/ https://connect.facebook.net/ https://*.vimeo.com https://api.recurly.com/ https://*.networksearch.api.ashcompanies.com
font-src 'self' 'unsafe-inline' https://*.api.ashcompanies.com/ https://*.ashconnect.com http://*.gstatic.com http://*.typekit.net https://*.ui.api.ashcompanies.com
connect-src 'self' http://dc.services.visualstudio.com/v2/track https://dc.services.visualstudio.com/v2/track https://api.healthyroads.com/ https://*.api.healthyroads.com https://*.ashconnect.com https://*.exerciserewards.com https://*.typekit.net/ https://*.api.ashcompanies.com https://api.recurly.com https://connect.facebook.net https://dc.services.visualstudio.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.typekit.net http://noembed.com/ https://noembed.com/ https://api.healthyroads.com https://*.ui.api.ashcompanies.com/ https://*.api.ashcompanies.com https://*.api.healthyroads.com https://*.exerciserewards.com http://tagmanager.google.com https://tagmanager.google.com http://*.googleapis.com https://js.recurly.com/v4/recurly.js  https://www.googletagmanager.com http://www.google-analytics.com/ https://www.google-analytics.com/ https://analytics.clickdimensions.com https://az416426.vo.msecnd.net/ https://connect.facebook.net/ http://analytics.clickdimensions.com/
style-src 'self' https://js.recurly.com/ http://tagmanager.google.com https://tagmanager.google.com http://*.googleapis.com https://api.healthyroads.com/ https://*.api.ashcompanies.com/ https://*.api.healthyroads.com 'unsafe-inline'
"default-src http: data: 'unsafe-inline' 'unsafe-eval'"
"script-src 'nonce-1baaef8abfbcde37353f6f54e58766ddcd761f23' 'strict-dynamic' https: http:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://*.nr-data.net https://*.newrelic.com https://*.twimg.com https://platform.twitter.com https://cdn.heapanalytics.com https://heapanalytics.com https://www.googleadservices.com https://code.highcharts.com https://blueimp.github.io https://*.gosquared.com https://www.google.com https://js.chargebee.com https://*.cloudfront.net https://*.google-analytics.com https://www.gstatic.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' https://*.twimg.com https://*.twitter.com https://heapanlytics.com https://www.gstatic.com https://www.google.com https://*.googleapis.com
frame-src https://*.hotjar.com https://*.twitter.com https://www.google.com https://dmarcian.chargebee.com https://dmarcianapac.chargebee.com
img-src 'self' data: https://*.hotjar.com https://*.twitter.com https://*.twimg.com https://heapanalytics.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.google-analytics.com https://csi.gstatic.com
connect-src 'self' wss://*.hotjar.com https://*.hotjar.com https://heapanalytics.com https://api.segment.io
font-src 'self' data: https://static.hotjar.com https://heapanlytics.com https://fonts.gstatic.com https://themes.googleusercontent.com"
child-src bonus.ly staging.bonus.ly fast.wistia.net js.stripe.com localhost:3000 share.intercom.io widget-dlvr.bonus.ly *.hubspot.com *.addthis.com *.doubleclick.net *.google.com *.twitter.com *.vimeo.com *.hsforms.com *.youtube.com
connect-src 'self' *.intercom.io wss://*.intercom.io api.hubspot.com app.getsentry.com forms.hubspot.com syndication.twitter.com uploads.intercomcdn.com uploads.intercomusercontent.com *.algolianet.com *.algolia.net *.natero.com
font-src 'self' data: fonts.gstatic.com fonts.googleapis.com js.intercomcdn.com production-cdn.bonus.ly staging-cdn.bonus.ly *.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: api.usemessages.com connect.facebook.net graph.facebook.com googleads.g.doubleclick.net js.hs-analytics.net js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hsleadflows.net js.leadin.com js.usemessages.com production-cdn.bonus.ly staging-cdn.bonus.ly unpkg.com *.addthis.com *.addthisedge.com *.adroll.com *.bnsly.co *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.hipchat.com *.hscta.net *.hubspot.com *.intercom.io *.intercomcdn.com *.linkedin.com *.newrelic.com *.nr-data.net *.perfectaudience.com *.stripe.com *.twimg.com *.twitter.com zapier.com *.natero.com sjs.bizographics.com static.ads-twitter.com pixel.cdnwidget.com reddit.com redditstatic.com quora.com
object-src * data: blob: 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.natfuel.com *.nationalfuelgas.com nationalfuel.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com player.vimeo.com www.google.com sp.analytics.yahoo.com data:"
script-src 'self' http://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net data:
"child-src 'self' *.google.com *.youtube.com *.facebook.com *.twitter.com
frame-src  *.sharethis.com https://c.sharethis.mgr.consensu.org https://destinilocators.com https://player.vimeo.com 'self'
"default-src data: blob: http://* https://* wss://* 'self' 'unsafe-inline' 'unsafe-eval'
"frame-src 'self' www.inessence.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
"script-src 'self' 'nonce-ce9fb78d-197c-45cd-8445-2062378c9d15' https://*.msecnd.net https://*.mxpnl.com https://cdn-mxpnl.com https://cdn.ravenjs.com https://checkout.razorpay.com/v1/checkout.js https://wzrkt.com https://d2r1yp2w7bby2u.cloudfront.net
img-src 'self' data: https://www.gravatar.com/avatar/ https://ud-img.azureedge.net https://ud-dev-img.azureedge.net https://ud-video.azureedge.net https://udaan.azureedge.net https://ud-dev-cdn.azureedge.net https://checkout.razorpay.com https://cdn-mxpnl.com
child-src 'self' https://www.coinbase.com https://fast.wistia.net https://*.online-metrix.net https://*.wpstn.com https://netverify.com https://platform.twitter.com https://www.google.com/recaptcha/ https://cdn.plaid.com/link/ https://*.doubleclick.net/ blob:
connect-src 'self' https://www.coinbase.com https://api.coinbase.com https://api.mixpanel.com https://*.online-metrix.net https://api.cloudinary.com https://ott9.wpstn.com/live https://api.amplitude.com/ https://d3907m2cqladbn.cloudfront.net/ https://exceptions.coinbase.com static.coinbase.com wss://ws.coinbase.com wss://ws.coinbase.com:443 https://www.coinbase.com/api
font-src 'self' https://www.coinbase.com https://assets.coinbase.com/ static.coinbase.com
img-src 'self' data: https://www.coinbase.com https://images.coinbase.com https://d3907m2cqladbn.cloudfront.net/ https://static-assets.coinbase.com/ https://dynamic-assets.coinbase.com https://exceptions.coinbase.com https://coinbase-uploads.s3.amazonaws.com https://s3.amazonaws.com/app-public/ https://maps.gstatic.com https://ssl.google-analytics.com https://www.google.com https://maps.googleapis.com https://csi.gstatic.com https://www.google-analytics.com https://res.cloudinary.com https://secure.gravatar.com https://i2.wp.com https://*.online-metrix.net https://assets.coinbase.com/ https://hexagon-analytics.com https://api.mixpanel.com https://cb-brand.s3.amazonaws.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net/r/collect blob: static.coinbase.com
object-src 'self' data: blob: https://www.coinbase.com https://cdn.siftscience.com https://*.online-metrix.net https://www.gstatic.com https://www.google.com/recaptcha/api/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.coinbase.com https://fast.wistia.com/assets/external/e-v1.js https://cdn.siftscience.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://*.online-metrix.net https://code.jquery.com https://chart.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://netverify.com https://ajax.cloudflare.com https://cdn.plaid.com/link/v2/stable/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtm.js https://www.googleadservices.com https://googleads.g.doubleclick.net https://assets.coinbase.com/ static.coinbase.com
style-src 'self' 'unsafe-inline' https://www.coinbase.com https://assets.coinbase.com/ static.coinbase.com
"script-src 'self' www.google-analytics.com www.googletagmanager.com maps.googleapis.com www.youtube.com www.vimeo.com 'unsafe-inline' 'unsafe-eval'
"frame-ancestors 'self' *.yandex.net *.yandex.tld metrika.yandex.ru mc.yandex.ru http://webvisor.com ratingruneta.ru www.ratingruneta.ru https://ru.investing.com"
script-src 'self' 'unsafe-eval' az416426.vo.msecnd.net *.queue-it.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com unpkg.com use.fontawesome.com
img-src 'self' data: prca01cdndata.blob.core.windows.net https://images-mi.camis.com
font-src 'self' data: fonts.gstatic.com unpkg.com use.fontawesome.com
connect-src 'self' dc.services.visualstudio.com/v2/track fonts.googleapis.com unpkg.com use.fontawesome.com fonts.gstatic.com az416426.vo.msecnd.net prca01cdndata.blob.core.windows.net https://images-mi.camis.com"
"default-src 'self' https: blob: data: *.www.skyminds.net
script-src 'self' https: data: https://stats.wp.com https://*.amazon-adsystem.com https://*.assoc-amazon.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https: data: https://fonts.googleapis.com https://*.assoc-amazon.com 'unsafe-inline'
font-src 'self' https: data: * https://fonts.googleapis.com
"default-src https: 'unsafe-inline' data: 'unsafe-eval'"
"script-src 'self' * 'unsafe-inline' 'unsafe-eval'
font-src 'self' data: fonts.gstatic.com *.mapy.cz smartsupp-widget-161959.c.cdn77.org localhost:8888
connect-src 'self' analytics.monkeytracker.cz localhost:8888 *.google.com *.googleapis.com www.google-analytics.com *.headerfooter.charte-electronique-groupe.fr *.lmcg2.com *.smartsupp.com wss://s12.smartsupp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.googleadservices.com *.mapy.cz localhost:8888 *.headerfooter.charte-electronique-groupe.fr *.lmcg2.com *.smartsuppchat.com smartsupp-widget-161959.c.cdn77.org c.imedia.cz
frame-src 'self' www.youtube.com *.iplatba.cz *.smartsupp.com localhost:8888
child-src 'self' www.youtube.com *.iplatba.cz *.smartsupp.com localhost:8888
img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com *.mapy.cz analytics.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie *.placeholder.com localhost:8888 localhost *.headerfooter.charte-electronique-groupe.fr *.lmcg2.com smartsupp-files-161959.c.cdn77.org c.imedia.cz
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.mapy.cz localhost:8888 *.headerfooter.charte-electronique-groupe.fr *.lmcg2.com smartsupp-widget-161959.c.cdn77.org c.imedia.cz
"script-src *.rmunify.com https://rmunify.com www.google-analytics.com  'unsafe-inline' 'unsafe-eval'"
"default-src 'self' *.edenred.be *.creaxial.be *.outspot.be *.promolife.be *.youtube.com *.emolytics.com *.zendesk.com *.zdassets.com *.getsmily.com *.msecnd.net *.edenred.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.getsmily.com *.emolytics.com *.zendesk.com *.zdassets.com *.google.com www.googletagmanager.com *.google-analytics.com *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com *.cdn.telerik.com *.msecnd.net *.edenred.be *.edenred.com
object-src 'self' *.google.com www.googletagmanager.com *.getsmily.com *.emolytics.com *.zendesk.com *.zdassets.com *.google-analytics.com *.edenred.com
style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.edenred.net *.edenred.com
frame-src 'self' *.edenred.be *.zendesk.com *.zdassets.com *.gstatic.com *.google.com *.creaxial.be *.outspot.be *.netdna-ssl.com *.promolife.be *.youtube.com *.edenred.net *.edenred.com
font-src 'self' data: *.googleapis.com *.gstatic.com
connect-src 'self' *.emolytics.com *.getsmily.com *.zendesk.com *.zdassets.com *.promolife.be *.youtube.com *.visualstudio.com *.edenred.com
base-uri 'self' *.edenred.be *.creaxial.be *.outspot.be *.promolife.be *.youtube.com *.getsmily.com *.zendesk.com *.zdassets.com *.emolytics.com *.edenred.com
child-src 'self' *.edenred.be *.gstatic.com *.google.com *.creaxial.be *.outspot.be *.netdna-ssl.com *.promolife.be *.youtube.com *.edenred.net *.edenred.com
"default-src 'self' *.playavto.ru data: 'unsafe-inline' https://www.youtube.com https://yandex.ru https://mc.yandex.ru https://yastatic.net https://*.vk.com https://vk.com https://*.livetex.ru https://*.mango-office.ru https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.doubleclick.net https://*.google.com https://*.google.ru https://api-maps.yandex.ru https://*.cdek.ru https://playavto.ru https://*.vchecks.me https://*.yandex.net https://dadata.ru https://*.mango-office.ru https://sprymedia.co.uk https://*.flamp.ru https://*.facebook.net https://*.facebook.com https://playavto.ru http://playavto.ru 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com *.nr-data.net *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com vimeo.com *.vimeo.com *.vimeocdn.com *.addtoany.com addtocalendar.com *.amazonaws.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://stats.g.doubleclick.net https://static.hotjar.com https://www.googleadservices.com https://ws.sharethis.com https://googleads.g.doubleclick.net https://script.hotjar.com https://t.sharethis.com http://maps.google.com https://maps.google.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://stackpath.bootstrapcdn.com  http://stats.g.doubleclick.net http://static.hotjar.com http://www.googletagmanager.com http://www.googleadservices.com http://ajax.aspnetcdn.com https://ajax.aspnetcdn.com https://apis.google.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ws.sharethis.com https://use.fontawesome.com/
font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com data:
img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://l.sharethis.com https://www.google.com https://dclottery.com http://www.google.com https://www.google.com https://maps.gstatic.com https://maps.google.com data:
frame-src 'self' https://www.facebook.com https://bid.g.doubleclick.net https://vars.hotjar.com https://ws.sharethis.com https://www.youtube.com https://t.sharethis.com https://content.googleapis.com
connect-src 'self' https://www.google-analytics.com https://c.sharethis.mgr.consensu.org https://l.sharethis.com https://w.sharethis.com https://in.hotjar.com
script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://fonts.googleapis.com https://www.proworkflow.com
font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://www.proworkflow.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://example.com https://*.ggpht.com *.google-analytics.com *.googleapis.com *.gstatic.com http://*.wolterskluwer.pl https://*.wolterskluwer.pl http://*.lex.pl https://*.lex.pl http://*.profinfo.pl https://*.profinfo.pl *.getsentry.com http://*.cloudapp.net http://*.cloudapp.net:* https://player.vimeo.com *.newrelic.com *.nr-data.net http://eur-lex.europa.eu http://cdn.wolterskluwer.io https://www.wolterskluwer.io https://www.googletagmanager.com tagmanager.google.com https://*.appspot.com"
"frame-ancestors http://www.vistaprint.ch https://www.vistaprint.ch http://vistaprint.ch https://vistaprint.ch
script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.polyfill.io d3js.org connect.facebook.net log.pinterest.com platform.twitter.com assets.pinterest.com cdn.syndication.twimg.com cdnjs.cloudflare.com code.jquery.com ssl.google-analytics.com s.swiftypecdn.com use.fontawesome.com cdnjs.cloudflare.com syndication.twitter.com www.gstatic.com www.google.com www.google-analytics.com ajax.googleapis.com
font-src 'self' fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com use.fontawesome.com
connect-src 'self' search-api.swiftype.com api.sbif.cl s.swiftypecdn.com
img-src 'self' data: ton.twimg.com platform.twitter.com syndication.twitter.com stats.g.doubleclick.net www.google-analytics.com pbs.twimg.com ssl.google-analytics.com cc.swiftype.com
style-src 'self' 'unsafe-inline' ton.twimg.com platform.twitter.com cdnjs.cloudflare.com fonts.googleapis.com maxcdn.bootstrapcdn.com use.fontawesome.com s.swiftypecdn.com
frame-src 'self' www.facebook.com staticxx.facebook.com syndication.twitter.com platform.twitter.com www.google.com www.gstatic.com www.sbif.cl
"media-src 'self' blob: livestream.st-andrews.ac.uk livestream1.st-andrews.ac.uk livestream2.st-andrews.ac.uk livestream-test.st-andrews.ac.uk
"default-src 'self' data: https: 'unsafe-inline' 'unsafe-eval'
frame-src 'self' https://*.soundcloud.com https://*.ampproject.net https://*.ampproject.org https://www.youtube-nocookie.com https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' https://*.bootstrapcdn.com https://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ampproject.org https://*.ampproject.net https://*.googlesyndication.com https://adservice.google.com
"default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'"
"default-src https: data: script-src 'self' wss://127.0.0.1:*/ 'unsafe-inline' 'unsafe-eval'"
img-src 'self' 'unsafe-eval' 'unsafe-inline' data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: s3.amazonaws.com/rp-dev-sites/ s3.amazonaws.com/rparts-sites/ s3.amazonaws.com/rp-part-images/ s3.amazonaws.com/static.revolutionparts.com/ rparts-sites.s3.amazonaws.com cdn.revolutionparts.com d3s44e87wooplq.cloudfront.net dz310nzuyimx0.cloudfront.net dgjfe4w8gdxne.cloudfront.net d354nuoz4t18d4.cloudfront.net *.split.io www.google-analytics.com www.paypalobjects.com www.paypal.com fonts.gstatic.com www.googleadservices.com fonts.googleapis.com googleads.g.doubleclick.net bid.g.doubleclick.net stats.g.doubleclick.net www.google.com www.gstatic.com google.ca
"script-src 'self' 'unsafe-eval' 'unsafe-inline' connect.facebook.net www.googletagmanager.com www.google-analytics.com *.piwikpro.com *.snoobi.com *.snoobi.eu *.addthis.com *.readspeaker.com *.addthisedge.com *.visualwebsiteoptimizer.com *.hotjar.com *.google.com *.gstatic.com
img-src 'self' data: https://scontent.xx.fbcdn.net https://echobot.de https://pbs.twimg.com https://www.google-analytics.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.openstreetmap.org https://*.echobot.de
connect-src 'self' https://auth.iextrading.com https://api.iextrading.com https://api.iextrading.com wss://iextrading.com wss://tops.iextrading.com wss://api.iextrading.com wss://iextrading.com
"default-src 'self' *.transunion.com *.vols7feed.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.doubleclick.net *.company-target.com *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net *.trustev.com *.yahoo.com *.atedra.com *.twitter.com *.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com *.jquery.com cloudfront.net *.googleapis.com *.adnxs.com *.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com *.fastclick.net secure.leadback.advertising.com google-analytics.com *.ads-twitter.com *.openx.net *.zencdn.net googleadservices.com gstatic.com bidswitch.net *.media6degrees.com googletagmanager.com *.siteintercept.qualtrics.com *.qualtrics.com
script-src 'self' http://* https://* 'unsafe-inline' 'unsafe-eval'
style-src  'self' 'unsafe-inline' 'unsafe-eval' http://www.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://wordpress.org/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://djtflbt20bdde.cloudfront.net https://encircleapp.bamboohr.com
font-src 'self' https://*.gstatic.com https://themes.googleusercontent.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com https://api.tumblr.com https://*.stripe.com https://*.googleapis.com https://*.gstatic.com https://d33v4339jhl8k0.cloudfront.net https://djtflbt20bdde.cloudfront.net https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://js.hs-scripts.com https://js.hscollectedforms.net js.hs-analytics.net https://encircleapp.bamboohr.com
img-src 'self' data: blob: https://quikasyst.s3.amazonaws.com https://encircle.s3.amazonaws.com https://*.blob.core.windows.net https://*.ytimg.com https://img.youtube.com https://i.vimeocdn.com *.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.ca https://*.gstatic.com https://tor01.objectstorage.softlayer.net https://*.ggpht.com https://stats.g.doubleclick.net track.hubspot.com cdn2.hubspot.net djtflbt20bdde.cloudfront.net d33v4339jhl8k0.cloudfront.net https://resources.bamboohr.com/
object-src 'self' https://tor01.objectstorage.softlayer.net https://*.blob.core.windows.net https://d33v4339jhl8k0.cloudfront.net https://djtflbt20bdde.cloudfront.net
frame-src 'self' https://docs.google.com https://*.officeapps.live.com https://player.vimeo.com https://www.youtube.com https://js.stripe.com https://d33v4339jhl8k0.cloudfront.net https://djtflbt20bdde.cloudfront.net market://* https://forms.hsforms.com
connect-src 'self' wss://ws.encircleapp.com https://ws.encircleapp.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.googleapis.com https://api.stripe.com https://*.blob.core.windows.net https://encircle.helpscoutdocs.com https://forms.hubspot.com https://encircleapp.bamboohr.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com"
"default-src 'self' data: blob: wss://zupago.pe/ https://zupago.pe/ https://zpush.zupago.pe/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.com.ng/ https://*.zupago.pe https://*.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://netcomfort.org/ https://run.pstmn.io/ https://*.zupago.pe/ https://zpush.zupago.pe/ https://www.google.com/ https://www.google.com.ng/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com https://www.googletagmanager.com/ https://zupago.pe https://translate.google.co https://*.zupago.pe https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://www.youtube.com https://connect.facebook.net
style-src 'self' data: 'unsafe-inline' https://www.google.com/ https://*.googleapis.com https://*.zupago.pe https://fonts.googleapis.com https://www.youtube.com
img-src 'self' data: https://www.google.com/ https://www.facebook.com/ https://www.google.com.ng/ https://netcomfort.org https://www.googletagmanager.com https://zupago.pe https://*.googleapis.com/ https://*.google.co.uk/ https://*.doubleclick.net https://translate.googleapis.com https://*.google.co https://translate.google.com https://*.zupago.pe https://*.google-analytics.com https://www.youtube.com https://s-static.ak.facebook.com https://*.gstatic.com
font-src 'self' data: https://*.zupago.pe https://themes.googleusercontent.com https://fonts.gstatic.com https://*.gstatic.com https://www.youtube.com
connect-src 'self' wss://*.zupago.pe https://connect.facebook.net/ https://ssl.google-analytics.com/ https://www.google.com.ng https://www.gstatic.com/ https://www.google.com https://fonts.gstatic.com/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ wss://zupago.pe/ https://*.zupago.pe/ https://zupago.pe/ https://stats.g.doubleclick.net/ https://www.google-analytics.com
media-src 'self' https://youtube.com https://*.zupago.pe https://zupago.pe
child-src https://www.google.com/ https://zupago.pe/ https://bid.g.doubleclick.net/ https://*.zupago.pe https://www.facebook.com https://*.gstatic.com https://s-static.ak.facebook.com https://www.youtube.com
worker-src https://zupago.pe/ https://bid.g.doubleclick.net/ https://*.zupago.pe https://www.facebook.com https://*.gstatic.com https://s-static.ak.facebook.com https://www.youtube.com"
"default-src https: data: kolps: 'unsafe-inline' 'unsafe-eval'
frame-ancestors *.webassessor.com https://webassessor.com https://www.webassessor.com https://pay.webassessor.com https://admin.webassessor.com *.onlineproctoring.com https://www.kryteriononline.com https://kryteriononline.com"
"default-src 'self' https://www.norskpensjon.no https://norskpensjon.no https://meltwaternews.com https://fonts.googleapis.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com
style-src 'self' 'unsafe-inline' https://www.norskpensjon.no https://norskpensjon.no https://fonts.googleapis.com
font-src 'self' https://www.norskpensjon.no https://norskpensjon.no https://fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.norskpensjon.no https://norskpensjon.no https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://meltwaternews.com
"frame-ancestors 'self' https://jobcloud.ch https://*.jobcloud.ch https://jobs.ch https://*.jobs.ch https://jobup.ch https://*.jobup.ch https://ingjobs.ch https://ictcareer.ch https://jobs4sales.ch https://financejobs.ch https://medtalents.ch https://jobwinner.ch https://alpha.ch https://topjobs.ch https://*.jobscout24.ch https://impieghi.ch https://*.impieghi.ch https://*.stellenmarkt.ch https://*.facebook.com"
script-src https: data: 'unsafe-eval' 'unsafe-inline'
"default-src 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com https://ajax.googleapis.com http://* https://* http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com
connect-src * 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net wss://* data: http://www.google-analytics.com https://www.google-analytics.com
img-src data: 'self' http://* https://* http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.google-analytics.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com
font-src 'self' data: http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.google-analytics.com https://www.google-analytics.com
frame-src 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.nordtouch.com http://www.nordtouch.fi data: http://www.google-analytics.com https://www.google-analytics.com
"font-src 'self' data: https://images.wineselectors.com.au https://use.typekit.net https://i.icomoon.io https://fonts.gstatic.com https://cdn.curator.io
img-src 'self' data: https://images.wineselectors.com.au https://www.wineselectors.com.au https://p.typekit.net https://www.google-analytics.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://stats.g.doubleclick.net https://dc.yieldify.com https://dwmvwp56lzq5t.cloudfront.net https://scontent.cdninstagram.com https://syndication.twitter.com https://pbs.twimg.com https://platform.twitter.com https://bat.bing.com https://ad.doubleclick.net https://go.flx1.com https://secure.adnxs.com https://cookiea1.veinteractive.com https://ib.adnxs.com https://scontent.xx.fbcdn.net https://graph.facebook.com https://scontent-otp1-1.cdninstagram.com https://hey.hellobar.com http://cookiea1.veinteractive.com https://dev.visualwebsiteoptimizer.com https://ssl.gstatic.com https://www.gstatic.com https://bacon.section.io https://cdsaus2.veinteractive.com https://useruploads.visualwebsiteoptimizer.com https://s3.amazonaws.com https://cm.g.doubleclick.net https://veads.veinteractive.com https://insight.adsrvr.org https://sync.adap.tv https://assets.yieldify.com https://ads.yahoo.com https://pixel.advertising.com https://curatorio.s3.amazonaws.com https://cdn.curator.io https://x.bidswitch.net https://adservice.google.com https://d2nq7dn4e4z508.cloudfront.net https://www.googletagmanager.com https://b.sli-spark.com https://assets.resultspage.com https://wineselectors.resultspage.com https://secure.livechatinc.com https://match.adsrvr.org https://pixel.rubiconproject.com https://dsum-sec.casalemedia.com
style-src 'self' 'unsafe-inline' https://images.wineselectors.com.au https://fast.fonts.net https://fonts.googleapis.com https://dwmvwp56lzq5t.cloudfront.net https://cdn.curator.io https://platform.twitter.com https://tagmanager.google.com https://www.gstatic.com https://wineselectors.resultspage.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://images.wineselectors.com.au https://js-agent.newrelic.com https://bam.nr-data.net https://www.googletagmanager.com https://script.hotjar.com https://static.hotjar.com https://t.cfjump.com https://t.dgm-au.com https://www.wufoo.eu https://configaus2.veinteractive.com https://bat.bing.com https://script.crazyegg.com https://use.typekit.net https://www.google-analytics.com https://connect.facebook.net https://my.hellobar.com https://pixel.roymorgan.com https://app.yieldify.com https://maps.googleapis.com https://d33wq5gej88ld6.cloudfront.net https://www.google.com https://www.gstatic.com https://dcc4iyjchzom0.cloudfront.net https://platform.instagram.com https://platform.twitter.com https://cdn.curator.io https://cdn.syndication.twimg.com https://c.vepxl1.net https://js.adsrvr.org https://c.flx1.com https://ajax.googleapis.com https://go.flx1.com https://dev.visualwebsiteoptimizer.com https://tagmanager.google.com https://d1l6p2sc9645hc.cloudfront.net https://s3.amazonaws.com https://td.yieldify.com https://radar.cedexis.com https://data2.gosquared.com https://data.gosquared.com https://track.omguk.com https://s.adroll.com https://d.adroll.com https://ib.adnxs.com https://www.wufoo.com https://secure.wufoo.com  https://apps.rokt.com https://roktcdn1.akamaized.net https://assets.resultspage.com https://wineselectors.resultspage.com https://wineselectors.resultsdemo.com https://b.sli-spark.com https://cdn.livechatinc.com https://secure.livechatinc.com https://accounts.livechatinc.com
default-src 'self' https://images.wineselectors.com.au https://configaus2.veinteractive.com https://vars.hotjar.com https://www.google.com https://www.facebook.com https://roktcdn1.akamaized.net
connect-src 'self' https://images.wineselectors.com.au wss://ws3.hotjar.com https://insights.hotjar.com https://bam.nr-data.net https://performance.typekit.net https://geo.yieldify.com https://api.curator.io https://appsapihk.veinteractive.com https://cookiea1.veinteractive.com https://c.flx1.com wss://ws1.hotjar.com https://cdsaus2.veinteractive.com https://bacon.section.io https://in.hotjar.com https://apps.rokt.com https://stats.g.doubleclick.net https://www.facebook.com
child-src 'self' https://www.youtube.com https://www.google.com https://vars.hotjar.com https://vars.hotjar.com https://app.yieldify.com https://www.qzzr.com https://syndication.twitter.com https://www.instagram.com https://wineevents.wufoo.eu https://wineevents.wufoo.eu https://configaus2.veinteractive.com https://t.cfjump.com https://t.dgm-au.com https://insight.adsrvr.org https://td.yieldify.com https://www.facebook.com https://match.adsrvr.org https://eventbrite.com.au https://www.eventbrite.com.au https://connect.facebook.net https://player.vimeo.com https://youtu.be/ https://apps.rokt.com https://www.google.com.au https://secure.livechatinc.com
child-src 'self' vimeo.com player.vimeo.com www.google.com
connect-src wss://* 'self' *.intercom.io *.intercomcdn.com s3.amazonaws.com js.leadin.com www.linkedin.com secure.adnxs.com js.hs-scripts.com
img-src 'self' data: s3.amazonaws.com www.gravatar.com js.intercomcdn.com static.intercomassets.com www.googleadservices.com forms.hubspot.com track.hubspot.com googleads.g.doubleclick.net www.google.com www.google-analytics.com
script-src 'self' www.google-analytics.com www.googleadservices.com snap.licdn.com dc.ads.linkedin.com secure.adnxs.com widget.intercom.io js.intercomcdn.com js.hs-scripts.com js.leadin.com js.hs-analytics.net www.linkedin.com
img-src 'self' data: a248.e.akamai.net tpgpost.d3.sc.omtrdc.net media.swordfishdc.com api.innomdc.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' a248.e.akamai.net media.swordfishdc.com d3u9kj2t4eazrw.cloudfront.net s3-eu-west-1.amazonaws.com s3.amazonaws.com api.innomdc.com w.usabilla.com
"script-src 'self' data: *.mxpnl.com api.mixpanel.com mixpanel.com ajax.googleapis.com bam.nr-data.net js-agent.newrelic.com www.google.com https://widget.intercom.io https://js.intercomcdn.com https://messaging-service.services.cloud.signiant.com https://updates.signiant.com 'unsafe-eval' 'unsafe-inline' http://*.pubnub.com https://*.pubnub.com
img-src 'self' data: cdn.mxpnl.com *.cloudfront.net https://js.intercomcdn.com https://www.google.com https://updates.signiant.com http://developer.mediashuttle.com https://developer.mediashuttle.com
style-src 'self' fonts.googleapis.com 'unsafe-inline' 'unsafe-eval' https://updates.signiant.com
connect-src 'self' mixpanel.com api.mixpanel.com https://*.intercom.io wss://*.intercom.io https://updates.signiant.com https://messaging-service.services.cloud.signiant.com https://messaging-config-service.services.cloud.signiant.com http://*.pubnub.com https://*.pubnub.com http://*.pubnub.ably.io https://*.pubnub.ably.io http://signiant-pubnub.ably.io https://signiant-pubnub.ably.io http://developer.mediashuttle.com https://developer.mediashuttle.com http://zonza-prd-prx01.zonza.prv:5001/ https://*.nr-data.net
font-src 'self' data: fonts.gstatic.com *.mxpnl.com *.intercomcdn.com"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.bootstrapcdn.com *.nuffic.nl *.clickdimensions.com *.maphub.net *.force.com *.thehagueuniversity.com *.dehaagsehogeschool.nl *.dehaagsehogeschool.nl.local *.dehaagsehogeschool.nl.dev *.youtube.com *.ytimg.com *.fbcdn.net *.cdninstagram.com *.instagram.com *.facebook.net *.facebook.com *.twitter.com *.linkedin.com *.hotjar.com *.doubleclick.net *.googleadservices.com *.google.com *.cookiebot.com *.jsdelivr.net *.cloudflare.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.youtube-nocookie.com
"default-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'
"frame-ancestors 'self' https://myleanlaw.co https://localhost https://localhost:8080"
"default-src 'self' 'unsafe-inline' *.googleapis.com *.google-analytics.com *.pingdom.net *.gstatic.com *.facebook.net *.facebook.com *.facebook.co.uk
img-src 'self' blob: data: https: data: http:
font-src 'self' data: https: fonts.googleapis.com/css fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' * cdn.polyfill.io
style-src 'self' 'unsafe-inline' * blob: cdn.rawgit.com/milligram/milligram/master/dist/milligram.min.css fonts.googleapis.com/css"
"content-security-policy \"default-src http: data: 'unsafe-inline' 'unsafe-eval'"
script-src 'self' www.google-analytics.com ajax.googleapis.com 'unsafe-eval' 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com maps.gstatic.com www.google-analytics.com wss://www.takeabyte.co.uk:62000 wss://takeabyte.co.uk:62000 wss://www.takeabyte2.co.uk:62000 wss://takeabyte2.co.uk:62000 https://takeabyte.co.uk:62000 https://www.takeabyte.co.uk:62000 https://takeabyte2.co.uk:62000 https://www.takeabyte2.co.uk:62000
img-src 'self' data: *.googleapis.com maps.gstatic.com www.google-analytics.com
form-action 'self' https://antville.org https://*.antville.org       https://accounts.google.com https://*.facebook.com
img-src http: https: data: http://*.hotjar.com https://*.hotjar.com
connect-src: http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com
"frame-ancestors 'self' http://quintiles.lookbookhq.com https://quintiles.lookbookhq.com https://lookbook.solutions.iqvia.com http://lookbook.solutions.iqvia.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://public.tableau.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://stats.g.doubleclick.net https://www.googleadservices.com http://stats.g.doubleclick.net http://dev.visualwebsiteoptimizer.com https://mc.yandex.ru http://mc.yandex.ru http://www.googleadservices.com http://www.googleadservices.com https://dev.visualwebsiteoptimizer.com http://fonts.googleapis.com https://ssl.google-analytics.com http://app.vwo.com https://app.vwo.com https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com https://www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://staticxx.facebook.com https://www.facebook.com https://www.gstatic.com https://ssl.google-analytics.com https://connect.facebook.net https://static.criteo.net https://translate.googleapis.com https://translate.google.com https://apis.google.com https://maps.googleapis.com https://www.google.com https://www.freecurrencyrates.com https://freecurrencyrates.com https://verify.authorize.net https://eval.bizrate.com https://ajax.aspnetcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com
"default-src 'self' http: https: ws: wss: *.vimeo.com *.google-analytics.com *.membogo.com js-agent.newrelic.com  *.zopim.com https://bam.nr-data.net fonts.googleapis.com *.hpjcc.com  *.googleapis.com fonts.gstatic.com *.addthis.com *.addthisedge.com *.nr-data.net 'unsafe-eval' 'self' 'unsafe-inline' data:
"default-src 'self' https://*.officehours.io https://*.officehours.dev https://officehours.dev https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.cloudinary.com https://*.youtube.com https://*.stripe.com https://*.twiliocdn.com https://*.twilio.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.getsentry.com https://*.intercomcdn.com https://static.intercomassets.com https://graph.facebook.com https://*.fbcdn.net https://pbs.twimg.com https://media.licdn.com https://s.ytimg.com https://netdna.bootstrapcdn.com
script-src 'self' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com https://*.officehours.io https://*.officehours.dev https://officehours.dev https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.cloudinary.com https://*.youtube.com https://*.stripe.com https://*.twiliocdn.com https://*.twilio.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.getsentry.com https://*.intercomcdn.com https://static.intercomassets.com https://graph.facebook.com https://*.fbcdn.net https://pbs.twimg.com https://media.licdn.com https://s.ytimg.com https://netdna.bootstrapcdn.com
connect-src wss://officehours.io 'self' https://*.officehours.io https://*.officehours.dev https://officehours.dev https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.cloudinary.com https://*.youtube.com https://*.stripe.com https://*.twiliocdn.com https://*.twilio.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.getsentry.com https://*.intercomcdn.com https://static.intercomassets.com https://graph.facebook.com https://*.fbcdn.net https://pbs.twimg.com https://media.licdn.com https://s.ytimg.com https://netdna.bootstrapcdn.com
img-src data: 'self' http://www.google-analytics.com https://www.google-analytics.com https://*.officehours.io https://*.officehours.dev https://officehours.dev https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.cloudinary.com https://*.youtube.com https://*.stripe.com https://*.twiliocdn.com https://*.twilio.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.getsentry.com https://*.intercomcdn.com https://static.intercomassets.com https://graph.facebook.com https://*.fbcdn.net https://pbs.twimg.com https://media.licdn.com https://s.ytimg.com https://netdna.bootstrapcdn.com
style-src 'self' 'unsafe-inline' https://*.officehours.io https://*.officehours.dev https://officehours.dev https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.cloudinary.com https://*.youtube.com https://*.stripe.com https://*.twiliocdn.com https://*.twilio.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.getsentry.com https://*.intercomcdn.com https://static.intercomassets.com https://graph.facebook.com https://*.fbcdn.net https://pbs.twimg.com https://media.licdn.com https://s.ytimg.com https://netdna.bootstrapcdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com d2wy8f7a9ursnm.cloudfront.net *.msecnd.net *.atmrum.net"
script-src 'self' *.exigomusic.org/ 'unsafe-inline' 'unsafe-eval'
style-src 'self' *.exigomusic.org/ 'unsafe-inline' https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net cdn.jsdelivr.net api.mail365.ru *.ampproject.org vkontakte.ru *.ok.ru *.google.ru *.google.com.ua *.google.it *.google.es *.google.de *.google.ge *.google.kz *.google.nl *.google.us *.facebook.com ulogin.ru *.facebook.net *.korfiati.ru korfiati.ru *.rambler.ru w.uptolike.com js.hotlog.ru *.pinterest.com *.mail.ru *.google.com *.yandex.ru yandex.ru *.yandex.net vk.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.googlesyndication.com *.googletagservices.com *.doubleclick.net api-maps.yandex.ru
frame-src 'self' yastatic.net *.korfiati.ru korfiati.ru *.ampproject.net ulogin.ru *.facebook.com vk.com login.vk.com vk.com akismet.com assets.pinterest.com st.yandexadexchange.net yandexadexchange.net *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st w.uptolike.com *.googleapis.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com *.google.com
connect-src 'self' onesignal.com *.korfiati.ru korfiati.ru *.ampproject.net api.mail365.ru *.google-analytics.com top-fwz1.mail.ru w.uptolike.com *.yandex.ru *.facebook.com *.google.ru *.google.com *.googleapis.com *.doubleclick.net *.googlesyndication.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net *.korfiati.ru korfiati.ru api.mail365.ru *.googleapis.com *.yandex.ru *.googleapis.com *.yandex.ru data:
font-src 'self' *.korfiati.ru korfiati.ru w.uptolike.com *.googleapis.com fonts.w.tools *.yandex.ru *.googleapis.com *.yandex.ru data:
img-src 'self' yastatic.net *.korfiati.ru korfiati.ru my.mail365.ru ulogin.ru *.facebook.com *.yandex.net *.yandex.ru yandex.ru yandex.st counter.yadro.ru w.uptolike.com *.gravatar.com *.googlesyndication.com *.doubleclick.net *.googleapis.com *.google-analytics.com *.hotlog.ru vk.com *.google.ru *.google.com.ua *.google.it *.google.es *.google.de *.google.ge *.google.kz *.google.nl *.google.us *.yandex.net *.yandex.ru *.googlesyndication.com *.google.com counter.rambler.ru *.google.com *.google.fr *.google.es *.google.lv *.google.co.za *.google.rs *.google.dk *.google.se *.google.pl *.google.de *.google.tm *.mail.ru *.google.by *.i.ua *.google.co.il *.google.com.pe *.google.it *.google.co.uk *.doubleclick.net *.googleapis.com log.pinterest.com mc.webvisor.org data:
"default-src 'self' *.google-analytics.com *.assmann.com uberall.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://komsa.freischalt-portal.de *.mobile-order.de  http://media.mobile-order.de *.komsa.net komsa.com *.assmann.com *.googletagmanager.com *.google-analytics.com https://tagmanager.google.com *.uberall.com uberall.com
style-src 'self' https://komsa.freischalt-portal.de *.komsa.net komsa.com 'unsafe-inline' *.gstatic.com fonts.googleapis.com *.assmann.com https://tagmanager.google.com
img-src 'self' data: *.karlo.de karlo.de *.komsa.com komsa.com *.smallbug.de *.mobile-order.de http://media.mobile-order.de https://komsa.freischalt-portal.de *.google-analytics.com *.googletagmanager.com https://stats.g.doubleclick.net *.komsa.net http://karlo.de http://www.karlo.de http://media.komsa.com easyfilius.de http://www.easyfilius.de *.w-support.com *.assmann.com *.uberall.com https://s3.eu-central-1.amazonaws.com/uberall-userpics-prod/ http://s.mmgo.io https://tagmanager.google.com *.gstatic.com
frame-src 'self' *.piceasoft.com https://shop.w-support.com *.komsa.net *.youtube.com *.youtube-nocookie.com *.google.com *.googletagmanager.com *.mobile-order.de http://media.mobile-order.de
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' greater.com.au *.greater.com.au *.addthis.com *.addthisedge.com *.cloudfront.net *.doubleclick.net *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.liveperson.net *.lpsnmedia.net *.ratecity.com.au *.stackla.com *.widgetworks.com.au *.youtube.com adriano-au.avanser.com adservice.google.com adservice.google.com.au cdn.optimizely.com connect.facebook.net d.turn.com s.ytimg.com s3.amazonaws.com sc-static.net secure.adnxs.com
"default-src http: data: 'self' 'unsafe-inline' 'unsafe-eval' *.scene7.com *.mobify.com *.deluxe.com *.sparkred.com *.dfsonline.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.disquscdn.com https://*.disqus.com https://ssl.google-analytics.com https://static.addtoany.com https://www.youtube.com https://s.ytimg.com https://www.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://platform.twitter.com https://*.newrelic.com https://*.nr-data.net
style-src 'self' 'unsafe-inline' https://*.disquscdn.com https://facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://fonts.googleapis.com
child-src self disqus.com www.youtube.com static.addtoany.com staticxx.facebook.com www.facebook.com platform.twitter.com syndication.twitter.com
img-src 'self' data: https://cdn.viglink.com https://www.facebook.com https://www.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net https://syndication.twitter.com https://*.disqus.com https://*.disquscdn.com
media-src 'self' 'unsafe-inline' http://traffic.libsyn.com http://hwcdn.libsyn.com http://*.libsyn.com https://*.libsyn.com
connect-src 'self' https://links.services.disqus.com https://www.google-analytics.com https://stats.g.doubleclick.net
font-src https: 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *
"frame-ancestors 'self' http://alienvault.lookbookhq.com/ https://alienvault.lookbookhq.com/ http://learn.alienvault.com https://learn.alienvault.com http://walkme.com https://walkme.com http://www.alienvault-demo-usm-anywhere.com https://www.alienvault-demo-usm-anywhere.com always
img-src 'self' https://paragonie.com https://maxcdn.bootstrapcdn.com https://stats.g.doubleclick.net https://www.google-analytics.com data:
script-src 'self' https://cdn.mathjax.org https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://code.jquery.com https://ajax.googleapis.com https://www.google-analytics.com https://paragonie.com:443 paragonie.com:443 'sha384-dxxwatrup7cvaqsjslq8y30xnlv+kbg0q/esjcstpj7besqctr1kyuzuu8ntp0qd' 'nonce-m0goinm6g/3g9zaiegjpgf8n' 'nonce-u1p0vvfsykfd4bi95mmjkzwq' 'nonce-0zcwa0faajnr/fmcnnf/thjc' 'nonce-ukigenpztwkygyuruilpijor' 'nonce-apu0sslqzrj3nib4vbiml1ih' 'nonce-p4fznxsr3oh+hjigabvee+vm' 'nonce-c15ipn51yalknozrtrnbjnhp' 'unsafe-eval' data:
style-src 'self' https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://fonts.googleapis.com 'unsafe-inline'
script-src 'strict-dynamic' 'nonce-nzzmzjbhndytzti0mi00odewlwfjm2utmdkxmmi5nmeymtq3' 'unsafe-inline' https: http:
"default-src 'self' data: gap: http://code.jquery.com https://fonts.gstatic.com https://doc33xfmr9x9n.cloudfront.net https://www.facebook.com https://stats.g.doubleclick.net http://penguin.co.in https://connect.facebook.net https://cdn.penguin.co.in https://www.google-analytics.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' http://code.jquery.com https://fonts.gstatic.com https://fonts.googleapis.com https://doc33xfmr9x9n.cloudfront.net https://www.facebook.com https://stats.g.doubleclick.net http://penguin.co.in https://connect.facebook.net https://cdn.penguin.co.in https://www.google-analytics.com 'unsafe-inline'
img-src 'self' data: http://code.jquery.com https://fonts.gstatic.com https://doc33xfmr9x9n.cloudfront.net https://www.facebook.com https://stats.g.doubleclick.net http://penguin.co.in https://connect.facebook.net https://cdn.penguin.co.in https://www.google-analytics.com http://placehold.it content:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com/ https://www.googletagmanager.com/ http://stage.directed.com http://www.directed.com https://ajax.googleapis.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://fonts.gstatic.com https://static.doubleclick.net https://s.youtube.com https://r11---sn-a5m7lnee.googlevideo.com https://www.googleadservices.com https://r14---sn-4g57knez.googlevideo.com https://i.ytimg.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://cdn07.icims.com https://careers-deiholdings.icims.com https://player.vimeo.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://www.w3.org http://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com http://www.facebook.com http://staticxx.facebook.com https://stats.g.doubleclick.net https://img.youtube.com
style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/ http://stage.directed.com http://www.directed.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://fonts.gstatic.com https://static.doubleclick.net https://s.youtube.com https://r11---sn-a5m7lnee.googlevideo.com https://www.googleadservices.com https://r14---sn-4g57knez.googlevideo.com https://i.ytimg.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://cdn07.icims.com https://careers-deiholdings.icims.com https://player.vimeo.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://www.w3.org http://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com http://www.facebook.com http://staticxx.facebook.com https://stats.g.doubleclick.net https://img.youtube.com
img-src 'self' 'unsafe-inline' data: http://stage.directed.com http://www.directed.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://fonts.gstatic.com https://static.doubleclick.net https://s.youtube.com https://r11---sn-a5m7lnee.googlevideo.com https://www.googleadservices.com https://r14---sn-4g57knez.googlevideo.com https://i.ytimg.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://cdn07.icims.com https://careers-deiholdings.icims.com https://player.vimeo.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://www.w3.org http://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com http://www.facebook.com http://staticxx.facebook.com https://stats.g.doubleclick.net https://img.youtube.com
font-src 'self' 'unsafe-inline' http://stage.directed.com http://www.directed.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://fonts.gstatic.com https://static.doubleclick.net https://s.youtube.com https://r11---sn-a5m7lnee.googlevideo.com https://www.googleadservices.com https://r14---sn-4g57knez.googlevideo.com https://i.ytimg.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://cdn07.icims.com https://careers-deiholdings.icims.com https://player.vimeo.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://www.w3.org http://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com http://www.facebook.com http://staticxx.facebook.com https://stats.g.doubleclick.net https://img.youtube.com
frame-src 'self' 'unsafe-inline' *.doubleclick.net http://stage.directed.com http://www.directed.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://accounts.google.com/ https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://fonts.gstatic.com https://static.doubleclick.net https://s.youtube.com https://r11---sn-a5m7lnee.googlevideo.com https://www.googleadservices.com https://r14---sn-4g57knez.googlevideo.com https://i.ytimg.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://cdn07.icims.com https://careers-deiholdings.icims.com https://player.vimeo.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://www.w3.org http://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com http://www.facebook.com http://staticxx.facebook.com https://stats.g.doubleclick.net https://img.youtube.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google.com data: https://www.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wfolio.ru https://*.wfolio.ru https://*.fontawesome.com https://vk.com https://*.facebook.net https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.yandex.ru https://*.mail.ru https://*.elev.io
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.tiles.mapbox.com/ https://code.jquery.com/ https://unpkg.com/ https://fonts.gstatic.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/ https://ajax.googleapis.com/ www.google.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com www.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.tiles.mapbox.com/ https://code.jquery.com/ https://unpkg.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/ https://ajax.googleapis.com/ www.google.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com www.gstatic.com
img-src 'self' 'unsafe-inline' https://api.tiles.mapbox.com/ https://unpkg.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ www.google.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net data:
style-src 'self' 'unsafe-eval' 'unsafe-inline' https://unpkg.com/ https://fonts.gstatic.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/
sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-modals allow-orientation-lock allow-pointer-lock allow-presentation allow-popups-to-escape-sandbox allow-top-navigation
script-src 'self' qoo.ly use.fontawesome.com www.austinregionalclinic.com mychart.austinregionalclinic.com *.gstatic.com  'unsafe-inline' 'unsafe-eval' rawgithub.com blob: www.youtube.com *.linkedin.com ajax.aspnetcdn.com cdn.syndication.twimg.com sjs.bizographics.com connect.facebook.net use.typekit.net maxcdn.bootstrapcdn.com arc.mymedicalme.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com platform.twitter.com m.addthisedge.com *.addthis.com hummsystems.appspot.com
style-src 'self' use.fontawesome.com mychart.austinregionalclinic.com 'unsafe-inline' www.youtube.com platform.twitter.com *.addthis.com *.googleapis.com maxcdn.bootstrapcdn.com arc.mymedicalme.com stats.g.doubleclick.net ton.twimg.com blob:
font-src 'self' use.fontawesome.com use.typekit.net maxcdn.bootstrapcdn.com fonts.gstatic.com g.static.com
img-src 'self' qoo.ly stats.g.doubleclick.net data: *.googlecode.com p.typekit.net i.ytimg.com *.gstatic.com www.google.com www.google-analytics.com *.googleapis.com www.facebook.com *.twitter.com *.twimg.com ajax.aspnetcdn.com match.adsrvr.com
frame-src 'self' mychart.austinregionalclinic.com www.youtube.com *.addthis.com *.twitter.com arcwebsecure.com arc.mymedicalme.com www.google.com maps.google.com
connect-src 'self' m.addthis.com stats.g.doubleclick.net hummsystems.appspot.com blob:
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://maps.googleapis.com https://fonts.googleapis.com https://www.gstatic.com/ https://www.google-analytics.com/"
"default-src 'self' https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.gravatar.com https://*.w.org https://*.facebook.net https://*.ak.facebook.com data: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.ventil.hu http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com *.wirecard.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ventil.hu *.wirecard.com *.google.hu *.google-analytics.com *.facebook.net *.youtube.com *.google.com *.googlevideo.com *.gstatic.com *.facebook.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.arukereso.hu
img-src 'self' *.ventil.hu *.google-analytics.com *.google.hu blob: data: *.ventil.hu *.google-analytics.com *.facebook.net *.youtube.com *.google.com *.googlevideo.com *.gstatic.com *.facebook.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.arukereso.hu
style-src 'self' 'unsafe-inline' *.ventil.hu *.facebook.net *.youtube.com *.google.com *.googlevideo.com *.gstatic.com *.facebook.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.arukereso.hu
font-src 'self' data: *.ventil.hu *.facebook.net *.youtube.com *.google.com *.googlevideo.com *.gstatic.com *.facebook.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.arukereso.hu
child-src 'self' *.ventil.hu *.wirecard.com *.facebook.net *.youtube.com *.google.com *.googlevideo.com *.gstatic.com *.facebook.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.arukereso.hu
"default-src 'self' https://online.csb.co.in/forexrates/ http://203.197.151.38/ https://vars.hotjar.com https://staticxx.facebook.com https://play.google.com https://www.microsoft.com https://itunes.apple.com https://www.google.com https://www.billdesk.com https://www.csbnet.co.in https://www.rbi.org.in https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.csbinstaremit.co.in http://www.bcsbi.org.in http://webdev.xerago.com https://selfie.geojit.net https://www.remit2india.com http://www.iepf.gov.in http://ayyappantemplesabs.org https://webdev.xerago.com https://trading.celebrus.in https://popepaulmercyhome.com http://lourdescathedralthrissur.com https://www.guruvayurdevaswom.nic.in https://www.payumoney.com http://india.westernunion.com http://www.instantcashworldwide.com http://www.xpressmoney.com http://www.royex.us https://www.pavarattyshrine.com https://www.rupay.co.in https://www.visa.co.in https://drive.google.com http://www.billdesk.com https://india.westernunion.com http://www.museum.rbi.org.in https://www.instantcashworldwide.com http://www.tnebnet.org http://www.janeycentre.com https://www.google.co.in https://www.tnebnet.org https://onlineinsurance.hdfclife.com https://rbi.org.in http://www.edelweisstokio.in https://www.westernunion.com http://bit.ly https://www.edelweisstokio.in https://www.reliancegeneral.co.in
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://www.google-analytics.com https://www.notifyvisitors.com https://googleads.g.doubleclick.net https://script.hotjar.com https://cse.google.com https://d2933uxo1uhve4.cloudfront.net https://static.hotjar.com https://connect.facebook.net https://www.google.com https://www.googleadservices.com https://www.googleadservices.com https://csb.co.in
img-src 'self' https://webdev.xerago.com http://webdev.xerago.com https://csb.co.in http://csb.co.in  https://clients1.google.com https://page-source.com https://graylog.hotjar.com:12443 https://www.google.co.in https://www.google-analytics.com https://www.googleapis.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.csb.co.in https://csb.co.in
style-src 'self' 'unsafe-inline' https://www.google.com https://www.csb.co.in https://csb.co.in
font-src 'self' 'unsafe-inline' https://static.hotjar.com https://www.csb.co.in https://csb.co.in
frame-src 'self' 'unsafe-inline' *.addthis.com *.doubleclick.net waust.at whos.amung.us
font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com *.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.cloudflare.com code.jquery.com *.addthis.com *.addthisedge.com waust.at whos.amung.us
"default-src 'self' https://rakbank.ae https://rakbankonline.ae https://rakbankdirect.ae https://revamp.rakbank.ae https://4268196.fls.doubleclick.net https://www.google.com https://cse.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.sc.pages06.net https://www.images-home.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://irpages2.equitystory.com https://qas4.equitystory.com https://charts3.equitystory.com https://maps.googleapis.com https://www.googletagmanager.com https://www.sc.pages06.net https://www.googleadservices.com https://www.google-analytics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google.com https://cse.google.com https://clients1.google.com https://www.googleapis.com https://platform.twitter.com https://ajax.googleapis.com https://www.images-home.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co data:
style-src 'self' 'unsafe-inline' https://irpages2.equitystory.com https://charts3.equitystory.com https://fonts.googleapis.com https://www.google.com https://*.vizury.com  https://cdn25.vzeesp.com https://*.lemnisk.co
img-src 'self' https://irpages2.equitystory.com https://qas4.equitystory.com https://charts3.equitystory.com https://www.images-home.com http://www.pages06.net https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.google.ae https://www.google.co.in https://www.google.co.uk https://clients1.google.com https://cse.google.com https://*.gstatic.com https://*.googleapis.com https://googleads.g.doubleclick.net https://www.facebook.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co data:
connect-src 'self' https://www.google.com https://www.google.ae https://www.google.co.in https://www.google.co.uk https://www.google-analytics.com https://stats.g.doubleclick.net https://adservice.google.com https://www.facebook.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co
font-src 'self' https://fonts.gstatic.com http://fonts.googleapis.com https://cdn.joinhoney.com data:
child-src 'self' https://sport360.com https://irpages2.equitystory.com https://qas4.equitystory.com https://charts3.equitystory.com https://4268196.fls.doubleclick.net https://bid.g.doubleclick.net https://www.youtube.com https://connect.facebook.net https://cse.google.com https://www.googletagmanager.com https://platform.twitter.com https://syndication.twitter.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co
form-action 'self' https://rakbankonline.ae https://connect.facebook.net https://syndication.twitter.com https://*.vizury.com https://cdn25.vzeesp.com https://*.lemnisk.co
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://intersection.tw:443 https://*.intersection.tw:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' *.gstatic.com https://lh3.ggpht.com *.rnengage.com *.googleapis.com *.custhelp.com *.rawgit.com *.doubleclick.net *.facebook.net *.facebook.com data: *.teleperformanceusa.com
script-src *.google.com ssl.google-analytics.com ssl.webserviceaward.com *.orebroll.se www.regionorebrolan.se https://js-agent.newrelic.com 'self' 'unsafe-inline' 'unsafe-eval'  data:
img-src *.orebroll.se ssl.google-analytics.com ssl.webserviceaward.com www.regionorebrolan.se 'self' data:
frame-src *.youtube.com app.readspeaker.com  rstts.readspeaker.com media.readspeaker.com www.regionorebrolan.se https://streamio.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://www.google-analytics.com data: https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://www.googletagmanager.com https://api.autopilothq.com https://api.ipstack.com
img-src 'self' data: https://ssl.google-analytics.com https://www.google-analytics.com https://s3-us-west-2.amazonaws.com https://s3.amazonaws.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com
frame-src https://auth-stage.whistic.com https://auth.whistic.com https://www.youtube.com https://www.123contactform.com https://api.autopilothq.com
connect-src  'self' https://auth-stage.whistic.com https://auth.whistic.com https://whistic-uploaded-documents-prod.s3-us-west-2.amazonaws.com https://whistic-uploaded-documents-stage.s3.amazonaws.com https://whistic-uploaded-images-stage.s3.amazonaws.com https://whistic-uploaded-images-prod.s3-us-west-2.amazonaws.com https://api.autopilothq.com https://api.ipstack.com
frame-ancestors https://auth-stage.whistic.com https://auth.whistic.com https://stage.whistic.com https://www.whistic.com 'self'"
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://maps.google.com https://apis.google.com https://www.google-analytics.com https://*.googleapis.com *.gstatic.com
"default-src https: http: blob: data: 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com wss://*.hotjar.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io 'self' https://tkort.fara.no https://admin.api.fara.no https://webshop.api.fara.no
connect-src 'self' https://fonts.gstatic.com https://*.googleapis.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://*.tawk.to https://code.highcharts.com https://*.pusher.com wss://*.pusher.com wss://*.pusherapp.com https://*.bootstrapcdn.com wss://seal.godaddy.com wss://widgets.bitcoin.com wss://*.bitcoin.com
font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.fontawesome.com data:
img-src 'self' https://*.google-analytics.com https://*.icofury.com https://*.ecurrency-hub.com https://icofury.com https://seal.godaddy.com https://widgets.bitcoin.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://*.tawk.to https://code.highcharts.com https://cdn.datatables.net https://*.cloudflare.com https://*.pusher.com wss://*.pusher.com https://threejs.org https://*.jsdelivr.net https://seal.godaddy.com https://widgets.bitcoin.com https://www.google.com https://www.gstatic.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudflare.com https://code.highcharts.com https://cdn.datatables.net https://*.bootstrapcdn.com https://*.fontawesome.com https://seal.godaddy.com https://widgets.bitcoin.com
script-src 'self' cdn.shopifycloud.com 'unsafe-inline' bat.bing.com cdn.aimtell.com cdn.shopify.com cdnjs.cloudflare.com connect.facebook.net d2wy8f7a9ursnm.cloudfront.net js.intercomcdn.com s3.amazonaws.com static.leadpages.net widget.intercom.io www.google-analytics.com 7209406.collect.igodigital.com
style-src 'self' 'unsafe-inline' blob: cdn.shopifycloud.com cdnjs.cloudflare.com
"default-src * data: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' data: https://livingapi.rmguk.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com
font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:
"default-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.meo.de *.meo24.de *.facebook.net *.facebook.com *.nosto.com *.google-analytics.com *.xtube.com *.youtube.com *.googlevideo.com *.vzaar.com *.vimeo.com *.googleapis.com *.pingdom.net *.twitter.com *.gstatic.com"
script-src * blob: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' https://bitrix.info http://ip-api.com amcharts.com https://fonts.googleapis.com/  https://www.youtube.com https://s.ytimg.com top-fwz1.mail.ru play.google.com  googletagmanager.com  mc.yandex.ru  amcharts.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.rutarget.ru www.youtube.com/iframe_api https://s.ytimg.com www.youtube.com top-fwz1.mail.ru code.jquery.com connect.facebook.net www.googletagmanager.com  www.amcharts.com mc.yandex.ru cdnjs.cloudflare.com googletagmanager.com ajax.googleapis.com yastatic.net api-maps.yandex.ru bitrix.info cdn.mxpnl.com www.google-analytics.com
frame-src 'self' www.facebook.com https://www.youtube.com http://webvisor.com https://metrika.yandex.ru api-maps.yandex.ru
img-src 'self' data:  www.facebook.com cdn.rutarget.ru tag.rutarget.ru top-fwz1.mail.ru  vk.com login.vk.com www.google.com www.google.ru www.google.com.ua counter.sberbank.ru stats.g.doubleclick.net https://yandex.ru/ http://www.amcharts.com/ https://www.amcharts.com/ https://www.google-analytics.com google-analytics.com googletagmanager.com vec01.maps.yandex.net amcharts.com vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net api-maps.yandex.ru mc.yandex.ru google-analytics.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com  www.amcharts.com
font-src 'self' 'unsafe-inline' https://fonts.gstatic.com fonts.googleapis.com"
script-src 'self' https://api.ipdata.co/ https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/ https://www.googletagmanager.com/gtag/ https://login.windows.net/ https://login.microsoftonline.com/ https://cdn.datatables.net/ https://widget.spreaker.com/ https://apis.google.com/ 'unsafe-eval'  'unsafe-inline' https://ajax.googleapis.com/ https://connect.facebook.net https://platform.twitter.com/ https://syndication.twitter.com/ https://cdn.syndication.twimg.com
connect-src blob: 'self' https://api.ipdata.co/ https://dc.services.visualstudio.com/v2/track https://our.umbraco.com/webapi/packages/v1  https://tribunalsitestorage.blob.core.windows.net  https://syndication.twitter.com/ https://*.umbraco.org https://our.umbraco.org
img-src blob: 'self' data:  https://pbs.twimg.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ http://i.calameoassets.com/ https://tribunalsitestorage.blob.core.windows.net https://ssl.gstatic.com/ https://www.facebook.com/ https://*.twimg.com/ https://*.twitter.com https://umbraco.tv https://*.umbraco.com https://www.gravatar.com https://dashboard.umbraco.org https://our.umbraco.org
style-src 'self' data: 'unsafe-inline' https://*.twimg.com/ https://cdn.datatables.net https://fonts.googleapis.com http://weloveiconfonts.com/api/ https://platform.twitter.com/
font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com
frame-src https://www.youtube.com/ https://*.google.com/ https://*.spreaker.com/ https://*.facebook.com/ https://*.twitter.com/ https://v.calameo.com/ 'self'"
"default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem:
script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net
img-src 'self' data: blob: https://resource.storebox.com https://www.google-analytics.com https://www.facebook.com
frame-src 'self' https://cardframeapi.prod.tokenizer.storebox.com https://www.storebox.com https://www.google.com https://www.gstatic.com https://player.vimeo.com https://redcap.rn.dk
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://fast.wistia.com https://pi.pardot.com https://translate.google.com http://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://bpasblog.disqus.com
style-src 'self' https://fast.wistia.net https://bpas.com 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com http://translate.google.com
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: derpicdn.net camo.derpicdn.net picarto.tv *.picarto.tv piczel.tv thumbnail.api.livestream.com static-cdn.jtvnw.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:
"script-src 'unsafe-inline' 'unsafe-eval' static.go.co.kr *.naver.net *.googleapis.com *.jquery.com *.kakao.com *.naver.com *.daum.net *.cloudflare.com *.google-analytics.com static.coresco.co.kr *.eeasternworld.co.kr *.ebiznetworks.co.kr *.hotelgangneung.kr *.daumcdn.net *.google.com *.hyutour.co.kr *.gstatic.com *.withutour.co.kr
connect-src http://*.visualwebsiteoptimizer.com https://*.google.at https://*.google.fr https://*.google.co.uk wss://*.hotjar.com https://*.mouseflow.com https://*.upscope.io https://*.moneypark.ch https://*.g.doubleclick.net https://*.google-analytics.com https://*.addthis.com https://*.visualwebsiteoptimizer.com wss://*.upscope.io wss://moneypark.ch https://*.google.ch https://*.google.com https://mpcdn.ch https://*.log.optimizely.com https://*.hotjar.com https://*.google.de https://*.olark.com https://*.optimizely.com https://*.vwo.com 'self' https://*.google.es https://*.google.com.ua
default-src http://*.visualwebsiteoptimizer.com https://*.vwo.com https://mpcdn.ch 'self' https://*.visualwebsiteoptimizer.com
font-src https://*.vwo.com 'self' data: https://*.gstatic.com
frame-src http://*.visualwebsiteoptimizer.com https://*.google.at https://*.google.fr https://*.google.co.uk https://*.us5.list-manage.com wss://*.hotjar.com https://*.upscope.io https://*.google.li https://*.g.doubleclick.net https://*.addthis.com https://*.visualwebsiteoptimizer.com https://*.googleadservices.com wss://*.upscope.io https://*.google.ch https://*.google.com https://mpcdn.ch https://*.youtube.com https://*.hotjar.com https://*.google.de data: https://*.googlesyndication.com https://*.olark.com https://*.facebook.com https://*.vwo.com 'self' https://*.google.it
img-src http://*.visualwebsiteoptimizer.com https://*.google.at https://*.google.fr https://*.google.co.uk https://*.google.li https://*.g.doubleclick.net https://*.ggpht.com https://*.google-analytics.com https://*.addthis.com https://*.visualwebsiteoptimizer.com https://*.apis.google.com https://*.googleapis.com https://*.google.ch https://*.google.com https://mpcdn.ch https://*.google.de data: https://*.gstatic.com https://*.googlesyndication.com https://*.olark.com https://*.facebook.com https://*.vwo.com 'self' https://*.google.it https://*.google.es https://*.google.com.ua
media-src https://*.olark.com data: 'self' https://mpcdn.ch
script-src http://*.visualwebsiteoptimizer.com https://*.workable.com 'unsafe-eval' https://*.us5.list-manage.com https://freegeoip.net wss://*.hotjar.com https://*.upscope.io https://*.mouseflow.com https://*.g.doubleclick.net https://*.google-analytics.com 'unsafe-inline' https://*.addthis.com https://*.visualwebsiteoptimizer.com https://*.googleadservices.com blob: wss://*.upscope.io https://*.addthisedge.com https://*.googleapis.com https://*.google.com https://mpcdn.ch https://*.hotjar.com https://*.provenexpert.com data: https://*.adtech.de https://*.gstatic.com https://*.googlesyndication.com https://*.olark.com https://*.facebook.com https://*.optimizely.com https://*.vwo.com 'self'
style-src https://*.provenexpert.com data: https://*.olark.com https://*.googleapis.com https://*.vwo.com https://mpcdn.ch 'unsafe-inline' 'self'
img-src https://emragis.de data: https://maps.gstatic.com https://maps.googleapis.com
frame-src 'self' *.youtube-nocookie.com *.google.com *.facebook.com
img-src 'self' 'unsafe-inline' data: *.ibabs.eu *.ibabsonline.eu *.hubspot.com *.hubspot.net *.hs-sites.com *.w.org *.google.com *.google.nl *.google-analytics.com *.doubleclick.net *.azurewebsites.net *.ibabs.co.uk *.gravatar.com
script-src 'self' *.ibabs.eu *.ibabsonline.eu *.googleadservices.com *.doubleclick.net 'unsafe-eval' 'unsafe-inline' *.google.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.twitter.com *.facebook.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com *.hscta.net *.hsleadflows.net *.ads-twitter.com
connect-src 'self' *.mijnio.nl *.ons-sessies.nl *.ons-notificaties.nl *.nr-data.net kamino.ons.io ws://kamino-push.ons.io wss://kamino-push.ons.io kamino-push.ons.io
img-src 'self' *.mijnio.nl *.ons-notificaties.nl *.carenzorgt.nl caren.s3.amazonaws.com d1yim1i5ghw5xv.cloudfront.net *.nr-data.net img.youtube.com iome.s3.amazonaws.com kamino.ons.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com *.newrelic.com kamino.ons.io kamino-push.ons.io
style-src 'self' 'unsafe-inline' www.google.com fonts.googleapis.com kamino.ons.io
"connect-src 'self' https://api.privy.com https://events.privy.com https://m.addthis.com https://l.sharethis.com https://www.facebook.com https://in.hotjar.com https://tri.privy.com https://www.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com *.facebook.com connect.facebook.net *.twimg.com *.twitter.com *.infogram.com *.infogr.am maps.google.com maps.googleapis.com
connect-src 'self' https://localhost:14972 https://localhost:41472 https://localhost:57214 https://localhost:61427
img-src *.googleapis.com maps.google.com www.google-analytics.com *.ajpes.si 'self' data: *.facebook.com connect.facebook.net *.twimg.com *.twitter.com *.gstatic.com maps.googleapis.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.twitter.com *.twimg.com
frame-src 'self' https://localhost:14972 https://localhost:41472 https://localhost:57214 https://localhost:61427 *.facebook.com *.twitter.com *.infogram.com *.infogr.am *.youtube.com www.google.com
"default-src https: data: 'unsafe-inline' 'unsafe-eval' blob:"
script-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://analytics.twitter.com https://www.google-analytics.com maps.googleapis.com https://connect.facebook.net static.ads-twitter.com app.icontact.com www.google.com www.gstatic.com maps.google.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com app.icontact.com
img-src 'self' data: https://pbs.twimg.com https://www.google-analytics.com https://www.facebook.com/tr/ maps.gstatic.com *.googleapis.com t.co https://i.ytimg.com *.fbcdn.net stats.g.doubleclick.net www.google.com app.icontact.com maps.google.com
frame-src 'self' www.youtube.com www.google.com https://connect.facebook.net https://www5.recruitingcenter.net https://www.facebook.com
form-action 'self' https://app.icontact.com https://connect.facebook.net https://www.facebook.com/tr/
"default-src data: 'unsafe-inline' 'unsafe-eval' https: blob
img-src data: https: android-webview-video-poster: blob:
"script-src 'self' 'nonce-52284224-37c6-44b3-871e-528c6adc99f7' gearsofwar.com *.gearsofwar.com www.google.com *.googleapis.com  www.google-analytics.com www.googletagmanager.com www.gstatic.com *.msecnd.net *.youtube.com *.ytimg.com cdnjs.cloudflare.com fb.me connect.facebook.net *.facebook.com www.facebook.com platform.twitter.com cdn.syndication.twimg.com uhf.microsoft.com c.s-microsoft.com code.jquery.com maxcdn.bootstrapcdn.com
connect-src 'self' *.gearsofwar.com dc.services.visualstudio.com www.google.com *.googleapis.com  www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com
"frame-ancestors 'self' *.hawksearch.com *.hawksearch.net *.i-parcel.com"
font-src https: data: https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'
script-src data: https: 'unsafe-inline' 'unsafe-eval' http://tableau-internal"
img-src 'self' https://www.google-analytics.com http://localhost:3000 http://scriptmint.com http://scriptmint
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://wchat.freshchat.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://wchat.freshchat.com
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://ajax.googleapis.com https://static.jquery.com https://piwik.miniwebs1.gingco-hosting.net https://fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maps.googleapis.com https://maps.gstatic.com
img-src 'self' data: https://secure.gravatar.com http://liberty.eu https://www.hoodthemes.com https://maps.gstatic.com https://maps.googleapis.com
"default-src adservice.google.com 'self' adservice.google.cz adservice.google.sk ajax.googleapis.com googleads.g.doubleclick.net pagead2.googlesyndication.com stats.g.doubleclick.net toplist.cz unpkg.com www.google-analytics.com www.google.com www.google.cz www.google.sk www.googletagmanager.com code.jquery.com csi.gstatic.com
frame-src googleads.g.doubleclick.net 'self' staticxx.facebook.com web.facebook.com www.facebook.com www.googletagmanager.com www.google.com
img-src 'self' stats.g.doubleclick.net toplist.cz www.google-analytics.com www.google.com www.google.cz pagead2.googlesyndication.com ssl.google-analytics.com www.google.at www.google.be www.google.ca www.google.co.uk www.google.com.mx www.google.com.ua www.google.de www.google.hr www.google.nl www.google.no www.google.pl www.google.sk www.googletagmanager.com www.gstatic.com csi.gstatic.com www.google.bg www.google.ch www.google.co.in www.google.com.cy www.google.com.eg www.google.com.mt www.google.es www.google.fr www.google.gr www.google.it www.google.ro www.google.ru www.google.ae www.google.co.kr www.google.com.tr www.google.lt www.google.co.za www.google.dk www.google.fi www.google.se www.google.tg www.google.co.id www.google.co.il www.google.co.th www.google.com.au www.google.ie www.google.pt www.google.rs www.google.si www.google.tn www.google.co.jp www.google.co.nz www.google.ml www.google.com.ng www.facebook.com www.google.cn www.google.com.lb www.google.ee www.google.is www.google.me www.google.al www.google.am www.google.ba www.google.com.ec www.google.com.hk www.google.cv www.google.hu www.google.je www.google.lu www.google.jo www.google.kz www.google.mn www.google.com.sa www.google.ge www.google.lk www.google.cm www.google.co.tz www.google.com.py www.google.com.vn www.google.mv web.facebook.com www.google.bj www.google.com.gh www.google.com.tw www.google.iq www.google.lv
script-src 'self' 'unsafe-inline' 'unsafe-eval' adservice.google.com adservice.google.cz ajax.googleapis.com pagead2.googlesyndication.com unpkg.com www.google-analytics.com www.googletagmanager.com adservice.google.at adservice.google.be adservice.google.ca adservice.google.co.uk adservice.google.com.eg adservice.google.com.mx adservice.google.de adservice.google.hr adservice.google.nl adservice.google.no adservice.google.pl adservice.google.sk cdnjs.cloudflare.com connect.facebook.net ssl.google-analytics.com adservice.google.bg adservice.google.ch adservice.google.co.in adservice.google.com.bd adservice.google.com.cy adservice.google.com.mt adservice.google.com.ua adservice.google.es adservice.google.fr adservice.google.gr adservice.google.hu adservice.google.it adservice.google.ro adservice.google.ru www.google.com www.gstatic.com adservice.google.ae adservice.google.co.kr adservice.google.com.tr adservice.google.lt adservice.google.co.jp adservice.google.co.za adservice.google.com.my adservice.google.dk adservice.google.fi adservice.google.se adservice.google.al adservice.google.co.id adservice.google.co.il adservice.google.com.au adservice.google.ie adservice.google.me adservice.google.pt adservice.google.si adservice.google.tg adservice.google.tn adservice.google.co.nz adservice.google.ml adservice.google.com.hk adservice.google.com.lb adservice.google.is adservice.google.mk adservice.google.co.uz adservice.google.com.ec adservice.google.cv adservice.google.im adservice.google.lu adservice.google.kz adservice.google.mn adservice.google.com.sa adservice.google.co.th adservice.google.ge adservice.google.lk adservice.google.cm adservice.google.com.py adservice.google.com.vn adservice.google.mv adservice.google.com.tw adservice.google.iq adservice.google.sc
connect-src csi.gstatic.com 'self' stats.g.doubleclick.net www.google-analytics.com graph.facebook.com unpkg.com
script-src 'self' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://code.jquery.com https://cdn.ravenjs.com https://yastatic.net https://api.sumsub.com https://connect.facebook.net 'sha256-5aldhpfiurm8bpkgnmpqeuyo63dwzocolenqwn6121s=' 'sha256-difthzkzjvsdbyitjqhywldjshbuyjzmalrsh0rnqws=' 'sha256-jygig/qjgrnuylj3zxdg6tzulzjoe5fusdk9wtizxny=' 'sha256-dxgiacguxacwxn/q0i0k+v/svr8nyhfqiluzctaeos4=' 'sha256-h2lgqcvdta+l0wnfu2fcdu+osdkqoqhy/fiwsvl9avs=' 'sha256-nb7xi4ydx+9qndbb0kzs0v6czdvlx+5uaakkr/syo0u=' 'sha256-q234n60mp6hpiayk101om70ts7mrlp3tvoegl5grmmu=' 'sha256-6qkodl6+w+zrjyxwvs/qowhi/nx5u9pzojxapqvfg8g=' 'sha256-g2lpgdoplek1batwkevmhi5tnts2kktezc1jqdfeu1u=' 'sha256-sxhrxzovimz15bvpkn99n2ioa/qgfsd56q0vygitzhi=' 'sha256-9qvxqd7ebbxgoody65vh1q+yep1n+eqqfxdcc9jfnli=' 'sha256-zhxr2nvkefxzvjdd3jotqz+gsqtdyvujehcrqxif97e=' 'sha256-bl0fvlos5oqw6jkrk75l5meidzsahsk1usrzbeh5mgi=' 'sha256-5zo+wr0het+mnll8uudd9nayjd7bncuvllhcmw8v1+a='
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://api.sumsub.com
font-src 'self' https://fonts.gstatic.com data:  https://api.sumsub.com
child-src 'self' https://www.google.com https://api.sumsub.com https://docs.google.com https://www.facebook.com https://mc.yandex.ru tg:
connect-src 'self' https://mc.yandex.ru https://stats.g.doubleclick.net https://www.google-analytics.com https://sentry.io wss://xena.exchange wss://*.yandex.net https://api.sumsub.com https://www.tradingview.com https://www.facebook.com https://connect.facebook.net"
"connect-src 'self' *.cvcheck.com ajax.googleapis.com www.facebook.com yourir.info *.hotjar.com *.glance.net collect.analyze.ly cvcheck.supporthero.io fonts.googleapis.com fonts.gstatic.com rum-collector-2.pingdom.net netdna.bootstrapcdn.com heapanalytics.com insights.hotjar.com www.google-analytics.com stats.g.doubleclick.net dev.visualwebsiteoptimizer.com
frame-src 'self' *.cvcheck.com *.fls.doubleclick.net cvcheck.outgrow.us cvcheck.supporthero.io connect.facebook.net www.youtube.com dev.visualwebsiteoptimizer.com vars.hotjar.com www.googletagmanager.com www.google.com
img-src 'self' 'unsafe-inline' data: s3.amazonaws.com www.glancecdn.net www.googletagmanager.com heapanalytics.com rum-collector.pingdom.net stats.g.doubleclick.net www.facebook.com dev.visualwebsiteoptimizer.com www.google.com www.google-analytics.com bat.bing.com useruploads.visualwebsiteoptimizer.com www.google.co.nz www.google.com.au v2.visualwebsiteoptimizer.com chart.googleapis.com
script-src 'self'  'unsafe-inline' 'unsafe-eval' *.cloudfront.net ajax.cloudflare.com tagmanager.google.com api.getdrip.com tag.getdrip.com ajax.googleapis.com bat.bing.com cdn.heapanalytics.com connect.facebook.net dev.visualwebsiteoptimizer.com rum-static.pingdom.net www.glancecdn.net yourir.info www.youtube.com www.googletagmanager.com www.google-analytics.com px.ads.linkedin.com d22xmn10vbouk4.cloudfront.net s.ytimg.com dc.ads.linkedin.com script.hotjar.com static.hotjar.com www.linkedin.com d29l98y0pmei9d.cloudfront.net s3.amazonaws.com cdnjs.cloudflare.com snap.licdn.com v2.visualwebsiteoptimizer.com
style-src tagmanager.google.com s3.amazonaws.com www.glancecdn.net fonts.googleapis.com yourir.info 'self' 'unsafe-inline'
"default-src * 'unsafe-inline' 'unsafe-eval' data: blob:
script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
frame-ancestors 'self' http://*.stage.peri.info https://*.stage.peri.info http://*.live.peri.info https://*.live.peri.info
child-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/ https://*.facebook.com/ https://app-3qndemwefo.marketingautomation.services/ https://e.issuu.com/
frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/ https://*.facebook.com/ https://app-3qndemwefo.marketingautomation.services/ https://e.issuu.com/"
"default-src 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com
script-src 'self' 'unsafe-inline' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com
connect-src * 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com
img-src data: 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com
style-src 'self' 'unsafe-inline' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com
font-src 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com data:
script-src 'self' at1.listrakbi.com cdn.listrakbi.com payments.amazon.com api-cdn.amazon.com s1.listrakbi.com m1.listrakbi.com static.www.turnto.com wac.edgecastcdn.net static-na.payments-amazon.com static.criteo.net c.disquscdn.com cmplecom.disqus.com disqus.com sslwidget.criteo.com ssl.google-analytics.com widget.us.criteo.com www.resellerratings.com apis.google.com cdn.ampproject.org ssl.google-analytics.com cdn.listrakbi.com maps.googleapis.com www.gstatic.com www.googleadservices.com www.google-analytics.com cdn.mxpnl.com google.com/recaptcha gstatic.com/recaptcha www.google.com/recaptcha/api.js bat.bing.com connect.facebook.net nsg.symantec.com ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js www.pepperjamnetwork.com assets.loginwithamazon.com/sdk/na/login1.js 'unsafe-inline' 'unsafe-eval'
style-src 'self' static.www.turnto.com/tra4_3/tra.css static.www.turnto.com/tra4_3/turnto-pinboard-en_us.css cdn1.resellerratings.com c.disquscdn.com fonts.googleapis.com cdn.listrakbi.com maxcdn.bootstrapcdn.com/font-awesome 'unsafe-inline'
img-src 'self'  dis.us.criteo.com gum.criteo.com static.criteo.com images-na.ssl-images-amazon.com ssl.google-analytics.com static.www.turnto.com wac.edgecastcdn.net gem.criteo.com mug.criteo.com www.turnto.com cdn1.resellerratings.com cdn3.resellerratings.com sca1.listrakbi.com ebs.criteo.com fp.listrakbi.com csi.gstatic.com maps.googleapis.com links.services.disqus.com maps.gstatic.com c.disquscdn.com s1.listrakbi.com d2ldlvi1yef00y.cloudfront.net ib.adnxs.com listrakbi.com cdn.viglink.com bat.bing.com nsg.symantec.com www.google-analytics.com www.google.co.kr www.google.co.th www.google.com.pe www.google.com.vn www.google.cz www.google.ge www.google.gm www.google.no www.google.si www.facebook.com/tr/ stats.g.doubleclick.net www.google.com/ads/ga-audiences www.google.com.sg www.google.nl www.google.co.in www.google.co.uk www.google.ca www.google.bg www.google.co.in www.google.com.ph data:
font-src 'self' turnto.com fonts.gstatic.com maxcdn.bootstrapcdn.com data:
frame-src 'self' dis.us.criteo.com disqus.com c.disquscdn.com gum.criteo.com static-na.payments-amazon.com payments.amazon.com t.pepperjamnetwork.com static.www.turnto.com www.turnto.com wac.edgecastcdn.net static.criteo.net www.google.com api-cdn.amazon.com google.com/recaptcha/ nsg.symantec.com www.facebook.com/
form-action 'self' connect.facebook.net www.facebook.com/tr/ payments.amazon.com/gp/widgets/widgets www.turnto.com
connect-src 'self' links.services.disqus.com payments.amazon.com ssl.google-analytics.com www.resellerratings.com www.google.com api.mixpanel.com coin.amazonpay.com/rb/checkstatus coin.amazonpay.com/cs/uedata
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.syndication.twimg.com https://platform.twitter.com https://www.gstatic.com https://www.google.com https://external.cryptowolf.eu https://code.jquery.com https://www.google.co.uk/ads https://www.google.com/ads https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://tagmanager.google.com https://use.typekit.net https://widget.trustpilot.com https://bat.bing.com https://optimize.google.com https://dmp.cabla.to https://pool.admedo.com https://services.xg4ken.com/ https://optimize.google.com/ https://www.dwin1.com/ https://www.google-analytics.com/ https://js.stripe.com/v2/ https://www.googletagmanager.com/ https://cdn.polyfill.io/v2/ https://assets.zendesk.com/embeddable_framework/ https://*.zopim.com/ https://cdn.treasuredata.com/sdk/ https://in.treasuredata.com/js/ https://*.feedoptimise.com/ https://connect.facebook.net/ https://www.googleadservices.com/ https://*.adroll.com https://api.stripe.com/ https://apis.google.com/ https://*.connexity.net/ https://storage.googleapis.com https://instapage-scripts.s3.amazonaws.com https://*.skimresources.com/js/ https://stat.dealtime.com
img-src 'self' data: https://platform.twitter.com https://*.twimg.com https://syndication.twitter.com https://static.wixstatic.com https://external.cryptowolf.eu https://images.skucloud.io https://raw.githubusercontent.com https://www.coinpayments.net https://f8a79cf0e3b007359887-7350a4f1e05802834253e77a27e9afcb.ssl.cf3.rackcdn.com https://trk.tidaltv.com https://set.tidaltv.com https://marketing.net.idealo-partner.com https://ssl.gstatic.com https://www.gstatic.com https://pixel.advertising.com https://ums.adtech.de https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://trc.taboola.com https://simage2.pubmatic.com https://p.typekit.net https://www.googletagmanager.com https://bat.bing.com https://optimize.google.com https://6103.xg4ken.com/ https://dmp.cabla.to/ https://blog.flubit.com https://a1.awin1.com/ https://www.awin1.com/ https://images.weflubit.com/ https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://v2.zopim.com/ https://q.stripe.com https://www.feedoptimise.com/ https://www.facebook.com/ https://www.googleadservices.com/ https://*.doubleclick.net/ https://*.adroll.com https://ads.yahoo.com https://x.bidswitch.net https://ib.adnxs.com https://analytics.twitter.com https://idsync.rlcdn.com https://us-u.openx.net https://rtb-eu.nativeads.com https://www.facebook.com/tr/ https://ads.kiosked.com https://pixel.admedia.com https://bh.contextweb.com https://rover.ebay.com
style-src 'self' 'unsafe-inline' https://platform.twitter.com https://tagmanager.google.com https://optimize.google.com https://s3.amazonaws.com/icomoon.io/ https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net
font-src 'self' data: https://use.typekit.net https://s3.amazonaws.com/icomoon.io/ https://v2.zopim.com/ https://fonts.gstatic.com/
frame-src https://syndication.twitter.com https://platform.twitter.com https://www.google.com https://8206575.fls.doubleclick.net https://optimize.google.com https://js.stripe.com/ https://hooks.stripe.com/3d_secure/iframe/ https://widget.trustpilot.com https://connexity.net/ https://blip.bizrate.com https://*.g.doubleclick.net https://www.google.com/ads/ https://www.google.co.uk/ads/ https://tpc.googlesyndication.com https://d3mwhxgzltpnyp.cloudfront.net
connect-src 'self' https://www.google-analytics.com https://external.cryptowolf.eu https://www.google-analytics.com/collect https://logs-01.loggly.com https://www.facebook.com https://performance.typekit.net https://flubit-api.flubit.com https://beta-ws.flubit.com https://ws.flubit.com https://flubit.zendesk.com/ wss://*.zopim.com/ https://*.zopim.com https://www.google.com/ads https://www.google.co.uk/ads
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fastcdn.org *.cloudflare.com *.ytimg.com *.youtube.com *.addthis.com *.addthisedge.com *.googleapis.com *.google-analytics.com *.facebook.com *.pinterest.com
frame-src 'self' *.unikum.se *.addthis.com *.youtube.com
img-src 'self' data: *.youtube.com *.googleapis.com *.gstatic.com *.google-analytics.com"
"script-src 'self' https://www.google.com https://static.cahiersng.com https://www.cahiersng.com https://www.google.com https://s0.wp.com https://secure.gravatar.com https://connect.facebook.net https://www.google-analytics.com https://api.pinterest.com https://chimpstatic.com https://graph.facebook.com https://stats.wp.com/ 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.gravatar.com https://*.w.org https://www.youtube.com https://www.facebook.com https://www.statcounter.com https://c.statcounter.com https://www.daemon.com.br  https://3.bp.blogspot.com https://4.bp.blogspot.com https://wordpress.com https://www.taoismo.org https://translate.google.com https://*.wp.com https://www.moonmodule.com https://www.sadhana.com.br https://www.viraj.com.br  data: 'unsafe-inline' 'unsafe-eval'
connect-src 'self' *.hotjar.com wss://*.hotjar.com *.visualstudio.com www.google-analytics.com *.doubleclick.net
frame-src 'self' *.hotjar.com *.facebook.com *.youtube.com *.google.com *.investis.com
img-src 'self' data: prod-cpw-grptst-media.azureedge.net secure.adnxs.com www.google-analytics.com *.visualwebsiteoptimizer.com *.doubleclick.net
script-src 'unsafe-inline' 'unsafe-eval' 'self' www.googletagmanager.com www.google-analytics.com *.hotjar.com www.youtube.com *.ytimg.com *.msecnd.net *.visualwebsiteoptimizer.com connect.facebook.net
connect-src 'self' https://*.touristtube.com/ https://*.touristtube.com:8765/ https://chat.touristtube.com:3000/ https://*.facebook.com/ https://connect.facebook.net/ https://*.adroll.com/
img-src 'self' https://*.touristtube.com https://maps.googleapis.com/ https://*.gstatic.com/ https://www.google.com/ https://www.google.com.lb/ https://www.google-analytics.com/ https://www.google-analytics.com.lb/ https://*.alexametrics.com/ https://www.facebook.com/ https://*.cloudfront.net/ https://*.adroll.com/ https://jwpltx.com/ https://*.doubleclick.net/ https://ads.yahoo.com/ data: https:
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.touristtube.com/ https://fonts.googleapis.com/ https://*.cloudflare.com/ https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.touristtube.com/ https://*.mastercard.com/ https://connect.facebook.net/ https://*.cloudflare.com/ https://*.payfort.com/ https://mpsnare.iesnare.com/ https://freegeoip.net/ https://*.newrelic.com/ https://ajax.googleapis.com/ https://maps.googleapis.com/ https://chat.touristtube.com:3000/ https://adservice.google.com/ https://adservice.google.com.lb/ https://*.googlesyndication.com/ https://connect.facebook.net/ https://code.jquery.com/ https://www.google-analytics.com/ https://*.cloudfront.net/ https://*.adroll.com/ https://ssl.p.jwpcdn.com/player/ https://*.nr-data.net/ https://cdn.jsdelivr.net/
worker-src 'self' blob: https://*.touristtube.com/ https:"
"default-src 'self' *.gov.uk *.google-analytics.com *.googletagmanager.com tagmanager.google.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.github.com *.wordpress.org secure.gravatar.com w.org s.w.org
font-src 'self' 'unsafe-inline' data: *.googleapis.com fonts.gstatic.com
style-src 'self' 'unsafe-inline' data: *.googleapis.com assets-cdn.github.com
style-src 'self' https: 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://*.googleapis.com https://*.google-analytics.com https://*.gravatar.com https://*.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com 'self' https://*.googleusercontent.com
img-src 'self' https: data: blob: https://mastodol.jp
media-src 'self' https: data: https://mastodol.jp
connect-src 'self' blob: https://mastodol.jp wss://mastodol.jp
script-src * 'self' 'unsafe-inline' 'unsafe-eval'
style-src 'self' 'unsafe-inline' http: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.islamicbank.com.jo https://*.verisign.com
"script-src 'self' checkout.stripe.com apis.google.com optimize.google.com www.google-analytics.com 'sha256-8itf0bpi+slgi+t0kwfazsogapdpyhsnhfqzgpga+v0='"
"frame-src 'self' panel.cint.com *.facebook.com *.fbcdn.net *.livechatinc.com themes.googleusercontent.com *.twitter.com accounts.google.com ssl.gstatic.com *.onesignal.com transcribeme.os.tc *.consensu.org *.transcribeme.com transcribeme.desk.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.youtube.com *.cloudflare.com *.jquery.com *.github.io data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  http://localhost:* https://www.google-analytics.com https://maps.googleapis.com
connect-src 'self' *.braintreegateway.com camaloon-web.s3-eu-west-1.amazonaws.com *.camaloon.media *.cloudfront.net *.doubleclick.net www.facebook.com *.fullstory.com *.google-analytics.com *.hotjar.com *.mstrlytcs.com *.optmstr.com *.optmnstr.com sentry.io *.typekit.net *.braintree-api.com wss://*.hotjar.com
font-src 'self' data: *.fontawesome.com *.gstatic.com *.typekit.net *.hotjar.com
form-action 'self' connect.facebook.net www.facebook.com *.salesforceliveagent.com
frame-src 'self' *.braintreegateway.com *.criteo.com *.facebook.com *.hotjar.com *.kaptcha.com *.livechatinc.com optimize.google.com *.stripe.com *.youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.bing.com *.cloudflare.com *.criteo.net *.criteo.com *.emsecure.net *.facebook.net fullstory.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.google.com *.googleapis.com *.hotjar.com *.livechatinc.com *.newrelic.com *.nr-data.net *.salesforceliveagent.com *.typekit.net *.stripe.com *.ravenjs.com *.optnmnstr.com *.optmstr.com 1191.xg4ken.com
style-src 'unsafe-inline' 'self' *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com *.typekit.net
"default-src 'self' *.explorer-russia.ru data: 'unsafe-inline' *.jivosite.com api-maps.yandex.ru yastatic.net *.nr-data.net *.yastatic.net *.gstatic.com *.googleapis.com *.newrelic.com *.yadro.ru *.jivosite.com *.mango-office.ru *.callibri.ru *.google-analytics.com *.cloudflare.com *.jquery.com *.youtube.com https://yandex.ru https://chat.ws.yandex.ru https://mc.yandex.ru https://yastatic.net 'unsafe-eval'"
"\"default-src https: data: 'unsafe-inline' 'unsafe-eval'\""
script-src 'self' 'unsafe-inline' 'unsafe-eval' amt-apteka.ru
style-src 'self' 'unsafe-inline' 'unsafe-eval' amt-apteka.ru
"default-src 'self' *.wistia.net *.wistia.com embedwistia-a.akamaihd.net vimeo.com player.vimeo.com vimeocdn.com ytimg.com s.ytimg.com aax-eu.amazon-adsystem.com data: service.avm.de news.avm.de bingo.avm.de scope.avm.de piwik.avm.de track.adform.net maps.google.com *.googleapis.com *.gstatic.com shoplogos.commerce-connector.de www.commerce-connector.com i.ytimg.com https://www.youtube.com img.youtube.com *.xx.fbcdn.net www.surveygizmo.eu 'unsafe-inline' 'unsafe-eval'
media-src 'self' *.avm.de embedwistia-a.akamaihd.net data: blob: *.avm.de"
"default-src 'unsafe-inline' 'unsafe-eval' https://www.cuetoems.com https://*.paypal.com https://*.paypalobjects.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.aspnetcdn.com https://ajax.googleapis.com https://maps.googleapis.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://*.paypal.com https://*.paypalobjects.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com
img-src 'self' data: https://cemsuploads.s3.amazonaws.com https://*.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://pubads.g.doubleclick.net https://ssl.google-analytics.com
font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com
connect-src 'self' https://cemsuploads.s3.amazonaws.com https://maps.googleapis.com https://*.shift4api.net https://*.i4go.com https://*.paypal.com https://*.paypalobjects.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.googleadservices.com *.clickdimensions.com *.facebook.net *.tctm.co cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.google.com *.bootstrapcdn.com *.fontawesome.com *.gstatic.com *.trustarc.com *.avmws.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com/ https://unpkg.com/ https://app-lon05.marketo.com/ http://munchkin.marketo.net https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: about: gist.github.com *.jotform.com cdn.jotfor.ms static.issuu.com instagram.com www.instagram.com t.sf14g.com 1.tl813.com http://static.issuu.com analytics.twitter.com srdrvp.com static.ads-twitter.com apis.google.com *.addthis.com *.addthisedge.com secure.comodo.net static.ads-twitter.com platform.twitter.com www.googleadservices.com http://www.googleadservices.com *.akamaihd.net www.google-analytics.com www.google.com cdnjs.cloudflare.com performance.typekit.net *.jotform.us cdn.jsdelivr.net ajax.googleapis.com connect.facebook.net www.facebook.com facebook.com use.typekit.net ssl.google-analytics.com *.gstatic.com cse.google.com www.googleapis.com *.mobilecause.com bam.nr-data.net googletagmanager.com formalyzer.com maps.googleapis.com e.issuu.com *.silkroad.com *.createsend.com *.createsend1.com *.polldaddy.com polldaddy.com
img-src 'self' data: about: 1.tl813.com *.leadlander.com log.pinterest.com i.ytimg.com *.jotform.com t.co *.gstatic.com *.instagram.com *.cdninstagram.com *.fbcdn.net www.google-analytics.com *.doubleclick.net *.jotfor.ms csi.gstatic.com maps.gstatic.com p.typekit.net www.google.com www.googleapis.com maps.googleapis.com www.facebook.com *.google.com *.arborday.org www.googleapis.com ssl.google-analytics.com syndication.twitter.com
font-src 'self' data: use.typekit.net fonts.googleapis.com fonts.gstatic.com
style-src 'self' 'unsafe-inline' assets-cdn.github.com use.typekit.net *.gstatic.com cdn.jotfor.ms www.google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com
frame-src 'self' www.facebook.com *.google.com *.vimeo.com www.instagram.com syndication.twitter.com *.jotform.us https://staticxx.facebook.com *.igive.com cse.google.com pdf.snapandread.com app.mobilecause.com *.arborday.org www.arborday.org hotelfootprints.org www.hotelfootprints.org www.youtube.com http://www.youtube.com e.issuu.com api.braintreegateway.com treesandutilities.com *.silkroad.com ajax.googleapis.com connect.facebook.net platform.twitter.com *.addthis.com *.createsend.com *.createsend1.com *.leadlander.com
frame-ancestors 'self' www.logees.com logees.com treesandutilities.com www.treesandutilities.com *.secureserver.net *.akam.net *.godaddy.com *.silkroad.com createsend.com
connect-src 'self' wss://www.arborday.org performance.typekit.net ssl.google-analytics.com *.jotform.us createsend.com *.doubleclick.net *.cloudfront.net appstoreconnect.com
"object-src 'self' *.google.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com"
script-src 'self' https://ssl.google-analytics.com:443 https://track.adform.net:443 https://www.googleadservices.com:443/ https://*.googleapis.com:443 https://maps.gstatic.com:443 https://posten.boost.ai/chatpanel/
img-src 'self' blob: https://track.adform.net:443 https://ssl.google-analytics.com:443 https://maps.googleapis.com:443 https://maps.gstatic.com:443 https://csi.gstatic.com:443 https://*.amazonaws.com:443 https://posten.boost.ai/img/ data:
connect-src 'self' https://script.google.com https://script.googleusercontent.com https://posten.boost.ai/api/
frame-src 'self' blob: https://www.posten.no https://www.youtube-nocookie.com:443"
"default-src 'self' proofpointisolation.com *.proofpointisolation.com data: blob: https://onenote.officeapps-df.live.com/ https://portal.productboard.com/
script-src 'self' proofpointisolation.com *.proofpointisolation.com 'nonce-dmvyesbzzwn1cmu='
style-src 'unsafe-inline' 'self' proofpointisolation.com *.proofpointisolation.com data:
img-src 'self' proofpointisolation.com *.proofpointisolation.com data: blob: https://onenote.officeapps-df.live.com/ http://www.office.com/
connect-src 'self' https://proofpointisolation.com wss://proofpointisolation.com https://*.proofpointisolation.com wss://*.proofpointisolation.com https://app.getsentry.com https://sentry.io
"frame-ancestors https://adfs.bentley.com https://fim.emc.com https://share.ptc.com https://ssov3.adpcorp.com https://ssso.autodesk.com https://bentley.sharepoint.com https://rasfa.crm.dynamics.com https://pppwiki.oce.net https://partnercentral.equinix.com https://partner.veracode.com http://nw-domino.networld.co.jp http://out.accessify.com http://out.easycounter.com http://sur.ly https://www.brainshark.com https://*.force.com 'self' https://*.salesforce.com https://*.gosavo.com https://*.visualforce.com https://*.savoinspire.com
"default-src 'self' *.blob.core.windows.net *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com *.newrelic.com *.nr-data.net *.formstack.com 'unsafe-eval' 'unsafe-inline'
form-action 'self' *.interaconline.com *.interacidebit.ca *.formstack.com"
"script-src 'self' 'unsafe-inline' apis.google.com https://www.google-analytics.com https://js.stripe.com https://*.zopim.com http://*.zopim.com https://*.zopim.org https://www.gstatic.com https://*.zopim.io connect.facebook.net https://d3kf5b36mae37a.cloudfront.net https://data-miner-io.s3.amazonaws.com https://sentry.io
style-src 'self' 'unsafe-inline' fonts.googleapis.com https://d3kf5b36mae37a.cloudfront.net https://data-miner-io.s3.amazonaws.com https://www.gstatic.com
default-src 'self' wss://*.zopim.com https://d3kf5b36mae37a.cloudfront.net https://data-miner-io.s3.amazonaws.com
frame-src 'self' www.youtube.com/ staticxx.facebook.com https://js.stripe.com https://www.emailmeform.com
img-src 'self' https://data-miner-io.s3.amazonaws.com https://d3kf5b36mae37a.cloudfront.net data: https://*.zopim.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net
font-src 'self' fonts.gstatic.com *.zopim.com data: https://d3kf5b36mae37a.cloudfront.net https://data-miner-io.s3.amazonaws.com
child-src static.seolib.ru www.google.com www.google.com.ua www.google.ru reformal.ru mc.yandex.ru accounts.google.com content.googleapis.com
connect-src 'self' wss://seolib.ru:8018 mc.webvisor.org mc.webvisor.com https://*.jivosite.com ws://*.jivosite.com
font-src 'self' data: updates.seolib.ru seolib.ru fonts.googleapis.com fonts.gstatic.com use.fontawesome.com
frame-src static.seolib.ru www.google.com www.google.com.ua www.google.ru reformal.ru accounts.google.com content.googleapis.com
img-src 'self' data: favicon.yandex.net www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net mc.webvisor.org ssl.gstatic.com www.gstatic.com www.google.com www.google.com.ua www.google.ru mc.yandex.ru reformal.ru media.reformal.ru http://traffic.alexa.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' updates.seolib.ru seolib.ru media.reformal.ru www.google-analytics.com www.googletagmanager.com tagmanager.google.com stats.g.doubleclick.net mc.webvisor.org d31j93rd8oukbv.cloudfront.net mc.yandex.ru www.google.com www.google.com.ua www.google.ru apis.google.com https://apis.google.com www.gstatic.com cdn.datatables.net code.jquery.com cdn.jsdelivr.net https://*.jivosite.com ws://*.jivosite.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com seolib.ru www.google.com ajax.googleapis.com use.fontawesome.com cdn.datatables.net code.jquery.com cdn.jsdelivr.net https://*.jivosite.com ws://*.jivosite.com
"default-src 'self' *.google.com google.com *.jquery.com jquery.com *.twitter.com twitter.com *.google-analytics.com google-analytics.com *.googletagmanager.com googletagmanager.com *.googleadservices.com googleadservices.com *.cloudflare.com cloudflare.com *.brightcove.net brightcove.net *.cloudfront.net cloudfront.net *.optimizely.com optimizely.com *.googleapis.com googleapis.com *.charles-stanley-direct.co.uk:* charles-stanley-direct.co.uk:* *.charles-stanley.co.uk:* charles-stanley.co.uk:* *.ads-twitter.com ads-twitter.com *.facebook.net facebook.net *.facebook.com facebook.com *.highcharts.com highcharts.com *.bing.com bing.com gstatic.com *.gstatic.com *.doubleclick.net doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com google.com *.jquery.com jquery.com *.twitter.com twitter.com *.google-analytics.com google-analytics.com *.googletagmanager.com googletagmanager.com *.googleadservices.com googleadservices.com *.cloudflare.com cloudflare.com *.brightcove.net brightcove.net *.cloudfront.net cloudfront.net *.optimizely.com optimizely.com *.googleapis.com googleapis.com *.charles-stanley-direct.co.uk:* charles-stanley-direct.co.uk:* *.charles-stanley.co.uk:* charles-stanley.co.uk:* *.ads-twitter.com ads-twitter.com *.facebook.net facebook.net *.facebook.com facebook.com *.highcharts.com highcharts.com *.bing.com bing.com gstatic.com *.gstatic.com *.doubleclick.net doubleclick.net
child-src *.youtube.com youtube.com *.charles-stanley-direct.co.uk:* charles-stanley-direct.co.uk:* *.charles-stanley.co.uk:* charles-stanley.co.uk:*
frame-src *.youtube.com youtube.com *.charles-stanley-direct.co.uk:* charles-stanley-direct.co.uk:* *.charles-stanley.co.uk:* charles-stanley.co.uk:*"
connect-src 'self' maps.googleapis.com fonts.googleapis.com *.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: unpkg.com i.mt.lv *.google.com gstatic.com code.jquery.com *.gstatic.com www.google-analytics.com googleapis.com *.googleapis.com *.mikrotik.com mikrotik.com
style-src 'self' 'unsafe-inline' i.mt.lv fonts.googleapis.com unpkg.com *.mikrotik.com mikrotik.com code.jquery.com use.typekit.net www.mikrotik.com
img-src 'self' data: i.mt.lv api.tiles.mapbox.com unpkg.com *.arcgisonline.com stats.g.doubleclick.net www.google-analytics.com mikrotik.com www.mikrotik.com forum.mikrotik.com 1.aerial.maps.cit.api.here.com 2.aerial.maps.cit.api.here.com 3.aerial.maps.cit.api.here.com 4.aerial.maps.cit.api.here.com gstatic.com http://services.ga.gov.au *.gstatic.com *.googleapis.com *.arcgisonline.com *.google.com *.google.lv *.routerboard.com
frame-src 'self' youtu.be youtube.com www.youtube.com www.google.com
font-src 'self' data: mikrotik.com fonts.gstatic.com www.mikrotik.com i.mt.lv
"img-src 'self' https://chart.googleapis.com https://syndication.twitter.com https://www.facebook.com https://ssl.google-analytics.com https://www.linkedin.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.google.com https://mts.googleapis.com https://khms0.googleapis.com https://khms1.googleapis.com https://csi.gstatic.com https://mts1.googleapis.com https://maps.googleapis.com https://mts0.googleapis.com https://q.damstra.com.au http://q.damstra.com.au https://maps.gstatic.com data: https://www.google-analytics.com
connect-src 'self' wss://chat.firehoseapp.com http://companyweb.damstra.com.au https://chat.firehoseapp.com
frame-src  'self' https://www.google.com https://staticxx.facebook.com https://www.youtube.com https://accounts.google.com https://apis.google.com https://platform.twitter.com https://platform.linkedin.com https://s-static.ak.facebook.com https://www.facebook.com https://companyweb.damstra.com.au https://opengate.damstra.com.au
font-src 'self' *.bdasites.com bdasites.com fonts.gstatic.com
style-src 'self' 'unsafe-inline' *.bdasites.com bdasites.com ajax.aspnetcdn.com *.google.com fonts.googleapis.com *.sharethis.com
connect-src 'self' *.doubleclick.net www.google-analytics.com *.sharethis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bdasites.com bdasites.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com ajax.aspnetcdn.com *.google.com *.googlecode.com *.newrelic.com *.bootstrapcdn.com *.googleapis.com *.sharethis.com invitebox.com urltag.net bam.nr-data.net connect.facebook.net www.gstatic.com"
"frame-ancestors 'self' www.nassp.org www.nhs.us www.njhs.us www.nehs.org www.natstuco.org www.principalsmonth.org files.nassp.org
"default-src 'self' 'unsafe-inline' 'unsafe-eval' assentcompliance.com *.assentcompliance.com http://sandbox.assentcompliance.com *.bamboohr.com cdnjs.cloudflare.com *.doubleclick.net *.eventbrite.ca *.hubspot.com www.google.com *.googleapis.com *.google-analytics.com *.gstatic.com www.youtube.com maxcdn.bootstrapcdn.com *.optmnstr.com wss://*.zopim.com *.zopim.com data: themes.googleusercontent.com www.googletagmanager.com www.youtube-nocookie.com www.facebook.com connect.facebook.net *.hsforms.com *.hs-analytics.net *.hs-scripts.com *.hsforms.net *.hsleadflows.net api.hubapi.com
img-src 'self' 'unsafe-eval' assentcompliance.com *.assentcompliance.com http://sandbox.assentcompliance.com http://www.assentcompliance.com *.bamboohr.com *.doubleclick.net *.ytimg.com *.youtube.com *.google-analytics.com *.hubspot.com img.evbuc.com www.facebook.com connect.facebook.net www.google.ca www.google.com www.googletagmanager.com *.zopim.com *.zopim.io data: *.w.org secure.gravatar.com *.optnmstr.com https://a.optnmstr.com *.youtube.com *.linkedin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' assentcompliance.com *.assentcompliance.com *.bamboohr.com cdnjs.cloudflare.com *.doubleclick.net *.eventbrite.ca *.google-analytics.com www.google.com *.googleapis.com *.gstatic.com *.hubspot.com www.youtube.com *.ytimg.com *.zopim.com www.google.ca sjs.bizographics.com sessions.bugsnag.com *.cloudfront.net connect.facebook.net spdcrv.global.ssl.fastly.net www.googleadservices.com www.googletagmanager.com js.hs-analytics.net js.hs-scripts.com forms.hsforms.com js.hsforms.net js.hsadspixel.net js.hsleadflows.net code.jquery.com *.linkedin.com *.optnmstr.com cdn.speedcurve.com https://a.optmnstr.com maxcdn.bootstrapcdn.com www.facebook.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https: stripe.com
img-src 'self' 'unsafe-eval' 'unsafe-inline' data: https:
script-src 'unsafe-inline' 'unsafe-eval' https: http:
"script-src 'self' 'unsafe-inline' ddvcgkeorgbdk.cloudfront.net cdn.trackjs.com www.google-analytics.com www.googletagmanager.com google.com www.google.com connect.facebook.net *.googleapis.com
style-src 'self' 'unsafe-inline' ddvcgkeorgbdk.cloudfront.net *.googleapis.com
font-src 'self' ddvcgkeorgbdk.cloudfront.net *.gstatic.com d3qnoxvhi29qvt.cloudfront.net
img-src 'self' www.google-analytics.com *.googleapis.com data: *.gstatic.com *.cloudfront.net www.facebook.com *.trackjs.com www.google.com www.google.dk *.imgix.net
child-src *.facebook.com facebook.com www.youtube.com www.vimeo.com
connect-src 'self' *.shopgun.com *.etilbudsavis.dk www.google-analytics.com capture.trackjs.com"
style-src 'self' https://www.google.com/uds/api/ https://ajax.googleapis.com https://platform.twitter.com 'unsafe-inline'
script-src https://*.google.com http://*.google.com https://www.googleapis.com https://ssl.google-analytics.com https://www.googleadservices.com  https://connect.facebook.net  'self' 'unsafe-inline' 'unsafe-eval' http://www.google.com https://platform.twitter.com https://cdn.syndication.twimg.com https://lightwidget.com https://servico.addintelligence.com.br
child-src 'self' https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net  http://*.google.com https://*.google.com https://*.google.com.br  https://*.facebook.com https://www.youtube.com http://arquivos.portoseguro.org.br https://twitter.com https://lightwidget.com
img-src 'self' https://www.facebook.com https://ssl.google-analytics.com https://www.google.com https://*.google.com https://www.googleapis.com https://servico.addintelligence.com.br http://arquivos.portoseguro.org.br https://web.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://servico.addintelligence.com.br data: https:
script-src 'unsafe-inline' 'self' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com http://www.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com http://connect.facebook.net https://connect.facebook.net https://graph.facebook.com
img-src 'self'  http://www.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com
frame-src http://www.youtube.com https://www.youtube.com https://www.google.com https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com
child-src http://www.youtube.com https://www.youtube.com https://www.google.com https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com
"frame-src 'self' ecodrift.ru widget.cloudpayments.ru open.ivideon.com googleads.g.doubleclick.net googleadservices.com aghost.ru agho.st sweb.ru www.sweb.ru www.google.com google.com google.ru www.google.ru accounts.google.com www.youtube.com youtube.com birjakreditov.com bid.g.doubleclick.net embedplus.com www.embedplus.com cackle.me www.cackle.me i.cackle.me h.cackle.me *.cackle.me coub.com kit.cdek-calc.ru widgets.dellin.ru
"default-src 'self'  'unsafe-inline'  'unsafe-eval' i.4see.mobi
connect-src blob: 'self' 'unsafe-inline' 'unsafe-eval' http://logx.optimizely.com/log/event https://logx.optimizely.com/log/event http://*.visualstudio.com https://*.visualstudio.com http://localhost https://localhost http://*.inspectlet.com https://*.inspectlet.com http://*.typekit.net https://*.typekit.net http://*.googleapis.com https://*.googleapis.com http://*.facebook.com https://*.facebook.com http://*.sharethis.com https://*.sharethis.com http://*.optimizely.com https://*.optimizely.com https://analytics.foresee.com https://brain.foresee.com https://4seeresults.com https://foreseeresults.com https://www.google-analytics.com https://ssl.google-analytics.com/ i.4see.mobi https://device.4seeresults.com https://srv.stackadapt.com/ https://tags.srv.stackadapt.com https://ssl.google-analytics.com/ https://www.google.com/ https://data.schemaapp.com/ https://c.sharethis.mgr.consensu.org/ http://*.foresee.com https://*.foresee.com
frame-src https://prd01.launch.banfield.com/ https://checkout.globalgatewaye4.firstdata.com/payment 'self' 'unsafe-inline' 'unsafe-eval' http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net http://www.google.com/ https://www.google.com/ http://www.youtube.com https://www.youtube.com http://gateway.answerscloud.com https://gateway.answerscloud.com http://*.foresee.com https://*.foresee.com http://*.facebook.com https://*.facebook.com http://*.adobedtm.com https://*.adobedtm.com http://*.doubleclick.net https://*.doubleclick.net http://*.doubleclick.net https://*.doubleclick.net http://*.sharethis.com https://*.sharethis.com http://*.rallybound.org https://*.rallybound.org http://*.cdn.optimizely.com https://*.cdn.optimizely.com http://sketchfab.com/ https://sketchfab.com/ http://*.cloudfront.net/ https://*.cloudfront.net/ https://demo.globalgatewaye4.firstdata.com/ https://www.vroptimal-3dx-assets.com/ https://static.vroptimal-3dx-assets.com/ https://connect.facebook.net/ i.4see.mobi
style-src http://*.fonts.net/ https://*.fonts.net/ 'self' http://*.iatspayments.com https://*.iatspayments.com 'unsafe-inline' 'unsafe-eval' http://*.fonts.net https://*.fonts.net http://fast.fonts.net https://fast.fonts.net http://*.banfield.com https://*.banfield.com http://images.banfield.com https://images.banfield.com http://scripts.banfield.com https://scripts.banfield.com http://assets.banfield.com https://assets.banfield.com http://images-staging.banfield.com https://images-staging.banfield.com http://scripts-staging.banfield.com https://scripts-staging.banfield.com http://assets-staging.banfield.com https://assets-staging.banfield.com http://*.googleapis.com https://*.googleapis.com http://*.jquery.com https://*.jquery.com http://*.answerscloud.com https://*.answerscloud.com http://*.foresee.com https://*.foresee.com http://*.sharethis.com https://*.sharethis.com http://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ http://*.fonts.net https://*.fonts.net http://*.azureedge.net https://*.azureedge.net https://gateway.foresee.com i.4see.mobi https://cdn.jsdelivr.net
font-src 'self' 'unsafe-inline' 'unsafe-eval' http://fast.fonts.net https://fast.fonts.net http://*.gstatic.com https://*.gstatic.com http://use.typekit.net https://use.typekit.net http://images.banfield.com https://images.banfield.com http://scripts.banfield.com https://scripts.banfield.com http://assets.banfield.com https://assets.banfield.com http://images-staging.banfield.com https://images-staging.banfield.com http://scripts-staging.banfield.com https://scripts-staging.banfield.com http://assets-staging.banfield.com https://assets-staging.banfield.com http://*.azureedge.net https://*.azureedge.net http://*.optimizely.com https://*.optimizely.com https://assets-staging.azureedge.net/ i.4see.mobi https://cdnjs.cloudflare.com https://scripts-staging.banfield.com http://*.foresee.com https://*.foresee.com
connect-src 'self' wss://*.zopim.com *.zopim.com *.zendesk.com *.zdassets.com *.hotjar.com wss://*.hotjar.com securepubads.g.doubleclick.net *.gstatic.com
frame-src 'self' *.google.com aexp.demdex.net *.aexp.demdex.net  *.omtrdc.net *.hotjar.com
style-src 'self' 'unsafe-inline' *.googleapis.com cloud.typography.com www.skymilesdining.com
font-src 'self' data: *.zopim.com *.gstatic.com
img-src 'self' *.zopim.io *.zopim.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.googleapis.com *.gstatic.com data: stats.g.doubleclick.net loyaltypartner.122.2o7.net *.omtrdc.net *.ggpht.com seal-chicago.bbb.org *.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org *.google-analytics.com *.gstatic.com *.google.com *.googleapis.com *.googletagservices.com *.googlesyndication.com *.doubleclick.net *.zopim.com assets.adobedtm.com aexp.demdex.net *.omtrdc.net assets.zendesk.com *.zdassets.com seal-chicago.bbb.org *.hotjar.com
font-src 'self' *.typekit.net use.fontawesome.com fonts.gstatic.com
script-src 'self' *.google.com *.gstatic.com cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' *.typekit.net use.fontawesome.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'
frame-src 'self' http://youtube.com http://*.youtube.com https://youtube.com https://*.youtube.com http://vimeo.com http://*.vimeo.com https://vimeo.com https://*.vimeo.com http://*.google.ru https://*.google.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ebay.com http://*.google-analytics.com https://*.google-analytics.com http://*.yandex.ru http://yandex.ru  http://*.googlesyndication.com  http://*.gstatic.com http://gstatic.com https://*.yandex.ru https://yandex.ru https://*.googlesyndication.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://googleapis.com http://youtube.com http://*.youtube.com https://youtube.com https://*.youtube.com http://google.ru http://*.google.ru https://google.ru https://*.google.ru http://google.com http://*.google.com https://google.com https://*.google.com
"frame-src 'self' www.casaejardins.com *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
style-src https://www.youtube.com https://fonts.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'
frame-src https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'
font-src https://fonts.googleapis.com https://fonts.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' data:
script-src https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'
img-src https://employee.gsi.gov.in 'self' 'unsafe-inline' 'unsafe-eval' data:"
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://m.addthis.com https://www.google.com http://www.google-analytics.com https://www.gstatic.com https://ajax.googleapis.com https://inc.freefind.com/inc/ffse-overlay.min.js https://addsearch.com       https://connect.facebook.net https://verify.authorize.net https://ajax.aspnetcdn.com https://vmss.boldchat.com https://cdn.imtins.com https://d20vwa69zln1wj.cloudfront.net https://s7.searchcdn.com       https://ssl.google-analytics.com https://dnn506yrbagrg.cloudfront.net https://vms.boldchat.com https://cdn.datatables.net https://code.jquery.com       https://www.google-analytics.com https://www.googletagmanager.com https://maxcdn.bootstrapcdn.com https://maps.googleapis.com https://cdn.tinymce.com https://cse.google.com https://www.googleapis.com https://s7.addthis.com https://cdnjs.cloudflare.com https://m.addthisedge.com
img-src 'self' data: https://www.paypalobjects.com https://www.facebook.com https://www.imtins.com https://verify.authorize.net https://cdn.datatables.net https://code.jquery.com https://www.google-analytics.com https://ssl.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.googleapis.com https://clients1.google.com https://www.google.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn2.gstatic.com https://encrypted-tbn3.gstatic.com https://cdn.imtins.com       https://app.addsearch.com https://stats.addsearch.com https://addsearch.com https://d20vwa69zln1wj.cloudfront.net
font-src 'self' http://fonts.gstatic.com http://maxcdn.bootstrapcdn.com https://cdn.tinymce.com https://cdn.imtins.com
frame-src 'self' data: https://s7.addthis.com https://cdn.imtins.com http://www.youtube.com https://www.google.com https://staticxx.facebook.com https://www.facebook.com https://cse.google.com https://testsecureacceptance.cybersource.com https://secureacceptance.cybersource.com https://intranet.imtins.com https://reports.hrmdirect.com https://theimtgroup.hrmdirect.com https://testsecureacceptance.cybersource.com/embedded/pay
style-src 'self' 'unsafe-inline' https://cdn.imtins.com http://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdn.datatables.net https://cdn.tinymce.com https://www.google.com       https://app.addsearch.com https://stats.addsearch.com https://addsearch.com https://d20vwa69zln1wj.cloudfront.net
frame-ancestors 'self' https://intranet.imtins.com https://employees.imtins.com https://secureacceptance.cybersource.com
script-src 'self' https: 'unsafe-inline' https://vaas.acapela-group.com 'unsafe-eval'
connect-src 'self' https: https://api.pusherapp.com wss://ws.pusherapp.com wss://*.firebaseio.com http://localhost:8080
frame-ancestors 'self' http://*.disney.com http://*.diznee.net code.org studio.code.org"
script-src 'self' https://zonglovani.info https://api.mapy.cz 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://zonglovani.info https://mapserver.mapy.cz https://api.mapy.cz https://chart.apis.google.com
style-src 'self' https://zonglovani.info https://api.mapy.cz https://chart.apis.google.com 'unsafe-inline'
style-src https: 'unsafe-inline' http://map.daum.net www.google-analytics.com http://dmaps.daum.net http://postcode.map.daum.net"
"script-src 'self' 'unsafe-eval' 'unsafe-inline'  *.opentok.com *.yandex.ru *.googletagmanager.com *.google.com *.gstatic.com *.google-analytics.com *.facebook.net
img-src 'self'  *.opentok.com  data:    *.weezzo.com  *.yandex.ru *.google-analytics.com  *.google.com  *.facebook.com stats.g.doubleclick.net
img-src 'self' data: *.hz.nl *.hubspot.com www.google.com www.google.nl www.google-analytics.com www.googletagmanager.com www.facebook.com stats.g.doubleclick.net *.zopim.com via.placeholder.com maps.gstatic.com maps.googleapis.com maps.google.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:
"default-src http: https: data: 'unsafe-inline' 'unsafe-eval'"
script-src 'self' https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'
"script-src 'self' *.google-analytics.com *.googleadservices.com *.googletagmanager.com googleads.g.doubleclick.net *.facebook.net *.ads-twitter.com *.twitter.com *.beusable.net *.beusably.net *.cloudflare.com 'unsafe-inline'
img-src 'self' blob: data: mc.yandex.ru vk.com static.ekapusta.com top-fwz1.mail.ru login.vk.com www.facebook.com storage101.lon3.clouddrive.com *.google-analytics.com *.google.com *.google.ru *.doubleclick.net counter.yadro.ru www.googleadservices.com *.googlesyndication.com ekapusta.zendesk.com media.reformal.ru reformal.ru *.zdusercontent.com storage.ekapusta.com *.clouddrive.com bam.nr-data.net x01.aidata.io
style-src 'self' 'unsafe-inline' static.ekapusta.com www.gstatic.com cdnjs.cloudflare.com
font-src 'self' static.ekapusta.com fonts.gstatic.com cdnjs.cloudflare.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: mc.yandex.ru static.ekapusta.com connect.facebook.net top-fwz1.mail.ru *.google-analytics.com www.googleadservices.com kladr-api.ru *.doubleclick.net media.reformal.ru *.gstatic.com *.jquery.com cdnjs.cloudflare.com js-agent.newrelic.com bam.nr-data.net
connect-src 'self' mc.yandex.ru *.google-analytics.com ws://localhost:3000 ws://ekapusta.com bam.nr-data.net top-fwz1.mail.ru storage.ekapusta.com *.clouddrive.com stats.g.doubleclick.net www.facebook.com
frame-src 'self' reformal.ru www.facebook.com connect.facebook.net
"frame-src www.youtube.com https://discordapp.com https://google.com www.google.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com https://maps.googleapis.com https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://spacek.digital https://connect.facebook.net
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com/ads/ https://www.google.cz/ads/ https://maps.gstatic.com https://maps.googleapis.com https://www.facebook.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://spacek.digital
script-src 'unsafe-eval' https://letsencrypt.org https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/
img-src data: https://letsencrypt.org https://www.google-analytics.com https://www.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com
frame-src https://donorbox.org https://www.youtube.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/
"default-src *  'self' data: 'unsafe-inline' 'unsafe-eval'
child-src 'self' http://crowdin.com http://cdn.crowdin.com https://*.facebook.com https://www.google.com/recaptcha/ https://*.youtube.com https://*.youtu.be https://*.vimeo.com https://*.stripe.com https://djtflbt20bdde.cloudfront.net https://connect.facebook.net
connect-src 'self' https://*.cloudinary.com https://*.stripe.com *.helpscoutdocs.com *.helpscout.net *.amplitude.com *.facebook.com api.unsplash.com api.typeform.com images.unsplash.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://crowdin.com http://cdn.crowdin.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googletagmanager.com https://*.google-analytics.com data: https://*.stripe.com https://*.cloudflare.com connect.facebook.net https://djtflbt20bdde.cloudfront.net *.amplitude.com
style-src 'self' 'unsafe-inline' http://crowdin.com http://cdn.crowdin.com https://fonts.googleapis.com https://*.stripe.com https://djtflbt20bdde.cloudfront.net https://use.fontawesome.com https://cdnjs.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://platform.twitter.com https://connect.facebook.net https://cdn.syndication.twimg.com https://fburl.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.fieo.org https://maps.google.com https://e.issuu.com/ https://www.facebook.com https://www.youtube.com http://www.indiantradeportal.in https://www.google.com https://platform.twitter.com http://www.indiantradeportal.in https://staticxx.facebook.com https://syndication.twitter.com
style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com
"default-src data: 'unsafe-inline' 'unsafe-eval' https: blob:
"script-src 'self' vimeo.com https://gist.github.com www.slideshare.net 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://www.dropbox.com https://*.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://js.driftt.com https://embed.small.chat https://static.small.chat https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com 'nonce-e9a16cb0-0b0f-4fc1-9af8-6e9f33f3d5b9' 'sha256-etvssxrwce5clefbzbvzvdrtiroyoxbwwwvevcim5ag=' 'sha256-nzb7w9gyjnurmeidk01d3/detyztrtnxc/dqw7agdy4=' 'sha256-l0tsyaqlac0koby5dcbfawffrs9zxesa+4xg0qdsrdi='
style-src 'self' 'unsafe-inline' https://assets-cdn.github.com https://github.githubassets.com https://assets.hackmd.io https://www.google.com https://fonts.gstatic.com https://*.disquscdn.com https://static.small.chat
font-src 'self' data: https://public.slidesharecdn.com https://assets.hackmd.io https://*.disquscdn.com
"default-src 'self' data: 'unsafe-inline' *
"default-src 'self' 'nonce-eibh7znngjyteae7cb7bghrat4g3chem' https://*.facebook.com https://*.google.com https://*.gstatic.com https://*.twitter.com https://*.ultimatewowguide.com blob: https://*.youtube.com
script-src 'self' 'nonce-eibh7znngjyteae7cb7bghrat4g3chem' https://*.facebook.net https://*.google.com https://*.googleapis.com https://*.twimg.com https://*.twitter.com https://*.ultimatewowguide.com blob: https://*.wowhead.com https://*.youtube.com https://*.zamimg.com  https://*.zencdn.net
img-src 'self' data: https://*.facebook.com https://*.gravatar.com https://*.gstatic.com https://*.twimg.com https://*.twitter.com https://*.ultimatewowguide.com https://*.w.org https://*.zamimg.com
style-src 'self' 'unsafe-inline' https://*.twimg.com https://*.twitter.com https://*.zamimg.com https://*.zencdn.net
"default-src 'self' https://*.coredax.com wss://*.coredax.com:4300 wss://*.coredax.com https://fonts.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://www.google.com https://t1.daumcdn.net https://www.google-analytics.com https://ssl.daumcdn.net https://static.zdassets.com https://ekr.zdassets.com https://coredax.zendesk.com https://rollbar-eu.zendesk.com https://*.zopim.com wss://*.zopim.com https://spi.maps.daum.net data:
script-src 'self' 'unsafe-inline' https://*.coredax.com  https://fonts.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://www.google.com https://t1.daumcdn.net https://www.google-analytics.com https://ssl.daumcdn.net https://static.zdassets.com https://*.zopim.com https://www.googletagmanager.com
style-src 'unsafe-inline' https://*.coredax.com https://fonts.googleapis.com https://cdnjs.cloudflare.com
img-src 'self' data: https://*.coredax.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.kr https://www.gstatic.com https://chart.googleapis.com https://*.zopim.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com  *.googletagservices.com *.googlesyndication.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.google.com *.bootstrapcdn.com  *.instagram.com *.cloudfront.net *.jquery.com *.facebook.com *.facebook.net *.gstatic.com *.tryinteract.com *.standardmedia.co.ke placehold.it/728x90 placehold.it/300x250 polldaddy.com *.polldaddy.com *.twitter.com *.youtube.com  *.syndication.twimg.com log.adaptv.advertising.com *.amazonaws.com  *.ustream.tv *.twimg.com withgoogle.com *.onthe.io *.withgoogle.com https://cdn.ampproject.org https://maxcdn.bootstrapcdn.com *.sde.co.ke https://cdn.probtn.com http://img.youtube.com *.probtn.com *.outbrain.com *.google.co.ke *.cloudflare.com https://soundcloud.com pixel.alexametrics.com *.alexametrics.com *.ampproject.net  *.taboola.com *.viewst.com *.probtn.com *.bkrtx.com *.onesignal.com *.scorecardresearch.com *.bluekai.com
frame-ancestors 'self' https://prd.jp.fid-intl.com https://www.fidelity-online.co.jp https://w37.denshi-bato.webbroker.jp
"frame-ancestors http://www.vistaprint.es https://www.vistaprint.es http://vistaprint.es https://vistaprint.es
"default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.dentoncounty.com *.sitecore.net requirejs.org *.willyweather.com cdnres.willyweather.com *.siteimprove.com *.googlecode.com *.cloudflare.com *.fontawesome.com *.sharethis.com www.google-analytics.com *.google.com *.mailchimp.com
"img-src 'self' d8yi8jifmzjzr.cloudfront.net d1lbs1a20jqs8l.cloudfront.net d2f94ihqbiayoj.cloudfront.net d3geq2kneybzsf.cloudfront.net d2js22npb95j0e.cloudfront.net d39eo07iavn1vt.cloudfront.net https: blob: data:
frame-src 'self' https://bitpay.com https://www.google.com/recaptcha/api2/ https://chat.chatra.io bitcoin: bitcoincash: https://www.youtube.com https://player.vimeo.com https://intercom-sheets.com https://bitpay.applytojob.com https://landing.bitpay.com https://bid.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://js.stripe.com/
img-src 'self' https://scontent.cdninstagram.com https://az814671.vo.msecnd.net https://i.vimeocdn.com
connect-src 'self' https://www.google-analytics.com https://api.momentumdash.com https://script.google.com https://script.googleusercontent.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' www.google.com/recaptcha/api/ www.google-analytics.com static-na.payments-amazon.com api-cdn.amazon.com payments.amazon.com js.stripe.com connect.facebook.net
font-src https: 'self' data: d2sx9mrt4zumaq.cloudfront.net
style-src https: 'self' 'unsafe-inline' 'unsafe-eval' d2sx9mrt4zumaq.cloudfront.net
frame-src 'self' www.amazon.com static-na.payments-amazon.com api-cdn.amazon.com payments.amazon.com www.paypal.com paypal.com js.stripe.com discordapp.com player.twitch.tv player.vimeo.com sketchfab.com w.soundcloud.com www.liveleak.com www.gamereactor.eu www.youtube-nocookie.com www.youtube.com
child-src 'self' api-cdn.amazon.com payments.amazon.com www.paypal.com paypal.com js.stripe.com discordapp.com player.twitch.tv player.vimeo.com sketchfab.com w.soundcloud.com www.liveleak.com www.gamereactor.eu www.youtube-nocookie.com www.youtube.com"
"default-src 'self' s3.amazonaws.com www.youtube.com csi.gstatic.com *
font-src 'self' fonts.gstatic.com fonts.googleapis.com www.tinymce.com
img-src 'self' 'unsafe-inline' data: blob: *
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagservices.com www.google-analytics.com securepubads.g.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com 7233492.collect.igodigital.com optimize.google.com * blob:
style-src 'self' 'unsafe-inline' fonts.googleapis.com *
"default-src 'self' dwl.dawconnect.com maps.google.de www.google.com connect.facebook.net
img-src  'self' data: *.bestservice.de *.bestservice.com *.bestservice.fr *.bsdwl.de *.google-analytics.com connect.ekomi.de *.facebook.com *.doubleclick.net *.google.com *.google.de
media-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr
script-src 'self' data: *.bestservice.de *.bestservice.com *.bestservice.fr *.google-analytics.com connect.ekomi.de www.googleadservices.com *.jwpcdn.com dwl.dawconnect.com *.facebook.net www.googletagmanager.com *.facebook.com *.google.com *.google.de *.doubleclick.net 'unsafe-inline' 'unsafe-eval'
worker-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr *.doubleclick.net www.google.com www.google.de
font-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr fonts.gstatic.com
style-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr fonts.googleapis.com 'unsafe-inline'
script-src 'self' https://www.pfaltzandbauer.com https://ssl.google-analytics.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com
"frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.com.hk  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkram.com  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.clientam.ch  *.clientam.com.hk  *.greenwichcompliance.com
"default-src 'self' https://*.facebook.net http://adv01st.com http://web.xoffers.eu https://*.vk.com https://googleadservices.com https://*.googleadservices.com http://googleadservices.com http://*.googleadservices.com https://*.googleapis.com http://*.googlesyndication.com https://*.yandex.ru https://yandex.ru http://*.yandex.net http://yandex.net http://yandex.st http://*.yandex.st http://yastatic.net http://*.yastatic.net http://*.google-analytics.com http://advjump.com http://*.advjump.com https://advjump.com https://*.advjump.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://googleapis.com http://*.googleapis.com http://googleapis.com http://*.mail.ru http://mail.ru https://*.mail.ru https://mail.ru http://*.yandex.ru http://yandex.ru http://*.google-analytics.com http://googlesyndication.com http://*.googlesyndication.com http://google-analytics.com http://web.xoffers.eu http://*.yandex.net http://yandex.net http://yandex.st http://*.yandex.st http://yastatic.net http://*.yastatic.net http://google.ru http://*.google.ru http://*.vk.com http://vk.com http://*.yadro.ru http://yadro.ru https://*.google-analytics.com https://*.vk.com https://google-analytics.com http://*.ok.ru http://*.google.com http://*.facebook.com http://ok.ru http://google.com http://facebook.com http://*.odnoklassniki.ru http://odnoklassniki.ru http://plus.google.com https://*.yandex.ru https://yandex.ru https://googlesyndication.com https://*.googlesyndication.com https://*.yandex.net https://yandex.net https://yandex.st https://*.yandex.st https://yastatic.net https://*.yastatic.net https://google.ru https://*.google.ru https://vk.com https://*.yadro.ru https://yadro.ru https://*.ok.ru https://*.google.com https://*.facebook.com https://ok.ru https://google.com https://facebook.com https://*.odnoklassniki.ru https://odnoklassniki.ru https://plus.google.com  http://*.googlesyndication.com http://*.googlesyndication.com http://advjump.com http://*.advjump.com https://advjump.com https://*.advjump.com http://*.facebook.net
script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline'  https://js.stripe.com/v2/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://www.google-analytics.com
img-src 'self' data: https://q.stripe.com/ https://www.google-analytics.com
frame-src 'self' https://js.stripe.com/ https://www.google.com/recaptcha/ https://www.gstatic.com
"default-src 'self' *.duria.de mail.duria.de:27070 data: 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ajax.googleapis.com https://fonts.googleapis.com
frame-src 'self' 'unsafe-inline' *.duria.de https://www.google.com/recaptcha/ https://www.google.com/maps/"
"script-src http: https: 'unsafe-inline' 'unsafe-eval'
style-src 'unsafe-inline' *.googleapis.com *.gstatic.com https: data:
script-src 'unsafe-inline' 'unsafe-eval' *.flickr.com https:
font-src 'self' allureprojects.com *.gstatic.com *.bootstrapcdn.com data: https:
default-src 'self' 'unsafe-inline' data: https: wss: blob:
connect-src 'self' https://snapchat-organizations-api.appspot.com https://adsapi.snapchat.com https://selfserve-api-dot-softserve-prod.appspot.com https://adsapisc.appspot.com https://storage.googleapis.com https://api.braintreegateway.com https://accounts.snapchat.com https://client-analytics.braintreegateway.com wss://*.zopim.com https://*.zopim.com https://snap-web-chat.appspot.com https://www.paypal.com https://storage.googleapis.com
script-src 'self' 'unsafe-inline' https://apis.google.com https://www.google-analytics.com https://snap-central.appspot.com https://www.paypal.com
style-src 'self' 'unsafe-inline' blob: https://snap-central.appspot.com
media-src 'self' data: blob: https://storage.googleapis.com
frame-src 'self' https://accounts.google.com https://assets.braintreegateway.com https://www.paypal.com
img-src 'self' data: https://storage.googleapis.com https://www.google-analytics.com https://snap-central.appspot.com https://csi.gstatic.com https://v2uploads.zopim.io https://render.bitstrips.com https://www.paypal.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval'  https: data: http://fonts.googleapis.com http://fonts.gstatic.com http://www.google-analytics.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com http://graph.facebook.com http://widgets.pinterest.com http://maps.google.com http://csi.gstatic.com http://maps.gstatic.com http://maps.googleapis.com http://www.linkedin.com http://api-public.addthis.com http://localhost http://widget.supercounters.com http://pagead2.googlesyndication.com/ http://pagead2.googlesyndication.com/ http://staticxx.facebook.com http://www.whatsupcams.com http://epixel.moj-web.net http://www.youtube.com https://www.whatsupcams.com http://localhost
"default-src 'self' *.fg.cz localhost localhost-promo
font-src 'self' data: fonts.gstatic.com *.fg.cz localhost localhost-promo *.zopim.com
connect-src 'self' analytics.monkeytracker.cz *.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com *.fg.cz localhost-promo *.bileto.com *.zdassets.com arrivacz.zendesk.com *.zopim.com wss://*.zopim.com *.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com *.fg.cz localhost-promo analytics.monkeytracker.cz https://connect.facebook.net *.bileto.com *.arriva.cz *.issuu.com *.zdassets.com cdnjs.cloudflare.com arrivacz.zendesk.com *.zopim.com *.instagram.com
form-action 'self' *.fg.cz localhost localhost-promo
frame-src 'self' www.youtube.com www.googletagmanager.com *.fg.cz localhost localhost-promo *.issuu.com *.zdassets.com arrivacz.zendesk.com *.zopim.com
child-src 'self' www.youtube.com www.googletagmanager.com *.fg.cz localhost localhost-promo *.issuu.com *.zdassets.com arrivacz.zendesk.com *.zopim.com
frame-ancestors 'self' *.fg.cz localhost localhost-promo
img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com *.fg.cz localhost localhost-promo analytics.monkeytracker.cz *.doubleclick.net *.google.com *.facebook.com *.bileto.com *.google.cz *.zopim.com *.instagram.com *.cdninstagram.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.fg.cz localhost localhost-promo
object-src 'self' *.fg.cz localhost localhost-promo"
"frame-ancestors 'self' *.sc.com *.standardchartered.com *.standardchartered.co.in *.standardchartered.co.th *.standardchartered.com.hk *.standardchartered.com.my *.standardchartered.com.sg *.standardchartered.co.id *.standardchartered.com.tw"
"default-src 'self' yastatic.net *.yandex.ru *.yandex.net *.googlesyndication.com *.disqus.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.disqus.com *.yastatic.net *.yandex.net *.s2block.com *.tizerlady.biz *.copyright-law.ru *.tizerlady.info *.str100.ru *.lcads.ru *.google.com *.directadvert.ru *.yandex.st *.leadiacloud.com *.yandex.ru *.googleapis.com *.s1venus.biz *.ladycash.ru vk.com s1block.com *.s1block.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com *.google.ru *.yastatic.net yastatic.net *.cloudfront.net
img-src 'self' https://stats.g.doubleclick.net  http://tr-gmtdmp.mookie1.com http://www.google-analytics.com www.googleadservices.com https://www.facebook.com/  https://*.turkiyefinans.com.tr/  https://maps.gstatic.com/ https://maps.googleapis.com/  https://googleads.g.doubleclick.net https://www.google.com https://www.google.com.tr  https://vec01.maps.yandex.net/ https://vec02.maps.yandex.net/ https://vec03.maps.yandex.net/ https://vec04.maps.yandex.net/
script-src 'self' http://www.google-analytics.com https://www.googletagmanager.com  https://connect.facebook.net  https://ajax.googleapis.com https://t.qservz.com https://maps.googleapis.com www.googleadservices.com https://*.turkiyefinans.com.tr/  https://tpc.googlesyndication.com https://mc.yendex.ru  https://api-maps.yandex.ru 'unsafe-eval'  'unsafe-inline'
frame-src 'self' https://*.turkiyefinans.com.tr/ https://www.facebook.com/ https://ad.adrttt.com/ https://tpc.googlesyndication.com www.youtube.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com use.fontawesome.com *.google.com ajax.googleapis.com www.gstatic.com www.google-analytics.com player.vimeo.com
connect-src 'self' data: https://ajax.googleapis.com https://de.api4load.biz https://pfrest.pboss.de https://pfrest.petafuel.net https://pfrest.wozutesten.de https://translate.googleapis.com https://www.facebook.com/tr/ https://www.fndsda.net https://www.paypal.com
frame-src 'self' data: https://ad.ad-srv.net https://client.comprigo.com https://hal9000.redintelligence.net https://optimize.google.com https://pixel.bsmartdata.com/ https://r.adc-srv.net https://staticxx.facebook.com https://tools.petafuel.de https://www.facebook.com https://www.fndsda.net https://www.googletagmanager.com https://www.paypal.com https://www.sandbox.paypal.com
script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://ad4mat.de https://bid.g.doubleclick.net https://cdn.pboss.de https://cdn.petafuel.net https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://connect.facebook.net https://containertags.belboon.de https://data1.eurosty.com https://data1.mein-bmi.com https://data1.routenplaner-karten.com https://data1.ubersetzung-app.com https://eu5.heatmap.it https://googleads.g.doubleclick.net https://imgsrv.io https://maytrics.marvellousmachine.net https://online.adservicemedia.dk https://optimize.google.com https://orangebuddies.go2cloud.org https://pstatic.davebestdeals.com https://s3.eu-central-1.amazonaws.com https://ssl.google-analytics.com https://static.donation-tools.org https://tagmanager.google.com https://tpc.googlesyndication.com https://translate.googleapis.com https://www.financeads.net https://www.fndsda.net https://www.google-analytics.com https://www.google.com/ads/user-list https://www.googleadservices.com https://www.googletagmanager.com https://www.paypal.com https://www.paypalobjects.com https://www.performancehero.de
"frame-ancestors 'self' *.bswhealth.com *.mybswhealth.com bswsso-prod-staging.azurewebsites.net"
"frame-ancestors 'self' awards.ratingruneta.ru http://awards.ratingruneta.ru *.ratingruneta.ru ratingruneta.ru https://mc.yandex.ru https://yastatic.net webvisor.com http://webvisor.com"
img-src 'self' data: https: *.gravatar.com *.tokol.de *.doc-schneidi.de
font-src 'self' https: *.gstatic.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.53er.de *.computer-babenhausen.de *.tokol.de *.doc-schneidi.de
style-src 'self' https: *.tokol.de 'unsafe-inline'
"default-src 'self' https://*.googleapis.com https://maps.google.com https://maps.gstatic.com
img-src 'self' https://maps.google.com https://*.googleapis.com https://maps.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://maps.google.com https://code.jquery.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.bootstrapcdn.com *.cloudfront.net *.google.com *.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.hotjar.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.doubleclick.net *.facebook.com *.facebook.net *.trackedlink.net cdn-akamai.mookie1.com cdn.districtm.ca secure.adnxs.com tags.tiqcdn.com *.authorize.net *.signifyd.com *.livechatinc.com *.bing.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hsleadflows.net *.cloudfront.net *.dotmailer-surveys.com *.cloudflare.com *.jquery.com
font-src 'self' data: *.gstatic.com *.bootstrapcdn.com
img-src 'self' data: blob: *.paypalobjects.com *.signifyd.com *.online-metrix.net *.google-analytics.com *.doubleclick.net *.gstatic.com *.googleapis.com *.cdninstagram.com *.google.com *.facebook.com *.google.ca *.livechatinc.com *.hubspot.com *.cloudfront.net *.bronto.com *.abmr.net *.bing.com *.cloudflare.com *.jquery.com
frame-src 'self' acdn.adnxs.com tags.tiqcdn.com *.hotjar.com *.addthis.com *.googletagmanager.com *.moneris.com *.signifyd.com *.youtube.com *.vimeo.com *.doubleclick.net *.livechatinc.com *.dotmailer-surveys.com *.facebook.net
connect-src 'self' *.authorize.net *.addthis.com *.luckyorange.net *.cloudfront.net *.hubspot.com *.googleapis.com *.hubapi.com *.visitors.live wss://*.visitors.live wss://visitors.live *.doubleclick.net *.cloudflare.com
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thebalancecareers.com *.qa.aws.thebalancecareers.com atlas.thebalancecareers.com atlas.local.thebalancecareers.com"
"default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'
script-src  'self'  https://*.demandtec.com/ https://*.coremetrics.com 'unsafe-inline' 'unsafe-eval'
child-src 'self' https://*.demandtec.com https://demandtec.360pi.com data: blob: 'unsafe-inline' 'unsafe-eval'
object-src https://*.demandtec.com 'self' 'unsafe-inline' 'unsafe-eval'
frame-ancestors 'self' https://*.demandtec.com 'unsafe-inline' 'unsafe-eval'
"frame-ancestors 'self' https://*.usagym.org http://*.usagym.org http://*.usagymparents.com http://*.usagym.info http://*.gymnasticsfoundation.org https://*.gymnasticsfoundation.org http://*.usagymchamps.com https://*.usagymchamps.com http://usagymfans.us-east-1.elasticbeanstalk.com https://usagymfans.us-east-1.elasticbeanstalk.com http://*.kovendesign.com https://*.kovendesign.com https://usagym.hqam6nre-liquidwebsites.com
"default-src 'self' hwdrivers.com *.facebook.com *.g.doubleclick.net *.googlesyndication.com *.google.com www.youtube.com s7.addthis.com
frame-src 'self' *.google.com *.pinterest.com www.youtube.com *.g.doubleclick.net *.addthis.com *.facebook.com
connect-src 'self' hwdrivers.com top-fwz1.mail.ru www.google.co.id www.google.com yandex.ru *.yandex.ru mc.yandex.by mc.yandex.kz mc.yandex.fr mc.yandex.ua kraken.rambler.ru google-analytics.com *.g.doubleclick.net www.google.com translate.googleapis.com *.google-analytics.com csi.gstatic.com stats.g.doubleclick.net *.addthis.com *.akamaihd.net
child-src 'self' blob: *.google.com watersoul.com *.facebook.com mc.yandex.ru *.addthis.com *.googlesyndication.com googleads.g.doubleclick.net cm.g.doubleclick.net securepubads.g.doubleclick.net
style-src 'self' 'unsafe-inline' *.google.com use.fontawesome.com *.googleapis.com
font-src 'self' data: http://fonts.gstatic.com fonts.gstatic.com cdn.joinhoney.com use.fontawesome.com *.google.com *.addthis.com
img-src 'self' https: data: *.hwdrivers.com top-fwz1.mail.ru
"default-src 'self' *.apple.com *.akamaihd.net video.itunes.apple.com
font-src 'self' data: data: fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: l.gravatar.com invertise.s3.amazonaws.com a.adroll.com cdn.heapanalytics.com www.google-analytics.com invertise.s3.amazonaws.com api.privilegemovies.com s.ytimg.com code.jquery.com connect.facebook.net
img-src 'self' 'unsafe-inline' data: asset.beyonce.com asset.beyonce.com img.youtube.com secure.adnxs.com heapanalytics.com 1.gravatar.com c.bing.com www.google-analytics.com match.adsrvr.org stats.g.doubleclick.net sync.mathtag.com www.google.com p.rfihub.com dis.criteo.com www.beyonce.com cm.g.doubleclick.net m.adnxs.com router.infolinks.com t.mookie1.com t.wayfair.com cms.quantserve.com www.beyonce.com aws-beyonce.parkwood-digital.com code.jquery.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:
img-src data: 'self' 'unsafe-inline' 'unsafe-eval' http: https:
img-src 'self' data: gust.edu.kw *.gust.edu.kw www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gust.edu.kw *.google-analytics.com *.doubleclick.net *.google.com *.google.ca
frame-src 'self' *.gust.edu.kw goo.gl www.google.com https://www.youtube.com
"frame-src 'self' www.elsemijoias.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
"img-src 'self' https://siwecos.de https://www.google-analytics.com https://www.google.com/recaptcha/
script-src 'self'  'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.rfksrv.com https://d26opx5dl8t69i.cloudfront.net https://ssl.gstatic.com https://s.ytimg.com https://vvsclicks.marketwide.online https://s.pinimg.com https://bat.bing.com/ https://*.comm100.com https://*.channeladvisor.com https://*.google.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google.xyx/ads/user-list https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.pinterest.com https://*.shopperapproved.com https://connect.facebook.net https://*.facebook.com https://www.paypalobjects.com https://www.paypal.com https://www.sandbox.paypal.com https://seal.networksolutions.com https://www.youtube.com https://i.ytimg.com https://*.valleyvet.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://7231874.collect.igodigital.com https://s1.cnnx.io/api
img-src 'self' data: https://stats.g.doubleclick.net https://bat.bing.com https://*.rfksrv.com https://d26opx5dl8t69i.cloudfront.net https://click.s7.exacttarget.com https://vvsclicks.marketwide.online https://c683207.ssl.cf2.rackcdn.com/20842-r.gif https://*.comm100.com https://*.channeladvisor.com https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com https://www.google.xyx/ads/user-list https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.pinterest.com https://*.shopperapproved.com https://connect.facebook.net https://*.facebook.com https://www.paypalobjects.com https://www.paypal.com https://www.sandbox.paypal.com https://seal.networksolutions.com https://www.youtube.com https://i.ytimg.com https://*.valleyvet.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://pinterest.adsymptotic.com https://nova.collect.igodigital.com
connect-src 'self' https://*.valleyvet.com https://*.comm100.com https://www.paypal.com https://www.sandbox.paypal.com https://*.google.com https://www.google-analytics.com/ https://ct.pinterest.com
frame-src 'self' https://*.valleyvet.com https://*.pinterest.com https://bid.g.doubleclick.net/ https://www.youtube.com https://*.google.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://www.paypal.com https://www.sandbox.paypal.com https://www.googletagmanager.com/ns.html https://connect.facebook.net https://*.facebook.com
frame-ancestors 'self' https://*.valleyvet.com https://bid.g.doubleclick.net/ https://www.youtube.com https://*.google.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://www.paypal.com https://www.sandbox.paypal.com https://www.googletagmanager.com/ns.html
script-src 'self' 'unsafe-inline' vk.com  connect.facebook.net wchat.freshchat.com serve.albacross.com passwork.bitrix24.ru stats.g.doubleclick.net www.google.com checkout.stripe.com js.stripe.com www.google-analytics.com ajax.googleapis.com
connect-src 'self' 'unsafe-inline' collect.albacross.com checkout.stripe.com
frame-src 'self' www.facebook.com  wchat.freshchat.com passwork.webpush.freshchat.com passwork.bitrix24.ru checkout.stripe.com js.stripe.com www.google.com
script-src 'self' cdn.ravenjs.com use.typekit.net *.google-analytics.com *.hotjar.com *.clover.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com 'unsafe-inline' 'unsafe-eval' https://www.workable.com
style-src 'self' 'unsafe-inline' use.typekit.net cdnjs.cloudflare.com *.clover.com
font-src 'self' data: use.typekit.net fonts.typekit.net static.hotjar.com *.clover.com https://js.intercomcdn.com https://cdn.joinhoney.com
img-src 'self' data: blob: p.typekit.net *.google-analytics.com *.hotjar.com *.amazonaws.com *.clover.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://intercom.help
connect-src 'self' auth.tryflux.com api.tryflux.com api.test.tryflux.com performance.typekit.net http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com *.amazonaws.com *.clover.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://intercom.help
frame-src *.youtube.com *.vimeo.com vars.hotjar.com *.tryflux.com *.clover.com *.intercom-sheets.com https://intercom-sheets.com
font-src 'self' https://prodfrontendcdn.azureedge.net https://az579219.vo.msecnd.net https://dq4irj27fs462.cloudfront.net https://fonts.gstatic.com data:
script-src 'self' https://prodfrontendcdn.azureedge.net https://az579219.vo.msecnd.net https://az416426.vo.msecnd.net https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://ajax.googleapis.com https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://dq4irj27fs462.cloudfront.net https://munchkin.marketo.net 'sha256-g9l9f7eslh09qglxj1hzjx0j1kmzugp15o/v1gattt0='
connect-src 'self' https://www.google-analytics.com https://dc.services.visualstudio.com https://subscribeapi.tresorit.com https://webapi.tresorit.com https://*.hotjar.com wss://*.hotjar.com https://chat.userlike.com https://api.userlike.com https://*.mktoresp.com https://stats.g.doubleclick.net wss://chat.userlike.com:443 https://prodfrontendcdn.azureedge.net
style-src 'self' 'unsafe-inline' https://prodfrontendcdn.azureedge.net https://az579219.vo.msecnd.net https://fonts.googleapis.com
frame-src 'self' https://vars.hotjar.com https://apisandbox.zuora.com https://www.zuora.com https://www.youtube-nocookie.com https://az579219.vo.msecnd.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' uokik.gov.pl www.google-analytics.com ssl.google-analytics.com *.googleapis.com *.googlecode.com *.google.com *.code.jquery.com"
"default-src 'self' *.facebook.com *.facebook.net *.fbsbx.com player.vimeo.com www.youtube.com www.youtube-nocookie.com
img-src 'self' blob: data: *.facebook.com *.fbsbx.com facebook.net facebook.com dmp.adform.net dpm.demdex.net graph.facebook.com raiffeisen.demdex.net statistics.raiffeisen.ch statisticssta.raiffeisen.ch scontent.xx.fbcdn.net stats.g.doubleclick.net www.google-analytics.com
style-src 'self' 'unsafe-inline' facebook.net facebook.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com connect.facebook.net facebook.net facebook.com google-analytics.com storage.googleapis.com www.google.com www.gstatic.com www.google-analytics.com
connect-src 'self' dpm.demdex.net dmp.adform.net fonts.googleapis.com google-analytics.com graph.facebook.com statistics.raiffeisen.ch statisticssta.raiffeisen.ch www.google.com www.gstatic.com
frame-src 'self' test.saferpay.com saferpay.com www.saferpay.com raiffeisen.demdex.net *.facebook.com *.facebook.net player.vimeo.com www.google.com www.youtube.com www.youtube-nocookie.com
child-src 'self' www.google.com test.saferpay.com saferpay.com www.saferpay.com raiffeisen.demdex.net *.facebook.com *.facebook.net www.youtube-nocookie.com player.vimeo.com www.youtube.com"
"frame-src https://*.g.doubleclick.net 'self' https://*.facebook.com https://*.google.com https://*.youtube.com https://*.api.useinsider.com
script-src-elem https://*.google-analytics.com https://*.vimeo.com https://*.hs-scripts.com https://*.jquery.com https://*.youtube.com https://*.hscollectedforms.net http://*.hs-analytics.net https://*.googletagmanager.com data: https://*.google.com http://*.google-analytics.com https://*.api.useinsider.com https://*.soundcloud.com https://*.googleapis.com https://*.crazyegg.com https://*.gstatic.com http://*.gstatic.com https://*.facebook.net http://*.hs-scripts.com http://*.googleapis.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.hs-analytics.net
style-src http://*.googleapis.com https://*.googleapis.com 'unsafe-inline' https://*.api.useinsider.com 'self'
connect-src https://*.lever.co https://*.g.doubleclick.net https://*.google-analytics.com https://*.hubspot.com 'self' data: https://*.facebook.com http://*.google-analytics.com https://*.jquery.com https://*.api.useinsider.com
script-src https://*.google-analytics.com https://*.vimeo.com https://*.hs-scripts.com https://*.jquery.com https://*.youtube.com https://*.hscollectedforms.net http://*.hs-analytics.net https://*.googletagmanager.com data: https://*.google.com http://*.google-analytics.com 'unsafe-inline' https://*.api.useinsider.com https://*.soundcloud.com https://*.googleapis.com https://*.crazyegg.com https://*.facebook.net http://*.hs-scripts.com http://*.googleapis.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.hs-analytics.net 'self' 'unsafe-eval'
font-src data: https://*.gstatic.com http://*.gstatic.com 'self'
img-src https://*.google.com.kh https://*.google.ae https://*.g.doubleclick.net https://*.google-analytics.com https://*.useinsider.com https://*.hubspot.com https://*.gstatic.com https://*.google.ru http://*.gstatic.com 'self' https://*.google.nl data: https://*.facebook.com https://*.google.com.tr https://*.google.com http://*.google-analytics.com"
"frame-ancestors 'self' http://my.conning http://portaluat.net.conning.com https://my.conning.com"
"script-src 'self' *.disqus.com *.disquscdn.com clients1.google.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' *.disqus.com *.disquscdn.com 'unsafe-inline'
frame-src d1ebsyxxbc7tep.cloudfront.net *.sturgiswebservices.com *.google.com *.masterpass.com *.visa.com *.americanexpress.com *.vpsenv.com
"default-src 'self' https: media-src 'self' blob: data: http://bat.bing.com/ http://m.addthisedge.com http://*.addthis.com/ http://maps.google.com/ http://*.googleapis.com/ http://*.gstatic.com/ 'unsafe-inline' 'unsafe-eval'"
"child-src 'self' test.authorize.net accept.authorize.net godfatherspizza.fbmta.com www.google.com
connect-src 'self' maps.googleapis.com example.com *.rlets.com
font-src 'self' data: test.authorize.net accept.authorize.net maxcdn.bootstrapcdn.com fonts.gstatic.com at.alicdn.com
frame-src 'self' https://accept.authorize.net https://test.authorize.net https://www.google.com
img-src 'self' data: test.authorize.net accept.authorize.net images.quikorder.net images.godfathers.com s3-us-west-2.amazonaws.com www.googletagmanager.com www.google-analytics.com *.gstatic.com *.googleapis.com www.facebook.com *.rlets.com stats.g.doubleclick.net
script-src 'self' test.authorize.net accept.authorize.net maxcdn.bootstrapcdn.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com connect.facebook.net *.rlets.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' test.authorize.net accept.authorize.net maxcdn.bootstrapcdn.com 'unsafe-inline' unpkg.com *.googleapis.com"
"default-src 'unsafe-inline' script-src 'unsafe-eval' https://www.myemploywise.com https://myemploywise.com  https://www.chipsoft.in http://www.myemploywise.com https://ssl.google-analytics.com https://beacon.errorception.com https://d36mpcpuzc4ztk.cloudfront.net https://www.google.com https://ps3.pubnub.com https://chat.freshdesk.com https://ps1.pubnub.com https://ps16.pubnub.com https://pubnub.com https://ps19.pubnub.com https://ps5.pubnub.com https://ps12.pubnub.com https://ps18.pubnub.com https://ps17.pubnub.com https://ps2.pubnub.com https://ajax.googleapis.com https://ps13.pubnub.com https://ps8.pubnub.com https://col.site24x7rum.com https://static.site24x7rum.com https://js.braintreegateway.com/v1/braintree.js http://www.adobe.com https://www.myemploywise.com:3000 https://maxcdn.bootstrapcdn.com/font-awesome/2.0/font/ http://code.angularjs.org/1.2.1/angular-animate.js"
"script-src 'self' https://use.fontawesome.com https://ajax.aspnetcdn.com https://www.googletagmanager.com http://localhost:35729 https://connect.facebook.net 'sha256-jyrzp5glbwqgmzgdvzzqqdfpau4vks4prfdcrxd0h0e' 'sha256-tnxve8bf3/e8bo/mbrsxgh+z9puktp5ao4gfyiw70nc=' 'sha256-w+eglquygm1yhki620bm18u43jxcbzodylksdmnyrru=' 'sha256-fqn00zcmpwsklb303ang/oiqxszayk9zle0edqxpezi=' https://az416426.vo.msecnd.net https://code.jquery.com
style-src 'self' https://fonts.googleapis.com https://ajax.aspnetcdn.com https://use.fontawesome.com 'sha256-u/pqywxkyhj7zn3qhj6+c188pl4elksptl1kkhzdbz0='
font-src 'self' https://fonts.gstatic.com https://ajax.aspnetcdn.com https://use.fontawesome.com
default-src 'self' https://staticxx.facebook.com https://www.facebook.com https://test.sqweee.com https://www.sqweee.com https://sqweee.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.auth0.com *.googleadservices.com *.gstatic.com *.google.com *.facebook.net *.bitly.com *.googlesyndication.com *.googleapis.com *.crwdcntrl.net *.googletagservices.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.hotjar.com *.heapanalytics.com *.effectivemeasure.net *.appdynamics.com *.fullstory.com *.zopim.com *.affinity.com *.affinitymatrix.com ic-affinitymatrix-afn.netdna-ssl.com *.adnxs.com *.forkcdn.com *.foxpush.com *.foxpush.net *.trovit.com *.google.ae code.jquery.com *.what3words.com *.teads.tv *.instana.io *.serving-sys.com *.surveymonkey.com"
script-src 'self' 'unsafe-inline' freegeoip.net *.krea.at cdn.sedus.com *.google-analytics.com *.googleapis.com
style-src 'self' 'unsafe-inline' cdn.sedus.com *.fonts.net fonts.googleapis.com
font-src 'self' cdn.sedus.com fonts.gstatic.com *.fonts.net
child-src 'self' blob: cdn.dochub.com content.googleapis.com accounts.google.com www.google.com docs.google.com js.stripe.com platform.twitter.com syndication.twitter.com www.youtube.com
connect-src 'self' blob: *.gravatar.com *.nr-data.net *.pusher.com api.onedrive.com api.rollbar.com cdn.dochub.com docs.google.com example.com graph.microsoft.com maps.gstatic.com platform.twitter.com sentry.io stats.g.doubleclick.net ws://ws.pusherapp.com wss://ws.pusherapp.com wss://ws.pusherapp.com:443 www.dropbox.com www.google.com www.googleapis.com
font-src 'self' data: cdn.dochub.com fonts.gstatic.com maxcdn.bootstrapcdn.com
frame-src 'self' blob: accounts.google.com cdn.dochub.com content.googleapis.com dochub.com www.google.com docs.google.com www.gstatic.com www.youtube.com js.stripe.com platform.twitter.com syndication.twitter.com
script-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.gravatar.com *.newrelic.com *.nr-data.net *.pusher.com apis.google.com api.rollbar.com br-rx.atatus.com cdn.dochub.com cdn.syndication.twimg.com cdnjs.cloudflare.com docs.google.com dmc1acwvwny3.cloudfront.net/atatus.js js.live.net js.stripe.com maps.gstatic.com maxcdn.bootstrapcdn.com platform.twitter.com www.dropbox.com www.google-analytics.com www.google.com www.gstatic.com
style-src 'self' 'unsafe-inline' cdn.dochub.com docs.google.com fonts.googleapis.com maps.gstatic.com maxcdn.bootstrapcdn.com platform.twitter.com
"default-src 'self' http://* https://* blob: data:
script-src 'self' 'unsafe-inline' http://* https://* blob: 'unsafe-eval' data:
connect-src * 'self' http://* https://* blob: data:
img-src data: 'self' http://* https://* blob:
style-src 'self' 'unsafe-inline' http://* https://* blob: data:
font-src 'self' data: http://* https://* blob:
connect-src 'self' https://api.localethereum.com https://api.localethereumapi.com https://proxy.api.localethereumapi.com https://localethereum-user-blobs.s3.amazonaws.com https://mainnet.infura.io
script-src 'self' 'nonce-2d41df91cf5d4fac806bf4f438facf76' https://www.google-analytics.com/ https://maps.googleapis.com/ https://static.getclicky.com/ https://in.getclicky.com/ https://cdn.carbonads.com/ http://srv.carbonads.net/ https://adn.fusionads.net/ https://m.servedby-buysellads.com/ https://srv.buysellads.com/ https://platform.twitter.com/ https://static.ads-twitter.com/ https://analytics.twitter.com/ https://codepen.io/ https://assets.codepen.io/ https://cdn.syndication.twimg.com/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://platform.twitter.com/ https://ton.twimg.com/
child-src 'self' https://www.youtube.com/ https://speakerdeck.com/ https://player.vimeo.com/ https://syndication.twitter.com/ https://platform.twitter.com/ https://codepen.io/
connect-src 'self' https://www.gravatar.com/ https://i.imgur.com/ https://api.github.com/ https://maps.googleapis.com/ https://www.google-analytics.com/
img-src 'self' http://assets.servedby-buysellads.com/ http://abs.twimg.com/ http://platform.twitter.com/ http://t.co/i/ https: data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' remontka.pro https://storage.googleapis.com https://www.googletagservices.com https://vk.com https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ *.yadro.ru http://code.jquery.com *.googleadservices.com https://*.googleadservices.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com *.google.com.ua http://*.google.com.ua https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru
frame-src 'self' 'unsafe-inline' remontka.pro https://money.yandex.ru https://vk.com remontka.pro https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ *.googlevideo.com http://code.jquery.com *.googleadservices.com https://*.googleadservices.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com https://st.yandexadexchange.net http://yandexadexchange.net http://st.yandexadexchange.net *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' remontka.pro https://storage.googleapis.com https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ *.googleadservices.com https://*.googleadservices.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com *.google.com.ua http://*.google.com.ua https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com data:
object-src 'self' *.remontka.pro remontka.pro https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ *.googleadservices.com https://*.googleadservices.com http://*.ytimg.com *.macromedia.com *.adobe.com https://*.adobe.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com *.google.com.ua http://*.google.com.ua https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com
img-src 'self' remontka.pro yadro.ru https://vk.com *.yadro.ru *.googleadservices.com https://*.googleadservices.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com *.google.com.ua http://*.google.com.ua https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com data:
font-src 'self' remontka.pro *.googleapis.com *.gstatic.com *.googlevideo.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://cdnjs.cloudflare.com data:
connect-src 'self' remontka.pro https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ http://code.jquery.com *.googleadservices.com *.googlevideo.com https://*.googleadservices.com *.googleapis.com https://*.googleapis.com *.gstatic.com gstatic.com https://gstatic.com https://*.gstatic.com *.doubleclick.net https://*.doubleclick.net apis.google.com https://apis.google.com *.googlesyndication.com https://*.googlesyndication.com google-analytics.com *.google-analytics.com https://*.google-analytics.com *.yandex.ru https://*.yandex.ru yandex.ru https://yandex.ru *.yandex.net yandex.net https://yastatic.net *.yastatic.net yastatic.net mc.yandex.ru google.com *.google.com https://*.google.com https://google.com *.google.com.ua http://*.google.com.ua https://*.google.com.ua google.ru *.google.ru http://*.google.ru https://*.google.ru an.yandex.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://translate.googleapis.com
media-src 'self' remontka.pro https://www.youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com/ *.googlevideo.com http://*.ytimg.com youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.flickr.com *.staticflickr.com
style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com *.facebook.com *.googleapis.com *.twimg.com
frame-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com
font-src 'self' data: * https://fonts.gstatic.com https://js.intercomcdn.com https://feed.useriq.com
style-src 'self' https://fonts.googleapis.com https://feed.useriq.com 'unsafe-inline'
connect-src wws: ws: localhost:* *.walkme.com 'self'
font-src http: https: 'self' localhost:* fonts.gstatic.com data:
frame-src https: http: 'self' cdn.walkme.com
img-src https: http: 'self' localhost:* data:
script-src http: https: 'self' localhost:* *.walkme.com code.highcharts.com
style-src http: https: localhost:* 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com"
script-src 'self' static.staging.crowdestate.eu static.crowdestate.eu 'unsafe-inline' 'unsafe-eval' maps.googleapis.com stats.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com connect.facebook.net apis.google.com sdk.azureedge.net www.googletagmanager.com
img-src 'self' platform-lookaside.fbsbx.com www.google.es www.google.de www.google.lv s3-eu-west-1.amazonaws.com media.licdn.com lh4.googleusercontent.com lh5.googleusercontent.com lh6.googleusercontent.com www.google.dk img.youtube.com static.staging.crowdestate.eu static.crowdestate.eu lookaside.facebook.com graph.facebook.com s3-eu-west-1.amazonaws.com cm.g.doubleclick.net googleads.g.doubleclick.net maps.googleapis.com maps.gstatic.com www.google-analytics.com www.google.ee www.google.com stats.g.doubleclick.net www.googletagmanager.com ssl.google-analytics.com www.facebook.com lh3.googleusercontent.com web.facebook.com res.cloudinary.com crowdestate-images-3.s3-eu-west-1.amazonaws.com data:
style-src 'self' 'unsafe-inline' static.staging.crowdestate.eu static.crowdestate.eu  fonts.googleapis.com sdk.azureedge.net
font-src 'self' static.staging.crowdestate.eu static.crowdestate.eu fonts.gstatic.com sdk.azureedge.net
frame-src www.youtube.com connect.facebook.net pipedrivewebforms.com web.facebook.com www.facebook.com staticxx.facebook.com accounts.google.com sdk.azureedge.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googlesyndication.com https://suggestqueries.google.com https://pagead2.googlesyndication.com www.google-analytics.com yastatic.net https://relap.io https://ad.mail.ru stat.adlabs.ru mc.yandex.ru *.criteo.com *.googleapis.com luxadv.com *.luxadv.com psma02.com *.betweendigital.com *.doubleclick.net share.pluso.ru w.uptolike.com *.am15.net am15.net psma03.com *.onedmp.com *.eboundservices.com eboundservices.com uk-ads.openx.net *.openx.net *.metabar.ru *.orange81safe.com *.creativecdn.com *.googletagservices.com *.googleadservices.com psma01.com *.atemda.com *.nativeroll.tv *.criteo.net fycapi.ru ijquery5.com acvatic.ru mycpm.ru igithab.com *.yandex.ru franecki.net v.kost.tv *.g.doubleclick.net bnstero.com *.google.ru cdn.onesignal.com *.yakutia.io yakutia.io *.onesignal.com static.amgmedia.net onesignal.com *.sendpulse.com sendpulse.com bnster.com myhappy-news.com"
"default-src 'self' rundfunkbeitrag.de *.rundfunkbeitrag.de 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://ssl.google-analytics.com https://connect.facebook.net https://www.google-analytics.com
img-src 'self' data: http://iaeste.no http://www.iaeste.no https://secure.gravatar.com https://ssl.google-analytics.com https://s-static.ak.facebook.com
font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com
script-src 'unsafe-inline' 'unsafe-eval' http: https:
frame-src 'self' https://www.youtube.com/ http://ceodelhi.nic.in/ http://ceodelhi.gov.in/
script-src 'self' 'unsafe-inline' data: *.googleapis.com *.twitter.com *.facebook.net www.googleadservices.com www.gstatic.com www.google.com google.com google.co.uk use.fontawesome.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com maxcdn.bootstrapcdn.com cdn-images.mailchimp.com use.fontawesome.com
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.fontawesome.com
connect-src 'self' fonts.googleapis.com insights.hotjar.com wss://*.hotjar.com
"default-src 'self' *.playavto.ru data: 'unsafe-inline' https://www.youtube.com https://yandex.ru https://mc.yandex.ru https://yastatic.net https://*.vk.com https://vk.com https://*.livetex.ru https://*.mango-office.ru https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.doubleclick.net https://*.google.com https://*.google.ru https://api-maps.yandex.ru https://*.cdek.ru https://playavto.ru https://*.vchecks.me https://*.yandex.net https://dadata.ru https://*.mango-office.ru https://sprymedia.co.uk https://*.flamp.ru 'unsafe-eval'"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.cdsreg.com/ https://*.xpressreg.net/ https://*.xpressleadpro.com/ https://*.xpressleadpro.net/ https://*.xpresspaymentservice.com/ https://xpresspaymentservice.com/ https://*.exhibitoremails.com/ https://*.cdsdatasense.com/ *.digicert.com/ https://*.twimg.com/ https://*.adroll.com/ https://*.ingo.me/ https://ingo.me/ https://*.facebook.net/ https://*.facebook.com/ https://*.doubleclick.net/ https://*.google-analytics.com/ https://*.googleapis.com/ https://*.ads-twitter.com/ https://*.olark.com/ https://*.google.com/ https://*.twitter.com/ https://*.googleadservices.com/ https://*.googletagmanager.com/ https://*.feathr.co/ https://ads.yahoo.com/ https://*.adsrvr.org/ https://*.cloudfront.net/ https://*.lytics.io/ https://hotel-widget-files.s3.amazonaws.com/ https://abm-assets.s3.amazonaws.com/ https://s3.amazonaws.com/ https://settings.luckyorange.net/ https://*.onpeak.com/ https://assets.adobedtm.com/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.melissadata.net/ https://*.acs.org/ https://js.hs-scripts.com/ https://js.hs-scripts.com/ https://js.hsforms.net/ https://js.hsleadflows.net/ https://js.hs-analytics.net/ https://forms.hubspot.com/ https://*.xpressreg.local/ https://*.hscollectedforms.net/ https://*.marketo.net/ https://*.gstatic.com/ https://*.addthis.com/ https://app.webreg.me/ https://dpm.demdex.net/ https://acswso.tt.omtrdc.net/ https://snap.licdn.com/ https://px.ads.linkedin.com/ https://*.linkedin.com/ https://secure.quantserve.com/ https://rules.quantcount.com/ https://pixel-a.basis.net/ https://pixel.sitescout.com/ https://*.bing.com/ https://*.simplymeasured.com/ https://*.walkme.com/ https://*.dpmsrv.com/ https://*.marinsm.com/ https://*.prfct.co/ https://*.adnxs.com/ https://*.rlcdn.com/ https://*.youtube.com/ https://tags.tiqcdn.com/ https://*.informz.net/ https://*.agkn.com
"frame-ancestors 'self' https://token.ufs-online.ru googletagmanager.com *.googletagmanager.com"
"script-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension 'unsafe-inline' *.vimeo.com *.youtube.com cdnjs.cloudflare.com connect.facebook.net *.ytimg.com
style-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension 'unsafe-inline' cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.ytimg.com
default-src 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension
frame-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension chrome-extension *.vimeo.com *.youtube.com *.soundcloud.com
img-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension *.vimeo.com *.youtube.com *.ytimg.com s3-eu-west-1.amazonaws.com secure.gravatar.com img.itch.zone img.shields.io badges.gitter.im github.com *.githubusercontent.org *.githubusercontent.com *.github.io *.giphy.com *.travis-ci.org travis-ci.org codecov.io i.imgur.com psv4.userapi.com placehold.it s14.postimg.cc stats.g.doubleclick.net
connect-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension wss://*.defold.com cdn.jsdelivr.net
font-src 'unsafe-eval' *.defold.com:8181 *.defold.com:8081 *.defold.com:8000 *.defold.com:9998 ws://*.defold.com:8181 ws://*.defold.com:9998 wss://*.defold.com:9998 localhost:8181 localhost:8081 localhost:8000 localhost:9998 ws://localhost:8181 wss://localhost:9998 wss://remotedev.io 'self' data: blob: *.defold.com *.defold.org *.googleapis.com *.google.com *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.google-analytics.com s3.amazonaws.com s3-eu-west-1.amazonaws.com chrome-extension maxcdn.bootstrapcdn.com cdnjs.cloudflare.com"
frame-ancestors 'self' *.cienradios.com www.clarin.com *.devcr.com.ar *.cienradios-pre.com.ar prepro.int.clarin.com *.prepro.int.clarin.com viapais.com.ar *.viapais.com.ar alpha.viapais.com.ar *.alpha.viapais.com.ar beta.viapais.com.ar *.beta.viapais.com.ar prepro.viapais.com.ar *.prepro.viapais.com.ar
connect-src 'self' ws: https://*.google-analytics.com https://s3-eu-west-1.amazonaws.com
img-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com/ data: https://*.google-analytics.com https://*.doubleclick.net https://s3.amazonaws.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googleapis.com https://js-agent.newrelic.com/nr-1044.min.js https://www.google.com https://www.gstatic.com https://*.google-analytics.com http://*.getclicky.com
style-src 'self' 'unsafe-inline' http://maxcdn.bootstrapcdn.com https://*.googleapis.com https://www.gstatic.com
font-src 'self' https://www.gstatic.com https://*.gstatic.com http://maxcdn.bootstrapcdn.com
script-src blob: http: https: 'self' 'unsafe-inline' 'unsafe-eval'
style-src data: 'self' https: 'unsafe-inline'
script-src * data: 'self' blob blob: 'unsafe-eval' 'unsafe-inline'
style-src * data: 'self' blob blob: 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' data:
"default-src 'self' *.google-analytics.com *.gstatic.com *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: api.usemessages.com connect.facebook.net graph.facebook.com googleads.g.doubleclick.net js.hs-analytics.net js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hsleadflows.net js.leadin.com js.usemessages.com production-cdn.bonus.ly staging-cdn.bonus.ly unpkg.com *.addthis.com *.addthisedge.com *.adroll.com *.bnsly.co *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.hscta.net *.hubspot.com *.intercom.io *.intercomcdn.com *.linkedin.com *.newrelic.com *.nr-data.net *.perfectaudience.com *.stripe.com *.twimg.com *.twitter.com zapier.com *.natero.com sjs.bizographics.com static.ads-twitter.com pixel.cdnwidget.com reddit.com redditstatic.com quora.com
"default-src https://public.slidesharecdn.com/fonts/fontawesome-webfont.woff2?v=4.3.0?cb=1531762778 http://enpf24.kz https://enpf.kz https://172.31.0.130 https://www.enpf.kz https://onlinechat.enpf.kz https://www.google.com
script-src https://web.enpf.kz  https://mobile.e-npf.kz https://api.post.kz/ https://ssl.livezilla.net https://enpf.kz https://ip-api.com/ https://api-maps.yandex.ru https://code.jquery.com https://www.gstatic.com/ https://www.google.com/ https://172.31.0.130 https://bitrix.info https://onlinechat.enpf.kz https://www.enpf.kz http://www.enpf.kz https://www.googleapis.com https://www.google-analytics.com/analytics.js  127.0.0.1:* 'unsafe-inline' 'unsafe-eval'
style-src https://enpf.kz https://code.jquery.com https://172.31.0.130 https://www.enpf.kz http://www.enpf.kz https://fonts.gstatic.com https://fonts.googleapis.com https://onlinechat.enpf.kz 'unsafe-inline'
connect-src wss://mobile.e-npf.kz https://mobile.e-npf.kz https://api.post.kz/ https://enpf.kz wss://127.0.0.1:* https://ip-api.com https://mobileservice.enpf.kz/ https://172.31.0.130 https://www.enpf.kz http://www.enpf.kz https://bitrix.info
font-src http://enpf24.kz https://enpf.kz https://172.31.0.130 https://www.enpf.kz http://www.enpf.kz https://fonts.gstatic.com https://fonts.googleapis.com
media-src https://172.31.0.130 https://www.enpf.kz http://www.enpf.kz https://enpf.kz https://onlinechat.enpf.kz
plugin-types application/x-shockwave-flash application/x-java-applet application/pdf application/xml
img-src 'self' data: https://web.enpf.kz  https://code.jquery.com https://enpf.kz https://172.31.0.130 https://mobileservice.enpf.kz https://onlinechat.enpf.kz https://*.yandex.ru https://api-maps.yandex.ru https://*.yandex.net http://www.enpf.kz https://www.google-analytics.com  https://www.enpf.kz
child-src https://onlinechat.enpf.kz/feedback.php?wt=ovlv2&etc=izrjywy1ma__&ptl=ru&cid=nty2mdk_ https://www.google.com https://api-maps.yandex.ru http://www.enpf.kz https://www.enpf.kz https://172.31.0.130 https://enpf.kz https://www.youtube.com https://www.slideshare.net/"
"style-src 'self' https: 'unsafe-inline'  https://ajax.googleapis.com"
connect-src 'self' https://api-preview.luckyorange.com/screenshot/ https://api.luckyorange.com/ https://api.mixpanel.com/ https://sendy.zadapps.info/ https://sentry.io/ https://settings.luckyorange.net/ https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com wss://in.visitors.live/socket.io/ wss://visitors.live/socket.io/
font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://use.fontawesome.com/
frame-src 'self' https://cse.google.com/ https://djtflbt20bdde.cloudfront.net/ https://optimize.google.com https://www.google.com/ https://www.googletagmanager.com/
img-src 'self' data: https://*.gstatic.com/ https://clients1.google.com/generate_204 https://d10lpsik1i8c69.cloudfront.net/graphics/ https://optimize.google.com https://stats.g.doubleclick.net/ https://www.google.com/cse/static/ https://www.google.com/uds/ https://www.googleapis.com/generate_204 https://www.googletagmanager.com www.google-analytics.com/
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://cdnjs.cloudflare.com/ajax/libs/ https://apis.google.com https://cdn.ampproject.org/ https://cse.google.com/ https://d10lpsik1i8c69.cloudfront.net/ https://djtflbt20bdde.cloudfront.net/ https://optimize.google.com https://tagmanager.google.com/ https://use.fontawesome.com/ https://www.google-analytics.com/ https://www.google.com/cse/ https://www.google.com/jsapi https://www.google.com/recaptcha/api.js https://www.google.com/uds/api/search/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/api2/
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/ https://d10lpsik1i8c69.cloudfront.net/css/ https://djtflbt20bdde.cloudfront.net/css/ https://fonts.googleapis.com https://optimize.google.com https https://tagmanager.google.com https://use.fontawesome.com https://use.fontawesome.com/ https://www.google.com/cse/ https://www.google.com/uds/api/search/"
"frame-ancestors 'self' default-src 'none' font-src 'self' 'https://fonts.googleapis.com' img-src 'self' style-src 'self' 'unsafe-inline'"
font-src 'self' fonts.gstatic.com data: static.zotabox.com
connect-src 'self' analytics.monkeytracker.cz ws://s2.getsmartlook.com *.getsmartlook.com wss://s2.getsmartlook.com api-test.vivtracking.com *.addthis.com *.feynmanhopeful.eu feynmanhopeful.eu *.addthis.com *.hotjar.com ws://ws1.hotjar.com wss://ws1.hotjar.com *.smartlook.com ws://*.hotjar.com wss://*.hotjar.com stats.zotabox.com www.facebook.com *.vivtracking.com onesignal.com *.onesignal.com *.exponea.com jsonip.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz www.google.com *.youtube.com *.ytimg.com cdn.rawgit.com www.googleadservices.com api.myx.cz secure.myxheat.com infolinka.crmnutricia.cz rec.getsmartlook.com www.sc.pages04.net nutricia-cz.performax.cz https://connect.facebook.net *.google.pl *.google.cz *.google.sk *.google.ro *.google.fr nutricia.vivtracking.com *.addthis.com cdn.feynmanhopeful.eu m.addthisedge.com *.ibillboard.com *.facebook.net *.hotjar.com *.jsdelivr.net static.zotabox.com www.facebook.com *.doubleclick.net *.onesignal.com onesignal.com *.exponea.com jsonip.com *.cookiebot.com *.azureedge.net
frame-src 'self' www.youtube.com infolinka.crmnutricia.cz ut.performax.cz *.vivtracking.com *.addthis.com *.ibillboard.com *.bbelements.com ip.casalemedia.com *.adscale.de *.hotjar.com *.doubleclick.net *.facebook.com *.azureedge.net
child-src 'self' www.youtube.com infolinka.crmnutricia.cz ut.performax.cz *.vivtracking.com *.addthis.com *.ibillboard.com *.bbelements.com ip.casalemedia.com *.adscale.de *.hotjar.com *.doubleclick.net *.facebook.com *.azureedge.net
img-src 'self' data: *.gstatic.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.facebook.com *.fbcdn.net *.youtube.com c.imedia.cz www.google.cz www.google.com infolinka.crmnutricia.cz secure.myxheat.com *.pages04.net placeholdit.imgix.net placehold.it *.google.pl *.google.cz *.google.sk *.google.ro *.google.fr *.google.ie *.ibillboard.com *.bidswitch.net *.ctnsnet.com *.programattik.com file.zbcdn.net *.zotabox.com *.hotjar.com *.klubmaminek.cz *.googleusercontent.com *.exponea.com https://exponea-usercontent.s3-eu-central-1.amazonaws.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.onesignal.com onesignal.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://goldenrulecharity.org https://*.jquery.com https://*.cloudflare.com https://www.google.com https://*.googleapis.com https://*.google.com https://www.gstatic.com
default-src *.krxd.net *.po.intern *.crednet.de *.youtube-nocookie.com *.mouseflow.com connect.ekomi.de *.facebook.net *.facebook.com *.ytimg.com *.ctoid.net container.cdn-eso.me *.adnxs.com *.itrack.it *.hyj.mobi *.audiencemanager.de *.criteo.com *.criteo.net *.mookie1.com *.typekit.net sea.quisma.com tpc.googlesyndication.com scripts.psyma.com *.pushetta.com *.rocom.de *.plista.com *.wistia.com *.wistia.net *.zanox.com *.intelliad.de *.financeads.net *.serving-sys.com *.webmasterplan.com *.gstatic.com *.bing.com *.akamaihd.net *.realperson.de wss://*.realperson.de *.doubleclick.net *.imgix.net *.tellja.de *.google.com *.google-analytics.com *.hannoversche.de wss://*.hannoversche.de wss://*.realperson.de *.neoskop.io *.neoskop.cloud wss://*.neoskop.cloud *.litix.io *.googletagmanager.com *.youtube.com *.googleapis.com *.vhv.de *.appdynamics.com *.google.de *.exactag.com *.googleadservices.com *.adsrvr.org *.massresponse.com 'unsafe-inline' 'unsafe-eval' 'self' data: blob:
"frame-src 'self' www.clgatacado.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
"connect-src 'self' *.disqus.com *.disquscdn *.addthis.com *.gstatic.com *.googlesyndication.com"
img-src 'self' data: cover-photos.hackerone-user-content.com hackathon-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com hackerone-us-west-2-production-attachments.s3-us-west-2.amazonaws.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.facebook.com http://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.fbcdn.net http://*.fbcdn.net http://*.twitter.com https://*.twitter.com http://*.google.com http://*.google.hu http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com https://*.google.com https://*.google.hu http://*.google-analytics.com https://*.google-analytics.com https://*.doubleclick.net http://*.doubleclick.net https://*.googleadservices.com http://*.googleadservices.com http://*.schema.org https://*.schema.org http://*.w3.org https://*.w3.org http://*.googletagmanager.com https://*.googletagmanager.com http://*.ampproject.org https://*.ampproject.org
script-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.optmstr.com https://*.optmnstr.com https://*.onesignal.com https://certify.gpwa.org 'nonce-2784d4aa85666e6aaaaeac89949254a837f4ef87' 'nonce-2f4362d014492242618437d58f54219fbea9857c' 'nonce-891722a83f4d032306ca5beb2941c048fd281bad' 'nonce-363cfdcb06292921526b1cfc0d903954aa3fd10b' 'nonce-8174d8a792610c9d669cfc5a025e7747e776f249' 'nonce-aef6f66367243f3d13522f1b2576016a3fd2e5c5' 'nonce-bcc55cf2e4f0068e74736cec6cf2bc37b254a016' 'nonce-5a5ac2a6278e38e82fa7d023fbb89614b09345ff'
font-src 'self' https://yoast.com https://netdna.bootstrapcdn.com *.gstatic.com data:
img-src 'self' https://yoast.com https://wp-rocket.me https://djtflbt20bdde.cloudfront.net https://i.ytimg.com *.googletagmanager.com https://stats.g.doubleclick.net *.googleapis.com *.gravatar.com *.wpmudev.org *.gstatic.com *.google-analytics.com https://cdn.wd40company.eu https://secure.gravatar.com *.cdninstagram.com *.fbcdn.net *.twimg.com *.facebook.com data:
script-src 'self' 'unsafe-eval' 'unsafe-inline'   https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org *.hotjar.com https://connect.facebook.net *.gstatic.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com https://emarketing.wd40.co.uk
frame-src 'self' https://djtflbt20bdde.cloudfront.net *.hotjar.com *.facebook.com https://yoa.st *.youtube-nocookie.com *.google.com *.youtube.com
style-src 'self' https://yoast.com https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org *.bootstrapcdn.com *.cloudflare.com 'unsafe-inline' https://code.jquery.com *.googleapis.com
connect-src 'self' https://secure.helpscout.net https://api.ipify.org https://graph.facebook.com wss://ws6.hotjar.com *.hotjar.com https://yoast.com *.google-analytics.com *.googleapis.com *.gstatic.com data:"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com *.facebook.net *.sascdn.com *.google-analytics.com *.smartadserver.com *.twitter.com *.twimg.com *.cedexis.com *.tableau.com
style-src 'self' 'unsafe-inline' *.twitter.com *.twimg.com
img-src 'self' http://intranet.nema.org *.nema.org *.tableau.com data: *.twimg.com *.smartadserver.com *.twitter.com *.sascdn.com *.google-analytics.com
frame-src 'self' *.google.com *.facebook.com *.tableau.com *.youtube.com *.twitter.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*
"frame-ancestors http://stevemorse.org http://www.stevemorse.org 'self' http://www.jgsmd.org http://jgsmd.org http://www.jgss.org
"default-src 'self' data: *.addthis.com *.youtube.com *.google.com *.vimeo.com *.vimeocdn.com *.unpkg.com https://unpkg.com *.hotjar.com ws://*.hotjar.com https://rum-collector-2.pingdom.net https://cdn.heapanalytics.com https://www.google-analytics.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' graph.facebook.com https://www.linkedin.com www.linkedin.com https://s7.addthis.com https://m.addthis.com http://s7.addthis.com http://m.addthis.com m.addthisedge.com https://unpkg.com *.google.nl https://*.agilecrm.com https://s3.amazonaws.com *.googleapis.com *.google.com *.youtube.com s.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com http://static.hotjar.com http://tracker.intelligentonline.nl http://www.googleadservices.com https://script.hotjar.com https://connect.facebook.net https://rum-static.pingdom.net https://cdn.heapanalytics.com
style-src 'self' 'unsafe-inline' *.google.nl *.google.com fonts.gstatic.com https://fonts.googleapis.com http://fonts.googleapis.com
img-src 'self' data: *.umbraco.org umbraco.tv www.gravatar.com *.google.nl *.google.com *.googleapis.com *.gstatic.com https://www.google-analytics.com https://heapanalytics.com *.doubleclick.net *.vimeocdn.com tracker.intelligentonline.nl *.axendo.nl http://umbraco.tv https://www.facebook.com https://cdn.heapanalytics.com
child-src 'self' *.addthis.com *.google.com *.vimeo.com *.youtube.com
frame-src 'self' *.addthis.com *.google.com *.vimeo.com *.youtube.com vars.hotjar.com googleads.g.doubleclick.net https://www.google.nl/ *.doubleclick.net https://www.googletagmanager.com https://cdn.heapanalytics.com
style-src 'self' fonts.googleapis.com vk.com 'unsafe-inline'
img-src 'self' www.google-analytics.com vk.com www.google-analytics.com stats.g.doubleclick.net steamcommunity-a.akamaihd.net
script-src 'self' www.google-analytics.com vk.com cdn.ravenjs.com 'unsafe-inline'
"default-src 'self' data: wss: api.github.com *.tile.openstreetmap.org *.gstatic.com *.googleapis.com
"frame-ancestors 'self' http://localhost http://dev-elementaldiets.pantheonsite.io http://elementaldiets.com https://elementaldiets.com"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.google.com.tr/ https://maps.googleapis.com https://fonts.googleapis.com https://www.gstatic.com/ http://www.google-analytics.com/ https://www.googletagmanager.com http://connect.facebook.net http://www.googleadservices.com/ http://platform.twitter.com/ http://ads.programattik.com https://googleads.g.doubleclick.net/"
script-src 'strict-dynamic' 'nonce-mmrmnjbmotctnmi4ys00m2filwi3ntctmdyzmda3nwezymnk' 'unsafe-inline' https: http:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' kitchener.ca *.kitchener.ca app.kitchener.ca app2.kitchener.ca api.pingstreet.ca icreate8.esolutionsgroup.ca js.esolutionsgroup.ca *.youtube.com youtube.com *.gstatic.com *.google-analytics.com *.google.com btn.weather.ca kitchener.ca.granicus.com media-01.ca.granicus.com *.arcgis.com *.maps.arcgis.com kitchenergis.maps.arcgis.com *.googletagmanager.com *.hiredesk.net *.theaud.ca siteimproveanalytics.com ssl.siteimprove.com *.siteimprove.com careers2.hiredesk.net *.peakdemocracy.com *.opentownhall.com player.vimeo.com *.facebook.net *.facebook.com *.twitter.com *.googleapis.com pbs.twimg.com *.cdninstagram.com *.fbcdn.net *.communityremarks.com *.cludo.com *.canadahelps.org"
frame-src 'self' *.vimeo.com *.google.com https://*.gstatic.com https://*.google.com
img-src 'self' https://s3.amazonaws.com *.google.com *.gstatic.com https://*.gstatic.com https://*.google.com *.nr-data.net *.google-analytics.com *.doubleclick.net data:
object-src 'self' *.google.com https://*.gstatic.com https://*.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com https://*.gstatic.com https://*.google.com *.newrelic.com *.google-analytics.com *.intenta.io *.nr-data.net
img-src 'self' *.grouplunch.lu grouplunch.be grouplunch.lu *.google-analytics.com ssl-account.com *.facebook.com *.cloudflare.com *.mailchimp.com
script-src 'self' grouplunch.lu *.grouplunch.lu *.cloudflare.com *.googlecode.com *.google-analytics.com *.googleadservices.com ssl-account.com *.facebook.net *.zdassets.com *.zendesk.com 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://crowdmap.com https://*.crowdmap.com https://*.typekit.com https://apis.google.com https://*.akamai.net https://*.gaug.es https://*.youtube.com https://*.ytimg.net https://*.googlevideo.com https://*.embedly.com https://*.cloudfront.net https://*.google-analytics.com https://*.twitter.com https://*.facebook.com https://*.rackcdn.com http://*.rackcdn.com https://*.newrelic.com https://*.facebook.net https://*.addthis.com https://maps.google.com https://maps.gstatic.com https://*.googleapis.com https://*.openstreetmap.org https://*.virtualearth.net https://*.mozilla.org
style-src 'self' 'unsafe-inline' https://crowdmap.com https://*.crowdmap.com https://*.typekit.com https://*.twitter.com https://*.embedly.com https://*.twitter.com https://*.facebook.com https://fonts.googleapis.com https://*.rackcdn.com http://*.rackcdn.com https://*.addthis.com https://*.openstreetmap.org https://*.virtualearth.net
font-src 'self' data: https://*.typekit.com https://*.google.com https://themes.googleusercontent.com
"frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com"
"frame-ancestors 'self' tomshardware.fr www.tomshardware.fr tomsguide.fr www.tomsguide.fr cms.galaxiemedia.fr amp.tomsguide.fr amp.tomshardware.fr cdn.tomsguide.fr cdn.tomshardware.fr
"frame-ancestors 'self' *.chemistwarehouse.com.au *.epharmacy.com.au *.mychemist.com.au htmlbuilder.com.au *.htmlbuilder.com.au *.chemistwarehouse.hk"
script-src 'self' ajax.googleapis.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://platform.twitter.com https://platform.twitter.com http://connect.ok.ru https://connect.ok.ru https://cdn.onesignal.com https://*.doubleclick.net https://onesignal.com http://*.googletagservices.com https://yastatic.net http://*.yandex.net https://*.yandex.net http://*.googlesyndication.com https://*.googlesyndication.com http://*.google.ru https://*.google.ru http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com feeds.feedburner.com feedburner.google.com counter.rambler.ru http://*.yandex.ru https://*.yandex.ru *.avtoed.com http://*.gstatic.com https://*.gstatic.com http://yandex.st https://yandex.st http://vk.com https://vk.com http://vk.comcdn.connect.mail.ru https://vk.comcdn.connect.mail.ru http://mc.yandex.ru https://mc.yandex.ru http://*.google-analytics.com https://*.google-analytics.com
object-src 'self' http://*.youtube.com https://*.youtube.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.yandex.ru https://*.yandex.ru http://*.yandex.net https://*.yandex.net http://*.gstatic.com https://*.gstatic.com
style-src 'self' 'unsafe-inline' https://onesignal.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com
img-src * 'self' data: http://mc.yandex.ru https://mc.yandex.ru http://yastatic.net https://yastatic.net
frame-src 'self' http://connect.ok.ru https://connect.ok.ru http://platform.twitter.com https://platform.twitter.com https://onesignal.com http://*.avtoed.com http://orphus.ru http://*.yandex.net https://*.yandex.net http://*.yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net https://yandexadexchange.net http://*.yandex.ru https://*.yandex.ru http://*.doubleclick.net https://*.doubleclick.net http://yastatic.net https://yastatic.net http://*.youtube.com https://*.youtube.com http://*.google.ru https://*.google.ru http://*.google.com https://*.google.com http://connect.mail.ru https://connect.mail.ru http://vk.com https://vk.com
connect-src 'self' https://onesignal.com https://*.yandex.net http://yandex.ru https://yandex.ru http://*.yandex.ua https://*.yandex.ua http://*.youtube.com https://*.youtube.com http://*.google-analytics.com https://*.google-analytics.com http://*.yandex.ru https://*.yandex.ru http://*.gstatic.com https://*.gstatic.com
script-src 'self' data: 'unsafe-inline' https://e-tankstellen-finder.com https://pagead2.googlesyndication.com https://adservice.google.at https://adservice.google.com https://www.googletagmanager.com https://www.google-analytics.com fonts.googleapis.com https://maps.googleapis.com https://www.google.com 'unsafe-eval'
style-src 'self' data: 'unsafe-inline' https://e-tankstellen-finder.com fonts.googleapis.com https://www.google.com https://ajax.googleapis.com
img-src 'self' data: https://e-tankstellen-finder.com https://play.google.com https://linkmaker.itunes.apple.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com www.google.at https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://khms0.googleapis.com https://khms1.googleapis.com https://placeimg.com https://placehold.it https://d2lm6fxwu08ot6.cloudfront.net
font-src 'self' data: https://e-tankstellen-finder.com fonts.gstatic.com
connect-src 'self' https://e-tankstellen-finder.com https://csi.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://adservice.google.at https://adservice.google.com https://www.googletagmanager.com"
"default-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com
script-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com 'unsafe-eval' data: https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com https://*.bootstrapcdn.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com
connect-src * 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com ws://taqtik.com wss://taqtik.com https://taqtik.com https://www.facebook.com
img-src data: 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com https://www.facebook.com https://www.google.com.com/analytics https://www.google.com.com https://stats.g.doubleclick.net http://cloudfront-labs.amazonaws.com/x.png http://*.cloudfront.net/test.png
style-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com http://fonts.googleapis.com http://fonts.gstatic.com
font-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com data: https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com http://fonts.googleapis.com http://fonts.gstatic.com
media-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com http://youtube.com
frame-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://*.buttercms.com https://*.cdn.mxpnl.com https://*.cloudfront.net https://*.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.google.com/analytics https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hsforms.net https://*.linkedin.com https://*.net https://*.snapengage.com https://*.youtube.com https://cloudfront-labs.amazonaws.com http://*.alexametrics.com http://*.com http://*.google-analytics.com http://*.hs-analytics.net http://*.hs-scripts.com http://*.hsforms.net http://*.net http://*.snapengage.com http://*.youtube.com http://storage.googleapis.com https://youtube.com https://www.facebook.com/tr
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.3dsecure.net *.amazonaws.com *.bing.com *.bootstrapcdn.com *.ckeditor.com *.cloudflare.com *.comparethemarket.com *.doubleclick.net *.dsp.io *.facebook.com *.facebook.net *.feefo.com *.first.co.uk *.github.io *.google-analytics.com *.google.co.uk *.google.ie *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.mastercard.com *.omguk.com *.pingdom.com *.reevoo.com *.reviews.co.uk *.secure-server-hosting.com *.securecode.com *.sharethis.com *.syndication.twimg.com *.tagserve.com *.trustpilot.com *.twimg.com *.twitter.com *.twitter.io *.webtrends.com *.webtrendslive.com *.youtube.com dyn-img.com nexus.ensighten.com *.stripe.com *.marketingautomation.services *.woopcover.com *.fontawesome.com wss://*.hotjar.com data: blob:"
font-src 'self' fonts.gstatic.com js.intercomcdn.com https://js.intercomcdn.com
img-src 'self' www.youtube.com www.google-analytics.com https://www.google-analytics.com static.hampr.com.au https://static.hampr.com.au stats.g.doubleclick.net https://stats.g.doubleclick.net www.google.com https://www.google.com www.google.com.au https://www.google.com.au static.intercomassets.com https://static.intercomassets.com js.intercomcdn.com https://js.intercomcdn.com downloads.intercomcdn.com https://downloads.intercomcdn.com
script-src 'self' 'unsafe-inline' js.stripe.com https://js.stripe.com www.google-analytics.com https://www.google-analytics.com widget.intercom.io https://widget.intercom.io js.intercomcdn.com https://js.intercomcdn.com maps.googleapis.com https://maps.googleapis.com 'nonce-724453cc-2c5e-4075-bcff-0627627dcf25'
connect-src 'self' m.stripe.com https://m.stripe.com m.stripe.network https://m.stripe.network www.google-analytics.com https://www.google-analytics.com api-iam.intercom.io https://api-iam.intercom.io nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io nexus-websocket-b.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io"
script-src 'self' 'nonce-vxfepehux/zdlwafhekffpzyyatget2fiv8v0jyu9wc=' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.twitter.com *.facebook.net *.youtube.com s.ytimg.com t.co static.ads-twitter.com analytics.twitter.com www.googleadservices.com bat.bing.com connect.facebook.net www.facebook.com sp.analytics.yahoo.com s.yimg.com *.doubleclick.net www.google.ru alb.reddit.com *.hotjar.com *.opendns.com sjs.bizographics.com *.ads.linkedin.com
img-src 'self' data: *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.twitter.com i.ytimg.com  *.ydlstatic.com yodlee.vo.llnwd.net yodlee-1.hs.llnwd.net t.co static.ads-twitter.com analytics.twitter.com www.googleadservices.com bat.bing.com connect.facebook.net www.facebook.com sp.analytics.yahoo.com s.yimg.com *.doubleclick.net www.google.ru alb.reddit.com static-statusmoney.s3.amazonaws.com *.vimeocdn.com *.hotjar.com sjs.bizographics.com www.googletagmanager.com *.ads.linkedin.com
frame-src 'self' *.google.com *.facebook.com *.twitter.com *.youtube.com player.vimeo.com *.hotjar.com
connect-src 'self'  *.google-analytics.com sentry.io *.hotjar.com wss://*.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://embedr.flickr.com https://pixel.wp.com https://ajax.googleapis.com https://public-api.wordpress.com https://www.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://jetpack.com https://s0.wp.com https://s1.wp.com
img-src 'self' data: https://*.staticflickr.com https://ps.w.org https://www.google-analytics.com https://www.instagram.com https://s.w.org https://s-static.ak.facebook.com https://i.imgur.com http://i.imgur.com https://secure.gravatar.com https://pixel.wp.com
style-src 'self' 'unsafe-inline' https://s0.wp.com https://s1.wp.com https://www.gstatic.com https://fonts.googleapis.com
font-src 'self' data: https://wordpress.com/i/noticons/ https://fonts.gstatic.com https://s0.wp.com https://themes.googleusercontent.com
frame-src 'self' https://hearthis.at https://widgets.wp.com https://www.youtube.com https://www.facebook.com https://www.instagram.com https://s-static.ak.facebook.com https://w.soundcloud.com https://player.vimeo.com http://api.mixcloud.com https://www.mixcloud.com
"default-src 'self' data: https://secure.comodo.com https://live.sagepay.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://connect.facebook.net https://www.facebook.com https://s3.amazonaws.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://events.eventzilla.net https://d2poexpdc5y9vj.cloudfront.net https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.google.co.uk https://www.googletagmanager.com https://www.google-analytics.com https://use.typekit.net https://p.typekit.net https://stats.g.doubleclick.net https://cdn-images.mailchimp.com https://msdist.ladesk.com https://1-vbus-uk.ladesk.com https://www.youtube-nocookie.com https://adrac.iljmp.com https://www.googleadservices.com https://www.gstatic.com https://tagmanager.google.com https://googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'"
img-src 'self' *.amazonaws.com  *.iamplus.com *.googletagmanager.com *.google.com *.google-analytics.com *.klaviyo.com *.facebook.net *.facebook.com *.youtube.com *.mixpanel.com *.googleapis.com *.cloudfront.net *.curalate.com *.cloudflare.com *.googleadservices.com *.doubleclick.net
script-src 'self' *.doubleclick.net *.cloudflare.com *.klaviyo.com *.google-analytics.com *.facebook.net *.facebook.com 'nonce-bmv0c3bhcmtlcibydwxlcya7kq==' 'unsafe-eval'
script-src 'self' 'unsafe-inline' data: www.google-analytics.com
style-src 'self' 'unsafe-inline' https://www.google.com fonts.googleapis.com https://api.tiles.mapbox.com https://s.ytimg.com
img-src 'self' 'unsafe-inline' twemoji.maxcdn.com www.google-analytics.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://giosg-chat-public-eu.s3.amazonaws.com https://service.giosg.com http://abrandnewsite.com https://metrics.getk2.org http://cdnjs.cloudflare.com https://getk2.org http://ajax.googleapis.com http://netdna.bootstrapcdn.com innhold.rev.no maxcdn.bootstrapcdn.com http://www.google-analytics.com https://www.gstatic.com https://www.google.com http://fonts.googleapis.com http://fonts.gstatic.com http://csi.gstatic.com http://maps.google.com http://maps.googleapis.com http://maps.gstatic.com http://www.youtube.com https://youtu.be data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.google-analytics.com *.pay1040.com *.secure.checkout.visa.com *.checkout.visa.com masterpass.com *.masterpass.com *.aexp-static.com *.americanexpress.com *.google.com *.gstatic.com thm.visa.com data: blob:"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.kg https://*.yandex.kg static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.kg *.yandex.kg
default-src 'self' blob: wss://portal-xiva.yandex.net yastatic.net portal-xiva.yandex.net
font-src 'self' https://yastatic.net zen.yandex.kg static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.kg https://passport.yandex.kg wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.kg *.yandex.kg
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.kg https://*.yandex.kg *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.kg *.yandex.kg
media-src 'self' blob: data: *.storage.yandex.net *.yandex.net strm.yandex.ru strm.yandex.net *.strm.yandex.net *.cdn.yandex.net storage.mds.yandex.net *.storage.mds.yandex.net yastatic.net kiks.yandex.ru
object-src 'self' *.yandex.net music.yandex.ru strm.yandex.ru flashservice.adobe.com yastatic.net kiks.yandex.ru awaps.yandex.net storage.mds.yandex.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.kg https://www.yandex.kg https://pass.yandex.kg https://mc.yandex.kg zen.yandex.kg an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.kg www.yandex.kg suggest.yandex.kg
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.kg static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
font-src 'self' data:* themes.googleusercontent.com *.gstatic.com fonts.googleapis.com
frame-src 'self' www.google.com www.youtube.com services.google.com *.doubleclick.net
script-src 'self' 'unsafe-inline' *.googleanalytics.com *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com
img-src 'self' data:* *.gstatic.com *.google-analytics.com maps.googleapis.com *.googleapis.com *.ggpht.com www.google.com lh3.googleusercontent.com *.doubleclick.net *.googleadservices.com
style-src 'self' 'unsafe-inline' *.googletagmanager.com tagmanager.google.com fonts.googleapis.com *.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net *.facebook.com siteimproveanalytics.com sdc.mineleni.nl piwik.dtnr.nl ajax.googleapis.com cdn.siteimprove.net www.google.com *.google-analytics.com *.ckeditor.com
img-src 'self' data: http://www.rovid.nl https://www.rovid.nl *.rijksoverheid.nl sdc.mineleni.nl *.google-analytics.com *.doubleclick.net *.ckeditor.com piwik.dtnr.nl
style-src 'self' 'unsafe-inline' www.google.com ajax.googleapis.com *.ckeditor.com
media-src 'self' http://www.rovid.nl https://www.rovid.nl *.rijksoverheid.nl player.vimeo.com *.vimeocdn.com
child-src 'self' *.facebook.com *.siteimprove.com *.youtube.com
frame-ancestors 'self' *.gcci.ge *.sliepa.org *.afdb.org *.kemendag.go.id *.idrc.ca *.paltrade.org *.aeb.gov.rw *.thecdi.org.za *.apen.org.ni *.sidec.vn *.siicex.gob.mx *.senegalexport.com *.gufebenin.org *.gepaghana.org *.mongoltextile.mn *.must.edu.mn *.africatradefund.org http://ugandacoffeefederation.org http://www.apexb.bf *.apexb.bf *.bahamastradeinfo.gov.bs http://maliexport.com *.portailexportbenin.com myantrade.org http://pameranln.kemenperin.go.id
"default-src 'self' data: mc.yandex.ru platform.twitter.com staticxx.facebook.com secure.livechatinc.com www.facebook.com staticxx.facebook.com www.youtube-nocookie.com web.facebook.com syndication.twitter.com i.ytimg.com
script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com apis.google.com cdn.livechatinc.com cdnjs.cloudflare.com connect.facebook.net www.youtube.com s.ytimg.com www.google-analytics.com mc.yandex.ru platform.twitter.com secure.livechatinc.com cdn.livechatinc.com
style-src 'self' data: 'unsafe-inline' s.ytimg.com my.sendinblue.com
frame-src 'self' accounts.google.com www.facebook.com www.livechatinc.com secure.livechatinc.com platform.twitter.com staticxx.facebook.com syndication.twitter.com www.youtube-nocookie.com  www.youtube.com
connect-src 'self' data: syndication.twitter.com www.youtube-nocookie.com secure.livechatinc.com https://mc.yandex.ru  https://checkin.purechat.com/api/checkin *.purechat.com *.amazonaws.com"
"default-src 'self' https://min-api.cryptocompare.com/ https://widgets.cryptocompare.com/ http://arkslack.herokuapp.com/ https://arkslack.herokuapp.com/ https://www.googletagmanager.com https://api.github.com https://formspree.io https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net http://www.w3.org https://www.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ark.io/index https://widgets.cryptocompare.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://code.jquery.com https://cdn.jsdelivr.net/ https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' data: https://*.openstreetmap.org/ https://ark.io https://ark.io/index https://www.cryptocompare.com https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.googleapis.com https://assets.zendesk.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net
font-src 'self' https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com
frame-src https://www.youtube.com https://changelly.com https://old.changelly.com https://widget.changelly.com https://dexplorer.arknet.cloud https://www.gstatic.com https://www.google.com https://w2.countingdownto.com/ https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com
connect-src 'self' https://api.hubspot.com https://syndication.twitter.com https://www.google-analytics.com
frame-src 'self' https://app.hubspot.com https://platform.twitter.com https://syndication.twitter.com
img-src 'self' data: https://track.hubspot.com https://pbs.twimg.com https://platform.twitter.com https://commondatastorage.googleapis.com http://storage.googleapis.com https://storage.googleapis.com https://syndication.twitter.com http://www.google-analytics.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://js.hs-scripts.com http://js.hs-analytics.net https://js.usemessages.com http://ajax.googleapis.com https://ajax.googleapis.com https://cdn.syndication.twimg.com https://platform.twitter.com http://platform.twitter.com http://storage.googleapis.com https://storage.googleapis.com http://www.google-analytics.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://platform.twitter.com http://fonts.googleapis.com https://fonts.googleapis.com"
"default-src 'self' wss: http: https: data: 'unsafe-inline' 'unsafe-eval'
"img-src 'self' https://www.google-analytics.com http://j3q1.mjt.lu/ https://j3q1.mjt.lu/ https://storage.googleapis.com/ https://maps.googleapis.com https://maps.gstatic.com/ data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://storage.googleapis.com/
script-src 'self' http://angular-ui.github.io https://angular-ui.github.io https://oss.maxcdn.com/ https://cdn.jsdelivr.net/ https://www.google-analytics.com https://maps.googleapis.com https://storage.googleapis.com/ 'sha256-vusagy2jdidxswjnodqziz/p5rutbwd+i40igwcmes0=' 'sha256-f+wt90jojarpgsu4ykek9chtlzep2kr+hd5tj0actfq=' 'sha256-jyfbqvximxvle96mzpthgnwl/dy/vjhlnidflr8fww0='
"default-src * data: blob: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.liveperson.net https://*.lpsnmedia.net https://*.roadserve.co.uk http://*.youtube.com https://*.youtube.com https://player.vimeo.com http://player.vimeo.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://sneakerheadvc.com:443 https://*.sneakerheadvc.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src 'self' https://*.feen.us ws://feen.us:7890/ wss://feen.us:7890/
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://ssl.google-analytics.com https://www.google-analytics.com https://cdnjs.cloudflare.com
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com
font-src 'self' https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com data: https://fonts.gstatic.com
"default-src 'self' *.milchundzucker.de *.beesite.de *.googleapis.com *.google.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.milchundzucker.de *.beesite.de *.gstatic.com *.google.com *.googleapis.com
style-src 'self' 'unsafe-inline' *.milchundzucker.de *.beesite.de *.googleapis.com
font-src 'self' *.milchundzucker.de *.beesite.de fonts.gstatic.com data:
"frame-ancestors 'self' http://www.weathertechwholesale.com http://www.cabelas.com https://www.cabelas.com http://www.calcarcover.com https://www.calcarcover.com http://cabuat01.cabelas.com https://cabuat01.cabelas.com http://cabuat02.cabelas.com https://cabuat02.cabelas.com http://cabuat03.cabelas.com https://cabuat03.cabelas.com https://sandbox-assets.secure.checkout.visa.com https://sandbox.secure.checkout.visa.com https://assets.secure.checkout.visa.com https://secure.checkout.visa.com *.intranet.dow.com *.paypal.com *.paypalobjects.com"
script-src 'unsafe-inline' 'self' 'unsafe-eval' https://its.tradelab.fr https://googleads.g.doubleclick.net https://ib.adnxs.com https://cdn.tradelab.fr https://www.googleadservices.com https://connect.facebook.net https://analytics.twitter.com https://static.ads-twitter.com https://www.google-analytics.com https://ssl.google-analytics.com https://ajax.googleapis.com https://maps.googleapis.com https://www.googletagmanager.com http://www.googletagmanager.com
img-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com *.googleapis.com maps.gstatic.com *.gstatic.com https://load.exelator.com https://t.co https://secure.adnxs.com https://ib.adnxs.com https://www.facebook.com https://www.google.com https://www.google.fr https://load77.exelator.com https://its.tradelab.fr https://exelatesync.extend.tv data:
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' widget.trustpilot.com www.youtube.com *.doubleclick.net *.dc-storm.com *.googlesyndication.com wss://asiacreditbank.paysend.com  https://vk.com https://try.paysend.com wss://www.paysend.com https://site.paysend.con wss://site.paysend.com sync.1dmp.io *.rmtag.com  twemoji.maxcdn.com  *.gstatic.com www.google-analytics.com *.cybertonica.com *.doubleclick.net *.facebook.com *.google.com *.google.ru maps.googleapis.com www.googletagmanager.com tagmanager.google.com mc.yandex.ru www.googleadservices.com *.facebook.net wss://paysend.com https://paysend.com *.google.com *.google.ru https://fonts.googleapis.com maps.googleapis.com  https://themes.googleusercontent.com https://fonts.gstatic.com https://assets.zendesk.com *.rfihub.com *.rfihub.net *.outbrain.com *.linksynergy.com *.tradedoubler.com"
"default-src 'self' *.yandex.ru *.userapi.com *.googlesyndication.com
object-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.doubleclick.net *.youtube.com *.odnoklassniki.ru *.yastatic.net *.yandex.st *.leadiacloud.com *.yandex.ru *.yandex.net userapi.com *.googleapis.com *.s1venus.biz copyright-law.ru *.copyright-law.ru vk.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.doubleclick.net *.youtube.com *.odnoklassniki.ru *.yastatic.net *.yandex.st *.leadiacloud.com *.yandex.ru *.yandex.net userapi.com *.googleapis.com *.s1venus.biz copyright-law.ru *.copyright-law.ru vk.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com
media-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.doubleclick.net *.youtube.com *.odnoklassniki.ru *.yastatic.net *.yandex.st *.leadiacloud.com *.yandex.ru *.yandex.net userapi.com *.googleapis.com *.s1venus.biz copyright-law.ru *.copyright-law.ru vk.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st *.doubleclick.net *.youtube.com *.odnoklassniki.ru *.yastatic.net *.yandex.st *.leadiacloud.com *.yandex.ru *.yandex.net userapi.com *.googleapis.com *.s1venus.biz copyright-law.ru *.copyright-law.ru vk.com *.facebook.com *.facebook.net *.twitter.com *.googlesyndication.com
script-src 'self' comment.bitstorm.org cdn.syndication.twimg.com cdn.jsdelivr.net www.gstatic.com www.google.com pagead2.googlesyndication.com tpc.googlesyndication.com www.google-analytics.com
frame-src 'self' comment.bitstorm.org googleads.g.doubleclick.net www.google.com
font-src 'self' data: *.novoresume.com fonts.gstatic.com *.googleapis.com
img-src 'self' data: *.novoresume.com csi.gstatic.com *.doubleclick.net *.google.com *.google-analytics.com connect.facebook.net *.googleadservices.com www.facebook.com t.co
script-src 'self' 'unsafe-inline' 'unsafe-eval' trackcmp.net *.novoresume.com *.google.com *.google-analytics.com *.googleadservices.com connect.facebook.net www.googletagmanager.com *.doubleclick.net www.facebook.com static.ads-twitter.com analytics.twitter.com
style-src 'self' 'unsafe-inline' *.novoresume.com *.googleapis.com"
script-src 'strict-dynamic' 'nonce-nmyxnde2owqtnzqxzs00zmzkltlmngmtodu4ogm4mwnhn2e3' 'unsafe-inline' https: http:
script-src 'nonce-f92c2db3-cf90-419a-9ad2-3625bcac8de2' 'unsafe-inline' 'unsafe-eval' https: http: https://*.maps.googleapis.com https://*.cdn.polyfill.io https://*.google-analytics.com https://*.csi.gstatic.com https://*.stats.g.doubleclick.net https://fonts.googleapis.com data:
img-src 'self' data: blob: https://tabletop.social
connect-src 'self' blob: wss://tabletop.social https://tabletop.social
script-src https: https://optimize.google.com 'unsafe-inline' 'unsafe-eval'
style-src https: https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline'
connect-src https: wss: 'self' *.hotjar.com"
"frame-ancestors optimizely.com *.optimizely.com *.optimizelyedit.com hired.com *.hired.com"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' coinpaprika.com *.coinpaprika.com static.coinpaprika.com *.static.coinpaprika.com disqus.com *.disqus.com reddit.com *.reddit.com google.com *.google.com google.pl *.google.pl highcharts.com *.highcharts.com sentry.io *.sentry.io www.googletagmanager.com www.google-analytics.com www.gstatic.com *.doubleclick.net *.disquscdn.com *.youtube.com *.twitter.com *.redditmedia.com *.redditstatic.com player.vimeo.com files.sonnyt.com *.twimg.com *.facebook.net *.facebook.com *.hotjar.com cdn.jsdelivr.net unpkg.com cdnjs.cloudflare.com highcharts.github.io api.getresponse.com vk.com *.ibb.co ibb.co data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://dotandline.net:443 https://*.dotandline.net:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"child-src 'self' *.littlebits.com *.google.com *.youtube.com *.facebook.com *.twitter.com
frame-src https://c.sharethis.mgr.consensu.org https://jobs.jobvite.com https://www.youtube.com https://forms.hsforms.com https://*.giphy.com https://*.littlebits.com https://littlebits.com 'self'"
"default-src https: data: wss: 'unsafe-inline'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:"
"frame-ancestors 'self' *.alamode.com titanappraisal.com *.titanappraisal.com titanoffice.com *.titanoffice.com
"default-src 'self' www.banktestov.ru banktestov.ru https://securepubads.g.doubleclick.net googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.banktestov.ru banktestov.ru an.yandex.ru cdn.ampproject.org adservice.google.am adservice.google.nl adservice.google.de adservice.google.cz adservice.google.ca adservice.google.lv www.googletagservices.com adservice.google.us adservice.google.ge adservice.google.fi adservice.google.sk adservice.google.at adservice.google.com.tr adservice.google.com.tj adservice.google.co.nz adservice.google.ee adservice.google.lt adservice.google.es adservice.google.it adservice.google.fr adservice.google.co.il adservice.google.kg adservice.google.pl adservice.google.co.uz adservice.google.az adservice.google.co.uk yastatic.net https://www.googletagmanager.com https://adservice.google.com adservice.google.com.ua adservice.google.md https://adservice.google.ru adservice.google.kz adservice.google.by googleads.g.doubleclick.net www.aliexpress.com adservice.aliexpress.com *.alicdn.com https://www.googleapis.com clients1.google.com cse.google.com https://login.vk.com img.yandex.net clck.yandex.ru www.google.com www.google.ru www.gstatic.com yandex.st pagead2.googlesyndication.com vk.com userapi.com mc.yandex.ru www.google-analytics.com https://pagead2.googlesyndication.com ajax.googleapis.com
object-src 'self' *.googlesyndication.com https://*.googlesyndication.com www.gstatic.com
style-src 'self' 'unsafe-inline' www.banktestov.ru banktestov.ru i.alicdn.com www.google.com https://cse.google.com
img-src 'self' data: www.banktestov.ru banktestov.ru an.yandex.ru *.mds.yandex.net www.google.co.nz www.google.by www.google.kz www.google.com.ua www.google.am www.google.fr www.google.ge www.google.sk www.google.fi www.google.com.tr www.google.es www.google.kg www.google.at www.google.az www.google.co.uz www.google.md www.google.lt www.google.de www.google.ca www.google.cz www.google.co.il www.google.nl www.google.us www.google.com.tj www.google.lv www.google.co.uk https://csi.gstatic.com https://www.google.ru dmtracking2.alibaba.com www.aliexpress.com adservice.aliexpress.com *.alicdn.com https://stats.g.doubleclick.net https://www.googleapis.com clients1.google.com *.2mdn.net https://*.2mdn.net pagead2.googlesyndication.com www.google.pl www.google.ee www.google.com vk.com yastatic.net counter.yadro.ru mc.yandex.ru www.google-analytics.com
frame-src 'self' st.yandexadexchange.net yastatic.net adservice.aliexpress.com cse.google.com cse.google.ru awaps.yandex.ru *.doubleclick.net https://*.doubleclick.net *.googleadservices.com https://*.googleadservices.com *.googlesyndication.com https://*.googlesyndication.com https://login.vk.com vk.com https://vk.com www.google.ru
connect-src 'self' www.banktestov.ru banktestov.ru an.yandex.ru www.google-analytics.com mc.yandex.by stats.g.doubleclick.net mc.yandex.ru *.gstatic.com
script-src 'self' www.google-analytics.com angel.co static.olark.com api.olark.com assets.olark.com nrpc.olark.com
frame-src 'self' www.youtube-nocookie.com docs.google.com static.olark.com
connect-src 'self' angel.co nrpc.olark.com www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz
img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com *.placeholder.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com
"default-src 'self' *.diet.com *.google.com cdnjs.cloudflare.com *.facebook.com *.youtube.com *.doubleclick.net *.twitter.com *.pinterest.com *.tumblr.com *.googleapis.com *.google-analytics.com *.fbcdn.net *.adjuggler.com *.gstatic.com
script-src data: *.diet.com *.gstatic.com  *.google.com *.adjuggler.com *.quantcount.com *.quantserve.com *.facebook.com *.facebook.net *.google-analytics.com *.twitter.com *.pinterest.com *.tumblr.com *.cloudflare.com *.googlesyndication.com  'self' 'unsafe-eval' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com http://localhost:8080 https://ssl.google-analytics.com/ga.js https://survey.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' https://*.albacross.com https://*.linkedin.com https://*.quora.com https://*.googleadservices.com https://*.hs-analytics.net https://*.linkedin.com/ https://snap.licdn.com https://*.hscollectedforms.net https://*.ampproject.org  https://*.hs-scripts.com https://*.onthe.io/ https://*.facebook.net/ https://*.google-analytics.com/ https://*.influ2.com https://*.intercom.io/ https://*.intercomcdn.com/
font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://js.intercomcdn.com
connect-src 'self' https://*.albacross.com https://*.hubspot.com https://*.doubleclick.net https://*.onthe.io/ https://news.c8.net.ua/ https://www.influ2.com/ https://ws.onthe.io/ https://api-iam.intercom.io/ https://*.intercom.io/ wss://*.intercom.io/ https://www.google-analytics.com
script-src 'self' assets.shaun.net stats.concordant.com.au cdnjs.cloudflare.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com
"default-src 'self' 'unsafe-inline' data: https://www.youtube.com https://*.ytimg.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com
media-src blob: https://*.wistia.com https://*.medicosearch.ch https://*.readspeaker.com https://tagboard.com https://*.tagboard.com
frame-src 'self' https://www.google.com https://*.doctena.com https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.ch https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://*.twitter.com https://ton.twimg.com https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://www.facebook.com
script-src 'self' http://*   https://*   'unsafe-eval' 'unsafe-inline'
style-src 'self' 'unsafe-inline'  http://*   https://*
img-src 'self'  'unsafe-inline' http://*   https://* data:
font-src 'self'  'unsafe-inline' http://*   https://*  data:
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://allaboutwomen.in http://*.allaboutwomen.in
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.coinbase.com https://fast.wistia.com/assets/external/e-v1.js https://cdn.siftscience.com https://*.newrelic.com https://bam.nr-data.net https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://*.online-metrix.net https://code.jquery.com https://chart.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://netverify.com https://ajax.cloudflare.com https://cdn.plaid.com/link/v2/stable/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtm.js https://www.googleadservices.com https://googleads.g.doubleclick.net https://assets.coinbase.com/ static.coinbase.com
"script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/ec.js https://www.googleadservices.com/pagead/ https://googleads.g.doubleclick.net/pagead/
connect-src 'self' https: *.typekit.net s3.amazonaws.com chigal-2018-production.s3.amazonaws.com chigal-2018-production.s3.us-east-1.amazonaws.com www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net
font-src 'self' https: *.typekit.net use.fontawesome.com s3.amazonaws.com chigal-2018-production.s3.amazonaws.com chigal-2018-production.s3.us-east-1.amazonaws.com fonts.googleapis.com fonts.gstatic.com
img-src 'self' https: data: *.typekit.net s3.amazonaws.com chigal-2018-production.s3.amazonaws.com chigal-2018-production.s3.us-east-1.amazonaws.com www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.twitter.com *.twimg.com *.youtube.com *.vimeo.com *.instagram.com maps.gstatic.com maps.googleapis.com via.placeholder.com
frame-src 'self' https: 'unsafe-inline' 'unsafe-eval' *.vimeo.com *.youtube.com *.twitter.com *.twimg.com *.instagram.com www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net
script-src 'self' https: data: 'unsafe-inline' *.typekit.net www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.twitter.com *.twimg.com *.instagram.com maps.gstatic.com maps.googleapis.com *.youtube.com *.vimeo.com static.ctctcdn.com 'nonce-wihghtv6cjr5fpqouyaubg=='
style-src 'self' https: 'unsafe-inline' use.fontawesome.com *.twitter.com *.twimg.com s3.amazonaws.com chigal-2018-production.s3.amazonaws.com chigal-2018-production.s3.us-east-1.amazonaws.com *.typekit.net fonts.googleapis.com fonts.gstatic.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://bullshit.ist:443 https://*.bullshit.ist:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline'  http: https: data:
style-src 'self' http://maxcdn.bootstrapcdn.com http://fonts.googleapis.com http://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'
script-src 'self' https://mapgenie.osi.ie 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://mapgenie.osi.ie http://172.16.25.51:8080 http://itrisappman 'unsafe-inline' 'unsafe-eval' data:"
"script-src 'self' http://connect.facebook.net/es_es/sdk.js http://static.hupso.com/share/js/counters.js data: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-eval' *.googleapis.com *.google.com *.mapbox.com *.cloudfront.net http://*.cloudfront.net *.google-analytics.com *.doubleclick.net *.google.co.uk *.intercomassets.com *.gstatic.com *.intercom.io *.intercomcdn.com *.cloudflare.com wss://*.intercom.io *.receptive.io receptive.io *.facebook.com *.fbsbx.com unpkg.com *.twimg.com *.purpleportal.net *.fbcdn.net https://*.amazonaws.com *.a3cloud.net *.ggpht.com data: 'unsafe-inline'
"default-src *.quantumblack.com fonts.gstatic.com fonts.googleapis.com cloud.typography.com *.google-analytics.com *.contentful.com *.ctfassets.net *.list-manage.com player.vimeo.com *.twitter.com *.twimg.com cdn-images-1.medium.com *.xx.fbcdn.net 'self' data: 'unsafe-inline'
"default-src 'self' data: consent.truste.com vimeo.com consent-pref.trustarc.com trustarc.com w.org maps.google.com s.ytimg.com www.youtube.com cdnjs.cloudflare.com maps.googleapis.com player.vimeo.com secure.gravatar.com fonts.googleapis.com fonts.gstatic.com irdeto.com www.google-analytics.com
img-src 'self' data: consent.trustarc.com maps.googleapis.com maps.gstatic.com secure.gravatar.com www.google-analytics.com irdeto-wp-content.irdeto.com content.cdntwrk.com i.ytimg.com stats.g.doubleclick.net public.tableau.com uberflip.cdntwrk.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: dc.ads.linkedin.com www.linkedin.com px.ads.linkedin.com snap.licdn.com s.ytimg.com www.youtube.com consent-pref.trustarc.com consent.truste.com consent.trustarc.com cdnjs.cloudflare.com maps.googleapis.com maps.google.com irdeto.com resources.irdeto.com www.google-analytics.com google-analytics.com analytics-eu.clickdimensions.com script.crazyegg.com sitesearch360.com cdn.sitesearch360.com content.cdntwrk.com public.tableau.com e.infogram.com uberflip.cdntwrk.com
style-src 'self' 'unsafe-inline' data: maxcdn.bootstrapcdn.com cihost.uberflip.com cdnjs.cloudflare.com fonts.googleapis.com https://irdeto.com content.cdntwrk.com uberflip.cdntwrk.com
connect-src 'self' data: api.unbounce.com api.sitesearch360.com consent.trustarc.com www.google-analytics.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.youtube.com consent.trustarc.com consent-pref.trustarc.com public.tableau.com e.infogram.com http://web.irdeto.com
"default-src 'self' *.transunion.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.brightcove.com *.brightcove.net*.doubleclick.net *.company-target.com *.cibil.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net app.trustev.com ads.yahoo.com adserve.atedra.com analytics.twitter.com bat.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com code.jquery.com cloudfront.net fonts.googleapis.com ib.adnxs.com idsync.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com secure.fastclick.net secure.leadback.advertising.com google-analytics.com static.ads-twitter.com us-u.openx.net vjs.zencdn.net googleadservices.com gstatic.com bidswitch.net cspix.media6degrees.com googletagmanager.com
script-src 'self' *.transunion.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.g.3gl.net *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.transunioncibil.com *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net analytics.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com hello.myfonts.net img03.en25.com m.addthisedge.com vjs.zencdn.com optimizely.s3.amazonaws.com g.3gl.net cdn.ampproject.org b.company-target.com cspix.media6degrees.com img03.en25.com static.ads-twitter.com cdn.mxpnl.com sjs.bizographics.com rum-static.pingdom.net tt.mbww.com seal.entrust.net pixel.mathtag.com pagead2.googlesyndication.com tagmanager.google.com amplify.outbrain.com o1.qnsr.com connect.facebook.net cas.cluep.com blob: 'unsafe-eval' 'unsafe-inline'
child-src *.transunion.com *.crwdcntrl.net *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com vars.hotjar.com img.mediaplex.com app.optimizely.com *.brightcove.net s.amazon-adsystem.com app.trustev.com pixel.mathtag.com
connect-src 'self' *.transunion.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io api.company-target.com r.3gl.net s7.addthis.com popcornmetricsendpoint.herokuapp.com unity.cadreon.com app.trustev.com
media-src 'self' *.transunion.com blob: *.brightcove.com
font-src data: *.transunion.com *.cibil.com *.transunioncibil.com fonts.gstatic.com api.company-target.com *.brightcove.com r.3gl.net s7.addthis.com *.herokuapp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://cdn.cadre.com https://*.fullstory.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.pingdom.net https://adservice.google.com https://assets-jpcust.jwpsrv.com https://boards.greenhouse.io https://cadre.us15.list-manage.com/subscribe/post-json https://cdn.amplitude.com/libs/ https://cdn.hellofax.com/js/embedded.js https://cdn.plaid.com/link/v2/stable/link-initialize.js https://cdn.segment.com https://connect.facebook.net https://content.jwplatform.com https://d24n15hnbwhuhn.cloudfront.net https://fullstory.com https://googleads.g.doubleclick.net https://s3.amazonaws.com/cdn.hellofax.com/js/embedded.js https://s3.amazonaws.com/cdn.hellosign.com/ https://ssl.p.jwpcdn.com/ https://tagmanager.google.com https://www.google.com/recaptcha/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/
connect-src 'self' https://media.cadre.com https://*.fullstory.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.pingdom.net https://*.plaid.com https://adservice.google.com https://api.amplitude.com https://api.greenhouse.io https://api.segment.io https://fullstory.com https://media.cadre.com https://tagmanager.google.com https://www.facebook.com/tr/ https://www.google.com/ads/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com
frame-src 'self' https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googlesyndication.com https://*.hellosign.com https://*.plaid.com https://boards.greenhouse.io https://www.google.com/recaptcha/
style-src 'self' 'unsafe-inline' blob: data: https://media.cadre.com https://cdn.cadre.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://*.ads.linkedin.com https://*.pingdom.net https://adservice.google.com https://assets-jpcust.jwpsrv.com https://cadre.com https://cdn.hellofax.com https://cdnjs.cloudflare.com/ajax/libs/ionicons/ https://content.jwplatform.com https://jwpltx.com https://www.linkedin.com https://media.cadre.com https://s3.amazonaws.com/cdn.hellofax.com/ https://s3.amazonaws.com/cdn.hellosign.com/ https://ssl.p.jwpcdn.com/ https://tagmanager.google.com https://www.facebook.com/tr/ https://www.google.com/ads/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravatar.com/avatar/
img-src 'self' blob: data: https://media.cadre.com https://cdn.cadre.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://*.ads.linkedin.com https://*.pingdom.net https://adservice.google.com https://assets-jpcust.jwpsrv.com https://cadre.com https://cdn.hellofax.com https://cdnjs.cloudflare.com/ajax/libs/ionicons/ https://content.jwplatform.com https://jwpltx.com https://www.linkedin.com https://media.cadre.com https://s3.amazonaws.com/cdn.hellofax.com/ https://s3.amazonaws.com/cdn.hellosign.com/ https://ssl.p.jwpcdn.com/ https://tagmanager.google.com https://www.facebook.com/tr/ https://www.google.com/ads/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravatar.com/avatar/
media-src 'self' blob: data: https://media.cadre.com https://cdn.cadre.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://*.ads.linkedin.com https://*.pingdom.net https://adservice.google.com https://assets-jpcust.jwpsrv.com https://cadre.com https://cdn.hellofax.com https://cdnjs.cloudflare.com/ajax/libs/ionicons/ https://content.jwplatform.com https://jwpltx.com https://www.linkedin.com https://media.cadre.com https://s3.amazonaws.com/cdn.hellofax.com/ https://s3.amazonaws.com/cdn.hellosign.com/ https://ssl.p.jwpcdn.com/ https://tagmanager.google.com https://www.facebook.com/tr/ https://www.google.com/ads/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravatar.com/avatar/
font-src 'self' blob: data: https://media.cadre.com https://cdn.cadre.com https://*.g.doubleclick.net https://*.google.com/pagead/ https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://*.ads.linkedin.com https://*.pingdom.net https://adservice.google.com https://assets-jpcust.jwpsrv.com https://cadre.com https://cdn.hellofax.com https://cdnjs.cloudflare.com/ajax/libs/ionicons/ https://content.jwplatform.com https://jwpltx.com https://www.linkedin.com https://media.cadre.com https://s3.amazonaws.com/cdn.hellofax.com/ https://s3.amazonaws.com/cdn.hellosign.com/ https://ssl.p.jwpcdn.com/ https://tagmanager.google.com https://www.facebook.com/tr/ https://www.google.com/ads/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravatar.com/avatar/
script-src 'self' data: 'unsafe-inline' https://www.google-analytics.com
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdnjs.cloudflare.com https://widgets.kimbia.com https://api.kimbia.com https://krpc.kimbia.com https://www.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://linkhelp.clients.google.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://video.foxnews.com https://d2zah9y47r7bi2.cloudfront.net https://www.googleadservices.com https://www.youtube.com/player_api https://s.ytimg.com https://static.aclj.org https://static.ads-twitter.com https://analytics.twitter.com https://vimeo.com https://www.paypal.com https://chat.aclj.org https://optimize.google.com https://cqrcengage.com"
script-src blob: 'unsafe-eval' 'nonce-swpqamxmzujfy2ziehd0a1rowxfnn2dj' *.teknik.io:443 teknik.io:443
connect-src wss: blob: data: *.teknik.io:443 teknik.io:443
worker-src blob: mediastream: *.teknik.io:443 teknik.io:443
"default-src 'self' *.molottery.com *.serving-sys.com *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.pgtb.me *.cloudfront.net *.powerballpowercruise.com *.youtube.com 'unsafe-inline' 'unsafe-eval'"
script-src 'unsafe-eval' 'nonce-zk13zhboqjhluha4rmjuwhkxtey=' https://enjinx.io https://enjinx.cn https://www.googletagmanager.com
"frame-ancestors 'self' http://www.kayak.com http://www.kayak.com.ar http://www.kayak.cl http://www.kayak.com.co http://www.kayak.com.pe http://www.kayak.com.mx http://www.kayak.com.br http://www.tripadvisor.com http://www.tripadvisor.com.br http://www.tripadvisor.com.mx www.farecompare.com www.idealo.com http://viajala.com.co http://viajala.com.mx http://viajala.com.pe www.clicktripz.com http://viajala.cl http://viajala.com.ar"
media-src http://127.0.0.1:10000 blob: data: http://*.livechatinc.com https://*.livechatinc.com http://*.tawk.to https://*.tawk.to
form-action 'self' *.twitter.com va.tawk.to https://cp.payguru.com https://www.testgpay.com https://www.gpay.com.tr https://gpay.com.tr https://demo.gpay.com.tr https://www.paytr.com https://www.playanka.com https://test.papara.com https://www.papara.com https://papara.com
frame-ancestors 'self' http://*.livechatinc.com https://*.livechatinc.com http://*.tawk.to https://*.tawk.to https://chat.utechsoft.com.tr"
font-src 'self' *.korfiati.ru korfiati.ru w.uptolike.com *.googleapis.com fonts.w.tools *.yandex.ru *.googleapis.com fonts.gstatic.com *.yandex.ru data:
connect-src 'self' blob: magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com magicmemories-pbx2.getprintbox.com pbx2-magicmemories.s3.eu-central-1.amazonaws.com pbx2-magicmemories.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://*.getprintbox.com https://dbg.getprintbox.com:8888 https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.bing.com https://*.olark.com wss://*.zopim.com https://*.zopim.com https://stats.g.doubleclick.net https://www.paypal.com https://*.stripe.com https://*.hotjar.com wss://*.hotjar.com wss://*.getprintbox.com api.magicmemories.com
script-src 'self' magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com magicmemories-pbx2.getprintbox.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8000 https://dbg.getprintbox.com:8888 'unsafe-inline' 'unsafe-eval' https://*.getprintbox.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.google.com https://*.google.pl https://*.google.dk https://*.googleapis.com https://*.googletagmanager.com https://*.bing.com https://*.gstatic.com https://*.google-analytics.com https://cdn.mouseflow.com https://*.facebook.net https://api.instagram.com https://api.flickr.com https://*.twitter.com https://*.pinterest.com https://cdn.klarna.com https://*.stripe.com https://*.olark.com https://chimpstatic.com https://*.zopim.com https://*.bootstrapcdn.com https://cdn.tinymce.com https://www.paypal.com https://www.paypalobjects.com https://*.hotjar.com https://*.prestashop.com https://auth-server.herokuapp.com https://cdnjs.cloudflare.com cdn.cookielaw.org gateway.zscloud.net
style-src 'self' 'unsafe-inline' printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://*.googleapis.com https://*.olark.com https://*.bootstrapcdn.com https://*.prestashop.com https://cdnjs.cloudflare.com cdn.cookielaw.org gateway.zscloud.net
font-src 'self' data: blob: magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com pbx2-magicmemories.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.hotjar.com https://*.prestashop.com https://cdnjs.cloudflare.com https://*.zopim.com
frame-src 'self' magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com magicmemories-pbx2.getprintbox.com https://*.getprintbox.com https://*.google.com https://*.facebook.com https://*.facebook.net https://www.youtube.com https://www.youtube-nocookie.com https://cdn.klarna.com https://*.prestashop.com https://*.stripe.com https://*.cardinalcommerce.com https://*.olark.com https://*.twitter.com https://*.hotjar.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googlesyndication.com *.googleadservices.com *.adriver.ru *.g.doubleclick.net *.google.com *.facebook.com *.sociomantic.com *.twitter.com *.google-analytics.com *.youtube.com *.googletagmanager.com *.everestjs.net *.googletagservices.com connect.facebook.net s.ytimg.com *.recreativ.ru userapi.com js-agent.newrelic.com t.trafmag.com code.jquery.com *.olark.com cpa.trafmag.com trafmag.utarget.ru trafmag.com *.exponea.com media.flixfacts.com *.gstatic.com maps.googleapis.com google-analytics.bi.owox.com tracking.channelsight.com *.criteo.net h.holder.com.ua *.clickfrog.ru creativecdn.com recreativ.ru rozetka.com.ua clickfrog.ru criteo.net gstatic.com exponea.com olark.com googletagservices.com youtube.com everestjs.net googletagmanager.com google-analytics.com twitter.com sociomantic.com facebook.com google.com g.doubleclick.net adriver.ru googleadservices.com googlesyndication.com www.google.com.ua *.criteo.com criteo.com bam.nr-data.net *.google.com.ua az783074.vo.msecnd.net cdn.ampproject.org *.googleapis.com *.bootstrapcdn.com j-mirror.com.ua proschet.branderstudio.com market.darovec.com s.go-mpulse.net paypartslimit.privatbank.ua calc.delta.branderstudio.com ua.tronsmart.com telegram.me ua.ergo-global.com www.film2.com.ua candyhooverbuyandtry.com.ua *.rozetka.com.ua *.rozetka.ua rozetka.ua
script-src 'nonce-5a57a9110db3e8ba2bc779c0018ebfdf' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://play2.qbrick.com https://imasdk.googleapis.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk *.danskebank.fi https://danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com https://www.danskeinvest.fi https://code.highcharts.com
frame-src 'self' https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk *.danskebank.fi https://danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com
"img-src 'self' data: http://saint-petersburg.ru https://saint-petersburg.ru http://collector.mediator.media https://collector.mediator.media https://stats.g.doubleclick.net http://top-fwz1.mail.ru https://top-fwz1.mail.ru https://www.facebook.com *.yandex.ru *.yandex.net https://*.yandex.ru counter.yadro.ru www.google-analytics.com vk.com w.uptolike.com *.disquscdn.com https://referrer.disqus.com *.maps.2gis.com *.api.2gis.com http://*.api.2gis.ru http://*.maps.2gis.ru https://*.cloudfront.net *.cloudfront.net https://syndication.twitter.com http://syndication.twitter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.sputnik8.com https://www.superjob.ru/ https://mediator.imgsmail.ru/ http://mediator.imgsmail.ru/ https://top-fwz1.mail.ru/ http://top-fwz1.mail.ru/ https://syndication.twitter.com http://syndication.twitter.com https://s.ytimg.com player.radiocdn.com wtrfall.com platform.twitter.com https://yastatic.net http://yastatic.net https://*.yandex.ru http://*.yandex.ru https://www.google.com *.facebook.net *.api.2gis.ru cdn.thinglink.me https://w.uptolike.com w.uptolike.com www.google-analytics.com userapi.com http://*.disquscdn.com https://*.disquscdn.com  *.disqus.com storify.com https://storify.com https://www.youtube.com https://*.cloudfront.net *.cloudfront.net
style-src 'self' 'unsafe-inline' https://www.google.com fonts.googleapis.com maps.api.2gis.ru *.disquscdn.com storify.com http://wtrfall.com https://wtrfall.com
frame-src 'self' *.radiocdn.com www.sputnik8.com https://st.yandexadexchange.net https://yastatic.net http://yastatic.net https://*.facebook.com http://*.facebook.com http://sedu.adhands.ru https://sedu.adhands.ru https://vk.com vk.com m.vk.com yandexadexchange.net w.uptolike.com disqus.com https://disqus.com storify.com www.youtube.com https://www.youtube.com *.yandex.ru player.vimeo.com https://login.vk.com https://www.google.com http://www.google.com
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st
font-src 'self' https://yastatic.net zen.yandex.ru static.yandex.sx brotli.yastatic.net et.yastatic.net yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://ok.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru zen.yandex.ru an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.ru static.yandex.sx brotli.yastatic.net et.yastatic.net yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.tj https://*.yandex.tj static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.tj *.yandex.tj
font-src 'self' https://yastatic.net static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.tj https://passport.yandex.tj wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.tj *.yandex.tj
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.tj https://*.yandex.tj *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.tj *.yandex.tj
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.tj https://www.yandex.tj https://pass.yandex.tj https://mc.yandex.tj an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.tj www.yandex.tj suggest.yandex.tj
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
"connect-src 'self' https://api.amplitude.com/ https://s3.amazonaws.com/viv-assets/devcenter/ https://bixby-dcugc-prd.s3.amazonaws.com
script-src 'self' https://cdn.amplitude.com/libs/ 'unsafe-inline' 'nonce-uslgqxfd1hylozdnkt/ycq+kaz8ry68ih8r52m0tskr8clgk'
"img-src 'self' https://ssl.google-analytics.com https://www.google.com http://www.google-analytics.com
script-src 'unsafe-eval' 'report-sample' https://99designs.community/logs/ https://99designs.community/sidekiq/ https://99designs.community/mini-profiler-resources/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/assets/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/brotli_asset/ https://99designs.community/extra-locales/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/highlight-js/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/javascripts/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/plugins/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/theme-javascripts/ https://discourse-cdn.freetls.fastly.net/ninetyninedesigns/svg-sprite/ https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js https://d3ie58b6u4k8dh.cloudfront.net/tes5wj97xk5zzi4e4hzpmi44lja.js https://cdn.siftscience.com/s.js 'sha256-rq88jracxwsfzlsvtamraciy+mntizolpzi2q4ml55a=' 'sha256-txu7tnwccsbitwtvchgxowfviwmig9hr1ic3f8cescy=' 'sha256-re69iwtnmyngl85dpp+5junhwykpo/qopzdtzilfgik=' 'sha256-godjzrsqbjmgodlihsoaec+hgl2ito7ryxljzy/chea='
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.m3.com:* *.m3img.com:* *.uliza.jp *.twitter.com *.google-analytics.com *.googleadservices.com *.google.com *.google.co.jp *.doubleclick.net b92.yahoo.co.jp ybx.yahoo.co.jp *.twimg.com *.googleapis.com *.facebook.net t.co *.facebook.com *.ads-twitter.com *.fout.jp *.adjust-net.jp *.mcube-stream.com player.vimeo.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https:"
"default-src 'self' https://*.drv.gov.ua https://accounts.google.com https://www.gstatic.com https://www.google.com https://*.openstreetmap.org https://staticxx.facebook.com https://www.facebook.com https://apis.google.com https://staticx.facebook.com https://platform.twitter.com https://fonts.gstatic.com https://csi.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.drv.gov.ua https://www.google.com https://www.gstatic.com https://*.openstreetmap.org https://fonts.gstatic.com https://ssl.google-analytics.com https://maps.google.com https://connect.facebook.net https://platform.twitter.com https://apis.google.com https://www.facebook.com https://csi.gstatic.com https://syndication.twitter.com https://maps.googleapis.com
img-src 'self' data: https://*.openstreetmap.org https://*.google.com https://ssl.gstatic.com https://csi.gstatic.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://platform.twitter.com https://apis.google.com https://www.facebook.com https://maps.google.com https://maps.gstatic.com https://fonts.gstatic.com https://syndication.twitter.com https://*.googleapis.com https://fonts.gstatic.com
style-src 'self' 'unsafe-inline' https://*.openstreetmap.org https://fonts.googleapis.com https://fonts.gstatic.com https://csi.gstatic.com
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://csi.gstatic.com
frame-src https://*.drv.gov.ua https://www.google.com https://www.gstatic.com https://maps.google.com https://www.youtube.com https://apis.google.com https://accounts.google.com https://staticxx.facebook.com https://www.facebook.com https://staticx.facebook.com https://connect.facebook.net https://s-static.ak.facebook.com https://platform.twitter.com https://syndication.twitter.com https://fonts.gstatic.com https://csi.gstatic.com https://maps.gstatic.com
script-src 'self' indreams.me *.indreams.me www.youtube.com s.ytimg.com d2wy8f7a9ursnm.cloudfront.net www.google-analytics.com 'nonce-pk1dd2fp7gl' 'nonce-647nra4ug0f'
"default-src 'self' https://mc.yandex.by https://mc.yandex.fr https://mc.yandex.ua https://mc.yandex.ru
frame-src 'self'  https://ru.chaturbate.com https://chaturbate.com  *.chaturbate.com *.nuvid.com *.tubecup.com *.txxx.com *.ah-me.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mwtraf.com *.jquery.com ru-free-mob.ru sexs-cams.mobi https://mc.yandex.ru *.yandex.ru https://yastatic.net yastatic.net https://*.yandex.ru https://mc.yandex.by https://mc.yandex.ua
img-src 'self' https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1068458066/ https://www.google-analytics.com https://www.googletagmanager.com https://www.stats.tso.co.uk https://www.tsoshop.co.uk
script-src 'self' 'unsafe-inline' 'nonce-0qjtgt08vosa8hqclunwnxsemim7tsrg' https://code.jquery.com/jquery-1.12.4.js https://code.jquery.com/jquery-migrate-1.4.1.min.js https://s3.amazonaws.com/new.cetrk.com/pages/scripts/0010/4543.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/gtm/js https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/plugins/ua/ecommerce.js https://www.stats.tso.co.uk/dcs8u8azzhpn2plabyss3da8k_8k2n/wtid.js
style-src 'self' 'unsafe-inline' 'nonce-0qjtgt08vosa8hqclunwnxsemim7tsrg' https://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/
"default-src 'self' data: 'unsafe-inline' www-app.amkor.com www-app.amkor.com *.wistia.net *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.doubleclick.net
img-src 'self' data: c44f5d406df450f4a66b-1b94a87d576253d9446df0a9ca62e142.ssl.cf2.rackcdn.com *.doubleclick.net *.google-analytics.com *.google.com *.gstatic.com *.googleapis.com *.googletagmanager.com
"default-src 'self' heyfiesta.com eu1.heyfiesta.com us1.heyfiesta.com *.heyfiesta.com *.eu1.heyfiesta.com *.us1.heyfiesta.com fstcdn.net *.fstcdn.net  *.badoo.com *.api.here.com *.paypal.com pagead2.googlesyndication.com api.giphy.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' fstcdn.net *.fstcdn.net *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.api.here.com *.instagram.com *.digicert.com pagead2.googlesyndication.com
style-src 'self' 'unsafe-inline' fstcdn.net *.fstcdn.net vk.com *.vk.me *.googleapis.com
font-src 'self' data: fstcdn.net *.fstcdn.net fonts.googleapis.com fonts.gstatic.com
"connect-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com *.bing.com *.addthis.com *.virtualearth.net *.google-analytics.com *.twilio.com wss://*.twilio.com *.twil.io
img-src data: blob: about: 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com webselfstorage.com *.webselfstorage.com *.virtualearth.net *.bing.com www.google.com www.googletagmanager.com *.doubleclick.net www.bingmapsportal.com *.google-analytics.com movinginsider.com *.surveymonkey.com *.cdninstagram.com
font-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com data: fonts.googleapis.com fonts.gstatic.com
style-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com www.bing.com s7.addthis.com
frame-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com *.youtube.com *.doubleclick.net *.addthis.com apis.google.com accounts.google.com www.google.com t.pepperjamnetwork.com r2.dotmailer-surveys.com e.infogram.com *.surveymonkey.com
default-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com
script-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com ajax.aspnetcdn.com www.bing.com www.googletagmanager.com www.googleadservices.com *.doubleclick.net *.addthis.com *.addthisedge.com code.jquery.com *.virtualearth.net www.gstatic.com *.google.com *.google-analytics.com *.youtube.com *.ytimg.com r2.dotmailer-surveys.com *.twil.io *.surveymonkey.com *.instagram.com
default-src 'unsafe-eval' 'self' *.carbonads.com *.getclicky.com fonts.gstatic.com www.google-analytics.com fonts.googleapis.com cdnjs.cloudflare.com 'unsafe-inline' https: data:
script-src https://tr.apsislead.com/track_v2.js https://s3-eu-west-1.amazonaws.com/apsis-forms-published-settings/js/ https://*.sv.no https://www.sv.no *.google-analytics.com https://*.leseweb.dk 'unsafe-inline'
img-src https://*.google-analytics.com https://*.fbcdn.net 'self' data:
child-src https://sv.hypersys.no *.leseweb.dk https://*.anpdm.com https://*.ustream.tv *.youtube.com 'self'
"default-src 'self' https://payment.bailataan.fi https://v1.api.paymenthighway.io https://*.facebook.net https://*.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.googleapis.com https://*.facebook.net https://*.facebook.com
connect-src 'self' blob: data: https://api.bailataan.fi https://auth.bailataan.fi https://*.facebook.net https://*.facebook.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net
img-src 'self' data: https://portalvhdsp62n0yt356llm.blob.core.windows.net https://www.google-analytics.com https://www.facebook.com https://*.gstatic.com https://*.googleapis.com https://*.doubleclick.net blob: https://bailataan.fi
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net
child-src https://bailataan.fi https://payment.bailataan.fi https://v1.api.paymenthighway.io https://public.mobilepay.dk https://publicmobilepay.danskebank.com https://qa-maksu.pivo.fi/ https://*.facebook.com https://*.facebook.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de
script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de
media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de
child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de
img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de
font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de
frame-ancestors bvaweb-editor.preview.kkn.zd.intranet.bund.de piwik.itzbund.de bvaweb-zfa-editor.preview.kkn.zd.intranet.bund.de *.facebook.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.olark.com js.stripe.com *.visualwebsiteoptimizer.com *.vwo.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://en.wikipedia.org https://commons.wikimedia.org https://www.mediawiki.org https://code.highcharts.com https://ajax.cloudflare.com/ https://cdnjs.cloudflare.com/ajax/libs/chart.js/ https://cdn.jsdelivr.net/npm/md5-jkmyers@0.0.1/md5.min.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://www.googletagmanager.com https://*.weirdgloop.org https://unpkg.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://en.wikipedia.org https://commons.wikimedia.org https://www.mediawiki.org https://unpkg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' static.addtoany.com s7.addthis.com m.addthis.com m.addthisedge.com js.hubspot.com forms.hsforms.com
font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com
frame-src 'self' https://forms.hsforms.com https://www.youtube.com https://www.gstatic.com https://accounts.google.com
img-src 'self' data: https://track.hubspot.com https://www.facebook.com https://hubspot-academy.s3.amazonaws.com https://stats.g.doubleclick.net https://stormid.com https://www.stormid.com https://api.hubapi.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.gravatar.com https://www.google-analytics.com https://stormidwipweb.blob.core.windows.net https://stormidtestweb.blob.core.windows.net https://stormidprodweb.blob.core.windows.net https://www.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://ajax.googleapis.com https://fast.fonts.net/jsapi/ https://maps.googleapis.com https://apis.google.com https://js.hs-analytics.net https://connect.facebook.net https://js.hs-scripts.com https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.fonts.net https://plus.browsealoud.com
"frame-ancestors *.carkeys.co.uk *.motorists-club.co.uk *.motoristsclub.co.uk http://motoristsclub.co.uk/ http://www.motorists-club.co.uk/"
script-src 'self' https://h.online-metrix.net https://cdn.walkme.com https://playerserver.walkme.com 'unsafe-eval' 'unsafe-inline'
font-src 'self' localhost:8080 salesscreencontent.blob.core.windows.net salesscreen-web.azureedge.net js.intercomcdn.com maxcdn.bootstrapcdn.com salesscreen-web-cdn.azureedge.net fonts.gstatic.com use.fontawesome.com
img-src https: data: js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com salesscreencontent.blob.core.windows.net salesscreen-web.azureedge.net
script-src 'self' salesscreen-web.azureedge.net www.googletagmanager.com www.google-analytics.com www.gstatic.com www.google.com fast.fonts.net app.intercom.io widget.intercom.io js.intercomcdn.com pi.pardot.com ct.capterra.com snap.licdn.com px.ads.linkedin.com dc.ads.linkedin.com connect.facebook.net snap.licdn.com dc.ads.linkedin.com tagmanager.google.com sjs.bizographics.com 'unsafe-inline'
style-src 'self' salesscreen-web.azureedge.net salesscreencontent.blob.core.windows.net use.fontawesome.com salesscreen-web-cdn.azureedge.net fast.fonts.net maxcdn.bootstrapcdn.com tagmanager.google.com fonts.googleapis.com 'unsafe-inline'
connect-src 'self' api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com app.getsentry.com cdn.jsdelivr.net ipinfo.io
frame-src 'self' w.soundcloud.com player.vimeo.com cdn.embedly.com/ www.youtube.com *.facebook.com www.google.com
media-src https: js.intercomcdn.com salesscreencontent.blob.core.windows.net salesscreen-web.azureedge.net
script-src 'strict-dynamic' * 'unsafe-eval' 'nonce-n2rinmnkn2utyjy1ms00zdnk' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http://www.googletagmanager.com http://www.google-analytics.com https://maps.googleapis.com https://www.images-home.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://developerzen.com:443 https://*.developerzen.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
style-src 'self' https: 'unsafe-inline' data:
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.retrip.jp *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.google-analytics.com *.pinterest.com *.twitter.com *.youtube.com *.googlesyndication.com *.cloudflare.com *.doubleclick.net *.caprofitx.com *.googleadservices.com *.popin.cc *.treasuredata.com *.amoad.com *.criteo.com *.i-mobile.co.jp *.impact-ad.jp *.yimg.jp *.gmossp-sp.jp *.oct-pass.net *.nend.net *.mtburn.com *.ad-stir.com *.triver.jp *.criteo.net *.adtdp.com *.ca-conv.jp *.rakuten.co.jp *.adjust-net.jp *.gunosy.com *.softbank.jp *.yahoo.co.jp *.openx.net *.socdm.com *.uliza.jp *.genieesspv.jp *.advg.jp *.microad.jp *.rubiconproject.com *.mbww.com *.ampproject.org *.advertising.com *.adroll.com *.mathtag.com *.ladsp.com *.2mdn.net *.gssprt.jp *.zimg.jp *.logly.co.jp *.tapone.jp *.proparm.jp asset: *.appspot.com *.adingo.jp *.zucks.net *.fluct.me *.skyscanner.net *.goldspotmedia.com a248.e.akamai.net *.speee-ad.jp speee-ad.akamaized.net *.google.co.jp *.docomo.ne.jp *.cinarra.com *.flashtalking.com *.apvdr.com *.x-lift.jp *.adsafeprotected.com *.ads-twitter.com *.amazon-adsystem.com
frame-src 'self' https: gsa://onpageload command://event webpagecontroller://complete callback://https webviewprogress:
"frame-ancestors 'self' https://*.yandex.ru https://yastatic.net http://*.webvisor.com http://webvisor.com
"default-src wss: https: 'unsafe-inline' 'self'
"frame-ancestors 'self' http://www.buzzme.com.my http://uni.u.com.my https://uni.u.com.my http://umobile.speedtestcustom.com https://umobile.speedtestcustom.com https://c.speedtestcustom.com"
frame-src 'self' https: http://*.google.com http://*.facebook.com http://*.twitter.com http://*.youtube.com http://*.sharethis.com http://*.googletagmanager.com http://*.vimeo.com http://*.sharpspring.com http://*.googleadservices.com http://*.doubleclick.net http://*.wistia.com http://*.wistia.net
"connect-src 'self' wss://localhost:44301 wss://*.azurewebsites.net https://*.blob.core.windows.net https://*.akamaihd.net https://localhost:44301 https://*.azurewebsites.net https://*.zendesk.com https://*.zdassets.com wss://*.zopim.com https://*.wistia.com
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://localhost:44301 https://localhost:44301 https://*.teams.microsoft.com https://*.azurewebsites.net https://*.wistia.com https://*.wistia.net https://*.gstatic.com https://*.jquery.com https://*.cloudflare.com
media-src 'self' data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net
img-src 'self' https://*.wistia.com https://localhost:44301 https://*.azurewebsites.net https://*.zopim.com https://skoolericons.blob.core.windows.net data: https://*.akamaihd.net
font-src 'self' data: https://*.akamaihd.net https://*.zopim.com https://*.akamaihd.net https://*.sharepointonline.com https://localhost:44301 https://*.azurewebsites.net
default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://localhost:44301 https://*.azurewebsites.net https://*.teams.microsoft.com https://*.cloudflare.com https://*.jquery.com https://*.gstatic.com https://*.wistia.com https://*.wistia.net https://src.litix.io/ https://*.zendesk.com https://*.zdassets.com https://*.zopim.com wss://*.zopim.com https://unpkg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://browser-update.org
img-src 'self' data: https://scontent.cdninstagram.com https://graph.facebook.com https://pbs.twimg.com https://scontent.xx.fbcdn.net https://github.com/dawoe http://jumoo.co.uk *.gravatar.com *.umbraco.org https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com
child-src 'self' https://*.youtube.com https://*.vimeo.com https://*.coveritlive.com https://*.fwebservices.be
frame-src 'self' https://*.youtube.com https://*.vimeo.com https://*.coveritlive.com https://*.fwebservices.be
connect-src 'self' https://*.googleapis.com https://data.police.uk *.umbraco.org
img-src data: blob: static1.squarespace.com static3.squarespace.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.google.com *.bootstrapcdn.com *.facebook.net *.tctm.co *.clickdimensions.com *.googleadservices.com *.doubleclick.net *.trustarc.com"
connect-src 'self' https://www.facebook.com *.iplatba.cz https://onesignal.com
font-src 'self' https://fonts.gstatic.com https://www.fontsaddict.com https://themes.googleusercontent.com
frame-src  'self' http://s.imedia.cz https://www.google.cz https://www.google.com https://out.sklik.cz https://www.zbozi.cz https://googleads.g.doubleclick.net https://c.imedia.cz https://accounts.google.com https://staticxx.facebook.com https://onesignal.com https://www.facebook.com https://www.youtube.com
img-src 'self' data: https://www.techarena.cz https://ssl.heureka.cz https://hit.skrz.cz https://www.srovname.cz https://www.googletagmanager.com https://app.geispoint.cz https://img.onesignal.com https://maps.gstatic.com https://maps.googleapis.com https://c.imedia.cz https://i.ytimg.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.cz
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com https://ssl.heureka.cz https://muj.skrz.cz https://out.sklik.cz https://www.srovname.cz https://c.imedia.cz https://www.zbozi.cz https://c.imedia.cz https://maps.googleapis.com https://www.googletagmanager.com https://apis.google.com https://c.imedia.cz https://cdn.onesignal.com https://connect.facebook.net https://googleads.g.doubleclick.net https://im9.cz https://onesignal.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.shoproku.cz/js/interstitial.min.js
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://onesignal.com
script-src https: 'unsafe-inline' 'self' 'nonce-c059b7a4134889fb110aeac3be734cef98ab85399a0535940bc8df1105945e22' 'strict-dynamic' 'report-sample'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://checkout.stripe.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net http://aspnet-scripts.telerikstatic.com https://d2i2wahzwrm1n5.cloudfront.net https://maps.google.com https://maps.googleapis.com
frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://www.youtube.com/
font-src 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://checkout.stripe.com https://fonts.googleapis.com https://munchalunch-staging.azurewebsites.net
script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com http://www.googletagmanager.com http://www.google-analytics.com https://static.eos.io https://d340lr3764rrcr.cloudfront.net
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.eos.io
img-src 'self' https://stats.g.doubleclick.net http://www.google-analytics.com  https://static.eos.io https://d340lr3764rrcr.cloudfront.net data:
frame-src 'self' https://www.google.com https://www.youtube.com https://player.vimeo.com
script-src 'self' https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js             https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js             https://cdnjs.cloudflare.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://maps.googleapis.com             http://register.feefo.com             https://api.feefo.com/api/javascript/health-on-line              https://ajax.googleapis.com             https://www.solodev.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://fonts.googleapis.com/css             https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css             https://cdnjs.cloudflare.com/ajax/libs/flexslider/2.6.3/flexslider.min.css 'unsafe-inline'
font-src 'self' data: http://fonts.googleapis.com             https://fonts.gstatic.com             https://cdnjs.cloudflare.com
img-src 'self' data:             https://www.google.co.uk             https://www.google.com             https://stats.g.doubleclick.net             https://www.health-on-line.co.uk             http://www.health-on-line.co.uk             https://www.google-analytics.com             https://api.feefo.com             https://maps.gstatic.com             https://maps.googleapis.com             http://www.googletagmanager.com
connect-src 'self'              https://www.myhealth-on-line.co.uk             http://test02-holwebsite.staging-hol-apps.co.uk             https://api.feefo.com
"default-src * blob: data: 'unsafe-eval' 'unsafe-inline'
frame-ancestors 'self' chrome-extension://* *.linkedin.com *.salesforce.com *.lightning.force.com *.visual.force.com app.salesloft.com *.outreach.io *.amazon.com *.amazon.ca *.amazon.co.uk *.eloqua.com sendoso.ngrok.io sendoso1.ngrok.io vimeo.com/*
"frame-src 'self' https://*.gryps.ch https://*.googletagmanager.com https://*.gryps.ch https://disqus.com https://*.g.doubleclick.net https://*.google.com https://*.facebook.com https://*.twitter.com https://www.youtube.com
script-src 'self' https://trillian.cachefly.net https://*.olark.com https://www.google-analytics.com
style-src 'self' https://trillian.cachefly.net https://static.olark.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cloud.typography.com https://www.google.com https://www.google-analytics.com https://*.gstatic.com https://maps.googleapis.com https://www.youtube.com https://s.ytimg.com https://api.embed.ly
img-src 'self' data: https://*.schubergphilis.com https://schubergphilis.com https://*.medium.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.ytimg.com https://cdn.embedly.com
font-src * 'self' data: https://fonts.gstatic.com https://cloud.typography.com
frame-src 'self' https://www.google.com https://www.youtube.com https://youtu.be https://cdn.embedly.com
img-src * data: avatars-fast.yandex.net favicon.yandex.net
connect-src 'self' an.yandex.ru mc.yandex.ru yandex.st yastatic.net wss://*.cackle.me https://dermaguru.ru http://dermaguru.ru http://mc.yandex.ru https://mc.yandex.ru http://www.google-analytics.com https://www.google-analytics.com https://yandex.ru http://yandex.ru http://youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.googlevideo.com http://*.googlevideo.com https://googlevideo.com http://googlevideo.com
"frame-src 'self' mypornoflv.tv *.mypornoflv.tv idexx.net *.idexx.net jwpcdn.com *.jwpcdn.com 88.150.172.218 *.88.150.172.218 88.150.172.219 *.88.150.172.219 *.vk.com https://*.vk.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.bing.com https://*.bing.com *.go.mail.ru https://*.go.mail.ru *.google-analytics.com https://*.google-analytics.com *.wwteasers.org wwteasers.org https://*.wwteasers.org *.static.wwgate.ru static.wwgate.ru https://*.static.wwgate.ru *.wwclickgo.com wwclickgo.com https://*.wwclickgo.com *.google.ru https://*.google.ru *.livestatisc.com livestatisc.com https://*.livestatisc.com *.static.wwpon365.ru static.wwpon365.ru https://*.static.wwpon365.ru *.yastatic.net yastatic.net https://*.yastatic.net *.promokrot.com promokrot.com https://*.promokrot.com *.ofapes.com ofapes.com https://*.ofapes.com *.scund.com scund.com https://*.scund.com *.biasdo.com biasdo.com https://*.biasdo.com *.andase.com andase.com https://*.andase.com *.andumb.com andumb.com https://*.andumb.com *.basand.com basand.com https://*.basand.com *.defoge.com defoge.com https://*.defoge.com *.riedto.com riedto.com https://*.riedto.com *.thisde.com thisde.com https://*.thisde.com *.toormpc.com toormpc.com https://*.toormpc.com *.weforo.com weforo.com https://*.weforo.com *.ydoms.com ydoms.com https://*.ydoms.com *.etndl.com etndl.com https://*.etndl.com *.i.checkru.net i.checkru.net https://*.i.checkru.net *.gpuzt.com gpuzt.com https://*.gpuzt.com *.xxx-hunt-m.com xxx-hunt-m.com https://*.xxx-hunt-m.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mypornoflv.tv *.mypornoflv.tv idexx.net *.idexx.net jwpcdn.com *.jwpcdn.com 88.150.172.218 *.88.150.172.218 88.150.172.219 *.88.150.172.219 *.vk.com https://*.vk.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.bing.com https://*.bing.com *.go.mail.ru https://*.go.mail.ru *.google-analytics.com https://*.google-analytics.com *.wwteasers.org wwteasers.org https://*.wwteasers.org *.static.wwgate.ru static.wwgate.ru https://*.static.wwgate.ru *.wwclickgo.com wwclickgo.com https://*.wwclickgo.com *.google.ru https://*.google.ru *.livestatisc.com livestatisc.com https://*.livestatisc.com *.static.wwpon365.ru static.wwpon365.ru https://*.static.wwpon365.ru *.yastatic.net yastatic.net https://*.yastatic.net *.promokrot.com promokrot.com https://*.promokrot.com *.ofapes.com ofapes.com https://*.ofapes.com *.scund.com scund.com https://*.scund.com *.biasdo.com biasdo.com https://*.biasdo.com *.andase.com andase.com https://*.andase.com *.andumb.com andumb.com https://*.andumb.com *.basand.com basand.com https://*.basand.com *.defoge.com defoge.com https://*.defoge.com *.riedto.com riedto.com https://*.riedto.com *.thisde.com thisde.com https://*.thisde.com *.toormpc.com toormpc.com https://*.toormpc.com *.weforo.com weforo.com https://*.weforo.com *.ydoms.com ydoms.com https://*.ydoms.com *.etndl.com etndl.com https://*.etndl.com *.i.checkru.net i.checkru.net https://*.i.checkru.net *.gpuzt.com gpuzt.com https://*.gpuzt.com *.xxx-hunt-m.com xxx-hunt-m.com https://*.xxx-hunt-m.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com secure.gravatar.com twitter.com plus.google.com apis.google.com maps.googleapis.com www.googletagmanager.com platform.twitter.com facebook.com connect.facebook.net
"default-src * 'unsafe-inline' 'unsafe-eval' data: blob"
script-src 'self' 'unsafe-eval' www.googletagmanager.com www.gstatic.com https://www.google.com/recaptcha/api.js ajax.googleapis.com www.google-analytics.com apis.google.com d2vqbs7xgyce6n.cloudfront.net js.recurly.com api.recurly.com platform.twitter.com syndication.twitter.com *.twimg.com static.ads-twitter.com analytics.twitter.com *.intercom.io js.intercomcdn.com cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net www.googleadservices.com googleads.g.doubleclick.net 'unsafe-inline' 'sha384-mns2hxtrw1r/kffnoydlx1ao4ore/m/wephxlnatzg3gkivtg9mfyj6t8vu0w2ub' 'sha384-4cngw/fj9bbvrtsa0kskg7bzyack0bhy6ll528x9pw9djibf6nh/ktholnvjw9rp'
"default-src 'self' data: 'inline-script' 'unsafe-inline' 'unsafe-eval' /static http://data.. http://data.xn--80aaaawdltkvth1aig1f.xn--p1ai http://data.* http://yandex.st http://*.yandex.ru https://*.yandex.ru http://yastatic.net http://*.maps.yandex.net http://*.mail.ru http://*.list.ru http://*.rambler.ru http://www.google-analytics.com http://www.skypeassets.com http://79.135.240.42:8008 https://www.youtube.com
"default-src 'self' *.eviivo.com *.toprooms.com *.googleapis.com *.gstatic.com *.eviivo.media data:
script-src 'unsafe-eval' 'unsafe-inline' * data:
style-src 'unsafe-inline' 'self' * data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval'  https: data: http://fonts.googleapis.com http://fonts.gstatic.com http://www.google-analytics.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com http://graph.facebook.com http://widgets.pinterest.com http://maps.google.com http://csi.gstatic.com http://maps.gstatic.com http://maps.googleapis.com http://www.linkedin.com http://api-public.addthis.com http://localhost
script-src 'self' 'unsafe-inline' 'unsafe-eval' oss.maxcdn.com ads.adfox.ru www.google-analytics.com *.googleadservices.com adservice.google.ru adservice.google.com.ua *.yandex.net *.yandex.ru *.yandex.ua yastatic.net *.imgsmail.ru *.google.com *.yandex.st an.yandex.ru platform.twitter.com cas.criteo.com *.mail.ru vk.com *.googlesyndication.com *.googletagservices.com adv758968.ru adforce.ru *.doubleclick.net  x1.vinread.net *.zencdn.net mobiads.ru utarget.ru afterview.ru *.vispot.io *.adap.tv *.liverail.com *.spotxchange.com *.buzzoola.com *.advarkads.com *.lkqd.com *.advertising.com static.baza.farpost.ru gstatic.com www.gstatic.com http://thefox.mobi/0dvp/ https://netdna.bootstrapcdn.com https://ajax.googleapis.com *.adsafeprotected.com  idntfy.ru mobuli.info  mobisway.info cnt-count.ru countstat.ru eboundservices.com digital-forest.info s17365.org/rotation.php news.gnezdo.ru btstds.ru cackle.me *.cackle.me www.farpost.ru https://adtags.pro https://*.adtags.pro https://btsds.ru https://*.vrcteam.ru https://*.betweendigital.com https://*.exopay.ru https://s0.2md.net https://fl.imgsniper.com https://static.bulham.com https://*.sape.ru https://safesource.ru https://code.createjs.com https://static.bumlam.com sad2tizer.ru ad.slickjump.com slickjump.com sjsmartcontent.org https://www.googletagmanager.com https://tds.admaxer.ru https://meganotify.com https://notifyday.com
"frame-ancestors 'self' *.facebook.com *.hipay-tpp.com *.payline.com
, default-src 'self' wss: data: 'unsafe-inline' 'unsafe-eval' *.hipay-tpp.com *.payline.com maxcdn.bootstrapcdn.com *.youtube.com *.facebook.com *.facebook.net *.ads.twitter.com fast.fonts.net fonts.googleapis.com *.gstatic.com *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com *.doubleclick.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com *.googleusercontent.com www.googleadservices.com google-analytics-ru.bi.owox.com *.ads-twitter.com *.realytics.io *.cloudfront.net *.hotjar.com *.bing.com *.hellobar.com *.amazonaws.com *.igodigital.com cimg.leguide.com analytics.twitter.com cdn.augur.io *.visualwebsiteoptimizer.com t.co conversion.awetools.com code.jquery.com *.twitter.com click.exacttarget.com i.ytimg.com connect.ekomi.de *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com *.leadpages.net js.center.io *.lpages.co *.leadpages.io *.twenga.fr *.yieldify.com *.ipify.org *.leadpages.net cdnjs.cloudflare.com
, script-src 'self' wss: data: 'unsafe-inline' 'unsafe-eval'  *.hipay-tpp.com *.payline.com maxcdn.bootstrapcdn.com *.youtube.com *.facebook.com *.facebook.net *.ads.twitter.com fast.fonts.net fonts.googleapis.com *.gstatic.com *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com *.doubleclick.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com *.googleusercontent.com www.googleadservices.com google-analytics-ru.bi.owox.com *.ads-twitter.com *.realytics.io *.cloudfront.net *.hotjar.com *.bing.com *.hellobar.com *.amazonaws.com *.igodigital.com cimg.leguide.com analytics.twitter.com cdn.augur.io *.visualwebsiteoptimizer.com t.co conversion.awetools.com code.jquery.com *.twitter.com click.exacttarget.com i.ytimg.com connect.ekomi.de *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com *.leadpages.net js.center.io *.lpages.co *.leadpages.io *.twenga.fr *.yieldify.com *.ipify.org cdnjs.cloudflare.com
, connect-src 'self' wss: data: 'unsafe-inline' 'unsafe-eval' *.hipay-tpp.com *.payline.com maxcdn.bootstrapcdn.com *.youtube.com *.facebook.com *.facebook.net *.ads.twitter.com fast.fonts.net fonts.googleapis.com *.gstatic.com *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com *.doubleclick.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com *.googleusercontent.com www.googleadservices.com google-analytics-ru.bi.owox.com *.ads-twitter.com *.realytics.io *.cloudfront.net *.hotjar.com *.bing.com *.hellobar.com *.amazonaws.com *.igodigital.com cimg.leguide.com analytics.twitter.com cdn.augur.io *.visualwebsiteoptimizer.com t.co conversion.awetools.com code.jquery.com *.twitter.com click.exacttarget.com i.ytimg.com connect.ekomi.de *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com *.leadpages.net js.center.io *.lpages.co *.leadpages.io *.twenga.fr *.yieldify.com *.ipify.org
, img-src 'self' data: *.hipay-tpp.com *.payline.com *.facebook.com *.facebook.net *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com *.doubleclick.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com *.googleusercontent.com www.googleadservices.com google-analytics-ru.bi.owox.com *.visualwebsiteoptimizer.com t.co click.exacttarget.com i.ytimg.com connect.ekomi.de ssl.gstatic.com *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net *.hellobar.com *.amazonaws.com portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com bat.bing.com *.leadpages.net static.hotjar.com static.leadpages.net api.leadpages.io assets.yieldify.com
, style-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com fast.fonts.net fonts.googleapis.com conversion.awetools.com tagmanager.google.com www.googletagmanager.com *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com *.leadpages.net *.lpages.co static.hotjar.com maxcdn.bootstrapcdn.com
, font-src 'self' data: *.google.com *.google.fr *.google.co.uk *.google.it *.google.es *.google.de *.google.ie ajax.googleapis.com fast.fonts.net fonts.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.hipay-tpp.com *.payline.com *.tawk.to cdn.jsdelivr.net *.paidonresults.com *.paidonresults.net portgk.com cdn.pagamastarde.com *.members.cj.com *.cj.com *.datatransfer.cj.com *.jdoqocy.com *.tkqlhce.com *.anrdoezrs.net *.kqzyfj.com *.dpbolvw.net www.emjcd.com cj.mplxtms.com www.pkracv.com www.kdukvh.com www.qksrv.net www.commission-junction.com s.yimg.com cj.dotomi.com *.yahoo.com *.newrelic.com *.nr-data.net *.adnxs.com *.lpages.co static.hotjar.com
script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/
connect-src https://kredobank.com.ua maps.googleapis.com data: https: mailto:
img-src https://kredobank.com.ua maps.google.com maps.gstatic.com data: http: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://kredobank.com.ua ajax.googleapis.com maxcdn.bootstrapcdn.com maps.googleapis.com maps.google.com cdnjs.cloudflare.com https:
style-src 'self' 'unsafe-inline' 'report-sample' https://kredobank.com.ua fonts.googleapis.com https:
"default-src https://www.firstsoftware.co.nz https://www.google-analytics.com https://*.doubleclick.net https://www.google.com https://*.google.co.nz https://*.facebook.com https://*.youtube.com
child-src 'self' blob: www.google.com www.youtube.com cdn.dochub.com docs.google.com accounts.google.com content.googleapis.com platform.twitter.com syndication.twitter.com js.stripe.com
connect-src 'self' blob: www.google.com example.com cdn.dochub.com docs.google.com platform.twitter.com www.dropbox.com *.nr-data.net ws://localhost:35729 ws://0.0.0.0:35729 ws://ws.pusherapp.com *.pusher.com api.onedrive.com graph.microsoft.com api.rollbar.com *.gravatar.com maps.gstatic.com www.googleapis.com sentry.io
frame-src 'self' blob: www.google.com www.youtube.com cdn.dochub.com docs.google.com accounts.google.com content.googleapis.com platform.twitter.com syndication.twitter.com js.stripe.com dochub.com localhost:3000 localhost:9292 www.gstatic.com
img-src 'self' blob: data: *.dochub.com www.google-analytics.com docs.google.com www.gravatar.com platform.twitter.com pbs.twimg.com syndication.twitter.com stats.g.doubleclick.net *.nr-data.net *.googleapis.com *.gstatic.com br-rx.atatus.com sentry.io www.google.com/ads/ga-audiences
script-src 'self' data: blob: 'unsafe-eval' 'unsafe-inline' cdn.dochub.com www.google-analytics.com docs.google.com apis.google.com www.google.com platform.twitter.com cdn.syndication.twimg.com js.stripe.com localhost:35729 0.0.0.0:35729 maxcdn.bootstrapcdn.com www.dropbox.com *.pusher.com js.live.net cdnjs.cloudflare.com api.rollbar.com *.newrelic.com *.nr-data.net *.gravatar.com *.googleapis.com maps.gstatic.com www.gstatic.com dmc1acwvwny3.cloudfront.net/atatus.js br-rx.atatus.com
style-src 'self' 'unsafe-inline' cdn.dochub.com docs.google.com platform.twitter.com fonts.googleapis.com maxcdn.bootstrapcdn.com maps.gstatic.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://hatch.dm:443 https://*.hatch.dm:443 https://*.hatch.dm https://hatch.dm https://*.hatch.dm https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.hatch.dm https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'
media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.hatch.dm https://miro.hatch.dm https://pbs.twimg.com 'self' blob:
"default-src 'self' https: data: *.mail.ru *.yandex.ru yandexadexchange.net *.facebook.com *.googlesyndication.com *.gstatic.com *.rambler.ru *.adfox.ru
script-src 'self' https: 'unsafe-inline' 'unsafe-eval' docdoc.ru *.google.com *.google.ru *.googlesyndication.com *.yandex.ru yastatic.net *.yandex.net vk.com *.ok.ru *.facebook.com *.pinterest.com *.mail.ru *.top100.ru *.adfox.ru
style-src 'self' https: 'unsafe-inline' docdoc.ru *.googleapis.com
frame-src 'self' https: www.youtube.com yastatic.net
img-src 'self' *.facebook.com *.youtube.com *.twitter.com http://toplist.cz *.google-analytics.com *.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com *.facebook.net *.addthisedge.com *.google-analytics.com *.googletagmanager.com *.mouseflow.com *.hotjar.com *.addthis.com *.facebook.com *.youtube.com
child-src 'self' *.facebook.com *.facebook.net *.addthis.com *.twitter.com *.google.com *.google.cz *.hotjar.com *.youtube.com
connect-src 'self' https://www.youtube.com *.google-analytics.com *.addthis.com *.hotjar.com
"frame-ancestors 'self' *.cruiseamerica.com *.bigyam.com *.here.com"
"default-src 'unsafe-inline' 'self' *.twitter.com *.osushi.love *.stripe.com *.google.com *.google.co.jp www.googletagmanager.com www.google-analytics.com *.googlesyndication.com googleads.g.doubleclick.net
"script-src 'self' https://d3js.org https://datamaps.github.io https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
"script-src https://wesingapp.com http://wesingapp.com  https://*.wesingapp.com http://*.wesingapp.com https://*.qq.com http://*.qq.com https://*.gtimg.cn http://*.gtimg.cn https://*.tenpay.com https://*.idqqimg.com http://*.idqqimg.com https://*.gtimg.com http://*.gtimg.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' viewpointforum.com vpf.me *.google.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com data: blob:
connect-src 'self' viewpointforum.com vpf.me *.google.com *.gstatic.com *.googleapis.com
"default-src https: 'self' 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.mouseflow.com https://www.google-analytics.com https://v2.zopim.com/ https://my.hellobar.com/ https://static.getclicky.com/ https://in.getclicky.com https://gitcdn.github.io https://ajax.googleapis.com https://js.stripe.com https://s3.amazonaws.com 'unsafe-inline'
style-src 'self' 'unsafe-inline' https://gitcdn.github.io  https://fonts.googleapis.com
img-src 'self' https://s3.amazonaws.com https://hey.hellobar.com data: https://www.google-analytics.com https://o2.mouseflow.com https://stats.g.doubleclick.net/ https://v2assets.zopim.io https://v2.zopim.com
frame-src 'self' https://js.stripe.com https://clickmeter.com https://cnvrsns.clickmeter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.silnet.pl *.googletagmanager.com www.google-analytics.com *.facebook.net *.profiauto.silnet.pl profiauto.silnet.pl *.jsdelivr.net *.google.com *.googleapis.com cdnjs.cloudflare.com *.googleadservices.com *.doubleclick.net
style-src 'self' 'unsafe-inline' profiauto.silnet.pl fonts.googleapis.com ssl.silnet.pl
img-src 'self' silnet.pl data: ssl.silnet.pl www.google-analytics.com *.profiauto.silnet.pl profiauto.silnet.pl *.doubleclick.net profiauto.pl *.profiauto.pl *.googletagmanager.com *.google.com *.google.pl
font-src 'self' fonts.gstatic.com *.profiauto.silnet.pl profiauto.silnet.pl
"script-src 'self' https://*.mercer.com https://*.cloudflare.com https://*.firebaseapp.com https://*.vimeocdn.com https://*.google-analytics.com 'unsafe-eval' 'unsafe-inline'"
"script-src 'self' *.readspeaker.com *.ckeditor.com *.soaaids.nl *.hotjar.com *.adform.net *.addthisedge.com *.addthis.com *.facebook.com *.cdn77.org *.smartsupp-widget-161959.c.cdn77.org *.smartsuppchat.com *.adscience.nl *.bugherd.com *.googletagmanager.com *.googleapis.com 'unsafe-inline' connect.facebook.net 'unsafe-eval' dev.visualwebsiteoptimizer.com *.google-analytics.com *.bootstrapcdn.com *.google.com *.gstatic.com *.typekit.net
style-src 'self' 'unsafe-inline' *.ckeditor.com *.fonts.googleapis.com *.googleapis.com *.cdn77.org *.bootstrapcdn.com *.readspeaker.com
font-src 'self' data: *.ckeditor.com *.typekit.net *.cdn77.org *.fonts.gstatic.com *.gstatic.com *.bootstrapcdn.com *.fonts.googleapis.com *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ytimg.com https://*.ytimg.com http://ytimg.com http://*.ytimg.com https://youtube.com https://*.youtube.com http://youtube.com http://*.youtube.com https://yandex.ru https://*.yandex.ru http://yandex.ru http://*.yandex.ru https://yandex.net https://*.yandex.net http://yandex.net http://*.yandex.net https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net http://*.yandexadexchange.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st liveinternet.ru *.liveinternet.ru mail.ru *.mail.ru imgsmail.ru *.imgsmail.ru *.top100.ru top100.ru *.uralweb.ru uralweb.ru
object-src 'self' https://yandex.ru https://*.yandex.ru http://yandex.ru http://*.yandex.ru https://yandex.net https://*.yandex.net http://yandex.net http://*.yandex.net https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net http://*.yandexadexchange.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st
style-src 'self' 'unsafe-inline' * data: https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st
media-src 'self' blob: * https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandex.net https://*.yandex.net http://yandex.net http://*.yandex.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st
frame-src 'self' https://youtube.com https://*.youtube.com http://youtube.com http://*.youtube.com https://yandex.ru https://*.yandex.ru http://yandex.ru http://*.yandex.ru https://yandex.net https://*.yandex.net http://yandex.net http://*.yandex.net https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net http://*.yandexadexchange.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st mail.ru *.mail.ru
font-src 'self' data: http://gstatic.com http://*.gstatic.com https://gstatic.com https://*.gstatic.com
connect-src 'self' https://yandex.ru https://*.yandex.ru http://yandex.ru http://*.yandex.ru https://yandex.net https://*.yandex.net http://yandex.net http://*.yandex.net https://yastatic.net https://*.yastatic.net http://yastatic.net http://*.yastatic.net https://yandexadexchange.net https://*.yandexadexchange.net http://yandexadexchange.net http://*.yandexadexchange.net https://yandex.st https://*.yandex.st http://yandex.st http://*.yandex.st mail.ru *.mail.ru *.rambler.ru rambler.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://boarshead.scdn5.secure.raxcdn.com *.typekit.net ajax.googleapis.com *.addthis.com www.googletagmanager.com www.googleadservices.com www.bugherd.com *.facebook.net *.facebook.com www.google-analytics.com *.chartbeat.com *.pinterest.com *.youtube.com *.serving-sys.com *.ytimg.com a248.e.akamai.net dnn506yrbagrg.cloudfront.net *.addthisedge.com *.twitter.com *.newrelic.com cdn.ampproject.org *.google.com *.nr-data.net hosted.where2stageit.com
font-src 'self' data: *.typekit.net *.gstatic.com
style-src 'self' 'unsafe-inline' https://boarshead.scdn5.secure.raxcdn.com tagmanager.google.com fonts.googleapis.com
img-src 'self' data: https://boarshead.scdn5.secure.raxcdn.com *.typekit.net www.google-analytics.com *.facebook.com *.chartbeat.net *.ytimg.com *.adsrvr.org *.pinterest.com *.doubleclick.net *.gstatic.com *.google.com loadm.exelator.com ib.adnxs.com odr.mookie1.com tags.rd.linksynergy.com image2.pubmatic.com i.liadm.com io.narrative.io dmp.truoptik.com e.nexac.com match.sharethrough.com pixel.advertising.com pixel.tapad.com ads.scorecardresearch.com x.bidswitch.net adadvisor.net t.mookie1.com *.boarshead.com boarshead.com load77.exelator.com
connect-src 'self' performance.typekit.net *.facebook.com *.addthis.com www.googletagmanager.com *.boarshead.com
frame-src 'self' *.youtube.com *.addthis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.google.com locations.boarshead.com
"default-src https: wss: 'self' 'unsafe-inline' 'unsafe-eval'
script-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://ajax.googleapis.com https://www.google-analytics.com https://*.crazyegg.com https://s3.amazonaws.com https://content.govdelivery.com https://eastsussex.gov.uk
style-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://fonts.googleapis.com https://content.govdelivery.com https://eastsussex.gov.uk
img-src 'self' data: https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://eastsussexgovuk.blob.core.windows.net https://www.google-analytics.com https://*.crazyegg.com https://gtrk.s3.amazonaws.com https://s3.amazonaws.com https://content.govdelivery.com https://eastsussex.gov.uk
connect-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://apps.eastsussex.gov.uk
font-src 'self' data: fonts.gstatic.com cdn.tinymce.com foswiki-slackin.herokuapp.com
script-src 'self' *.googleapis.com cdn.tinymce.com foswiki-slackin.herokuapp.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' fonts.googleapis.com cdn.tinymce.com foswiki-slackin.herokuapp.com 'unsafe-inline'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yukiworks.com https://apis.google.com https://*.googleapis.com https://ssl.google-analytics.com
frame-ancestors 'self' https://*.yukiworks.nl https://*.yukiworks.be https://*.yukiworks.es https://*.yukiworks.com
style-src 'self' 'unsafe-inline'                              https://www.emblibrary.com http://www.emblibrary.com emblibrary.com                              https://fonts.googleapis.com http://www.fonts.googleapis.com fonts.googleapis.com
script-src 'self' 'unsafe-eval' 'unsafe-inline'                              https://www.emblibrary.com http://www.emblibrary.com emblibrary.com                             https://www.google-analytics.com http://www.google-analytics.com google-analytics.com *.google-analytics.com                             https://ajax.googleapis.com http://www.ajax.googleapis.com ajax.googleapis.com                              http://www.seal.verisign.com/getseal seal.verisign.com/getseal                             https://assets.pinterest.com/js/ http://assets.pinterest.com/js/ assets.pinterest.com/js                              https://log.pinterest.com http://log.pinterest.com log.pinterest.com                             https://www.googleadservices.com/pagead/conversion.js' http://www.googleadservices.com/pagead/conversion.js' www.googleadservices.com/pagead/conversion.js                             https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ http://googleads.g.doubleclick.net/pagead/viewthroughconversion/ googleads.g.doubleclick.net/pagead/viewthroughconversion/                             https://www.googletagmanager.com/ http://www.googletagmanager.com/ googletagmanager.com/                             https://bat.bing.com/bat.js http://bat.bing.com/bat.js bat.bing.com/bat.js
img-src 'self' data:                             https://www.emblibrary.com http://www.emblibrary.com emblibrary.com                             privacy-policy.truste.com                                                                 https://www.google-analytics.com http://www.google-analytics.com google-analytics.com                             https://stats.g.doubleclick.net http://www.stats.g.doubleclick.net stats.g.doubleclick.net                                                                 https://www.google.com http://www.google.com google.com                              https://seal.websecurity.norton.com/getseal https://seal.websecurity.norton.com/getseal seal.websecurity.norton.com/getseal                             https://www.googletagmanager.com/ http://www.googletagmanager.com/ googletagmanager.com/                             https://bat.bing.com/action/ http://bat.bing.com/action/ bat.bing.com/action/
script-src 'strict-dynamic' 'nonce-mtlhotkxmtmtyjfhzi00owrilthintytnzm0ogjhymfmyzgy' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.penfox.ru penfox.ru ulogin.ru *.yahooapis.com *.yandex.ru yandex.ru adservice.google.ru *.google.com cdn.jsdelivr.net *.yandex.net yastatic.net yandex.st *.yandex.st https://*.yandex.ru *.admitad.com *.facebook.com *.facebook.net *.google-analytics.com *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com vk.com *.vk.com https://vk.com https://*.vk.com userapi.com ok.ru *.ok.ru
frame-src 'self' *.penfox.ru penfox.ru *.soundcloud.com ulogin.ru st.yandexadexchange.net yastatic.net disqus.com *.facebook.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com *.vimeo.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru *.1tv.ru
"default-src http: https: 'self' data: 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' api.openweathermap.org https: https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com
frame-src 'self' www.leon.gob.mx sistemas.leon.gob.mx sitiosweb.leon.gob.mx st.leon.gob.mx:15080 fovatec.leon.gob.mx www.youtube.com http://cp.usastreams.com https: https://www.ustream.tv https://aplicacionesinternas.leon.gob.mx platform.twitter.com accounts.google.com staticxx.facebook.com syndication.twitter.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://cp.usastreams.com https: https://www.google-analytics.com https://ssl.google-analytics.com *.google.com *.googleapis.com http://platform.twitter.com https://apis.google.com connect.facebook.net
font-src 'self' 'unsafe-inline' data: https: https://fonts.gstatic.com *.googleapis.com
style-src 'self' 'unsafe-inline' data: https: *.googleapis.com *.google.com http://cp.usastreams.com
img-src 'self' data: blob: https: ssl.gstatic.com *.leon.gob.mx *.google.com *.googleapis.com https://www.google-analytics.com www.facebook.com
img-src 'self' data: https://*.gravatar.com https://*.wp.com https://s.w.org
font-src 'self' data: https://fonts.gstatic.com https://wordpress.com
frame-src 'self' https://www.youtube.com https://jetpack.wordpress.com http://www.visugpx.com https://*.wp.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gravatar.com https://*.wp.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.gravatar.com https://*.wp.com"
"default-src 'self' mc.yandex.ru googletagmanager.com google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' vk.com yastatic.net *.yandex.ru *.googletagmanager.com *.google-analytics.com"
img-src 'self' data: https://*.rackcdn.com https://*.raxcdn.com https://platform-lookaside.fbsbx.com https://*.googleusercontent.com https://maps.gstatic.com https://*.rentalcars.com https://www.googletagmanager.com https://*.googleapis.com https://azoresgetaways.com https://*.azoresgetaways.com https://stats.g.doubleclick.net https://*.google.com https://*.google.pt https://*.zopim.com https://www.google-analytics.com https://*.facebook.com https://cdsusa.veinteractive.com https://adfarm.mediaplex.com https://pub.sapo.pt https://www.googleadservices.com https://www.globalmediaserver.com https://cdn.rcstatic.com https://images.travelnow.com https://photos.hotelbeds.com https://seal.godaddy.com https://sealserver.trustwave.com https://pci.usd.de https://*.resosys.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rackcdn.com https://*.raxcdn.com  https://*.addthisedge.com https://*.addthis.com https://*.resosys.com https://code.jquery.com https://*.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.zopim.com https://*.zopim.io https://sealserver.trustwave.com https://seal.godaddy.com https://cdnjs.cloudflare.com https://*.google.com https://*.google.pt https://www.gstatic.com https://cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' https://*.rackcdn.com https://*.raxcdn.com https://www.gstatic.com http://fonts.googleapis.com https://fonts.googleapis.com https://images.resosys.com https://cdnjs.cloudflare.com
frame-src 'self' https://*.firebaseapp.com/ https://*.addthis.com https://*.facebook.com https://*.hotjar.com https://*.emjcd.com https://*.google.com https://*.youtube.com
font-src 'self' data: https://*.rackcdn.com https://*.raxcdn.com https://*.resosys.com https://*.zopim.com https://fonts.gstatic.com
connect-src 'self' https://stats.g.doubleclick.net https://fcm.googleapis.com https://*.addthis.com https://*.zopim.com wss://*.zopim.com wss://*.hotjar.com https://*.hotjar.com https://www.google-analytics.com"
script-src 'self' 'unsafe-inline' ajax.googleapis.com api.convertkit.com app.convertkit.com assets.convertkit.com f.convertkit.com cdnjs.cloudflare.com cdn.cookielaw.org optanon.blob.core.windows.net geolocation.onetrust.com platform.twitter.com cdn.syndication.twimg.com
img-src 'self' *.twitter.com *.twimg.com data:
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com pro.fontawesome.com cdnjs.cloudflare.com optanon.blob.core.windows.net platform.twitter.com *.twimg.com
connect-src 'self' api.convertkit.com app.convertkit.com *.twitter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://directechs.blob.core.windows.net http://beta.directechs.com http://new.directechs.com http://www.directechs.com https://www.directechs.com http://www.directed.com https://www.directed.com https://www.youtube.com/user/snakepittraining https://fonts.googleapis.com http://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://www.inspiro-media.com https://www.inspiro-media.com https://www.facebook.com/directechs https://www.youtube.com http://www.directeddealers.com http://colt.calamp-ts.com https://www.directedstore.com http://fonts.gstatic.com https://fonts.gstatic.com http://ssl.google-analytics.com https://ssl.google-analytics.com https://server4gateway.clickandchat.com  http://server4gateway.clickandchat.com
style-src 'self' 'unsafe-inline' https://directechs.blob.core.windows.net http://beta.directechs.com http://new.directechs.com http://www.directechs.com https://www.directechs.com http://www.directed.com https://www.directed.com https://www.youtube.com/user/snakepittraining https://fonts.googleapis.com http://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://www.inspiro-media.com https://www.inspiro-media.com https://www.facebook.com/directechs https://www.youtube.com http://www.directeddealers.com http://colt.calamp-ts.com https://www.directedstore.com http://fonts.gstatic.com https://fonts.gstatic.com http://ssl.google-analytics.com https://ssl.google-analytics.com https://server4gateway.clickandchat.com  http://server4gateway.clickandchat.com https://cdn.datatables.net
img-src 'self' 'unsafe-inline' https://directechs.blob.core.windows.net http://beta.directechs.com http://new.directechs.com http://www.directechs.com https://www.directechs.com http://www.directed.com https://www.directed.com https://www.youtube.com/user/snakepittraining https://fonts.googleapis.com http://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://www.inspiro-media.com https://www.inspiro-media.com https://www.facebook.com/directechs https://www.youtube.com http://www.directeddealers.com http://colt.calamp-ts.com https://www.directedstore.com http://fonts.gstatic.com https://fonts.gstatic.com http://ssl.google-analytics.com https://ssl.google-analytics.com https://server4gateway.clickandchat.com  http://server4gateway.clickandchat.com https://cdn.datatables.net
font-src 'self' 'unsafe-inline' https://directechs.blob.core.windows.net http://beta.directechs.com http://new.directechs.com http://www.directechs.com https://www.directechs.com http://www.directed.com https://www.directed.com https://www.youtube.com/user/snakepittraining https://fonts.googleapis.com http://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://www.inspiro-media.com https://www.inspiro-media.com https://www.facebook.com/directechs https://www.youtube.com http://www.directeddealers.com http://colt.calamp-ts.com https://www.directedstore.com http://fonts.gstatic.com https://fonts.gstatic.com http://ssl.google-analytics.com https://ssl.google-analytics.com https://server4gateway.clickandchat.com  http://server4gateway.clickandchat.com https://cdn.datatables.net
frame-src 'self' 'unsafe-inline' https://www.vcp.cloud https://dev.vcp-devtest.cloud https://directechs.blob.core.windows.net http://beta.directechs.com http://new.directechs.com http://www.directechs.com https://www.directechs.com http://www.directed.com https://www.directed.com https://www.youtube.com/user/snakepittraining https://fonts.googleapis.com http://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://www.inspiro-media.com https://www.inspiro-media.com https://www.facebook.com/directechs https://www.youtube.com http://www.directeddealers.com http://colt.calamp-ts.com https://colt.calamp-ts.com https://www.directedstore.com http://fonts.gstatic.com https://fonts.gstatic.com http://ssl.google-analytics.com https://ssl.google-analytics.com https://server4gateway.clickandchat.com  http://server4gateway.clickandchat.com https://cdn.datatables.net
"script-src 'unsafe-inline' 'unsafe-eval' *.diplomatie.gouv.fr *.aticdn.net  *.france-visas.gouv.fr france-visas.gouv.fr
script-src 'unsafe-inline' 'unsafe-eval' https://wineclubreviews.net https://*.wineclubreviews.net  https://*.jquery.com  https://*.bootstrapcdn.com https://*.swiftypecdn.com  https://*.consensu.org/ https://*.pinimg.com/ https://*.pinterest.com/ https://*.google-analytics.com  https://*.googleapis.com  https://*.olark.com  https://*.googletagmanager.com  https://*.facebook.com  https://connect.facebook.net  https://*.cloudflare.com  https://*.nr-data.net  https://*.sharethis.com
connect-src https://wineclubreviews.net https://*.wineclubreviews.net https://*.swiftypecdn.com https://*.swiftype.com https://*.google-analytics.com https://*.doubleclick.net https://*.consensu.org/ https://*.pinterest.com/ https://*.sharethis.com https://*.olark.com
img-src  https://wineclubreviews.net https://*.wineclubreviews.net https://*.swiftype.com https://*.imgix.net https://*.pinterest.com/ https://*.sharethis.com https://pinterest.adsymptotic.com https://*.linksynergy.com https://www.awltovhc.com https://*.shareasale.com https://www.giftbasketsoverseas.com  https://*.facebook.com data:  https://*.olark.com  https://*.google-analytics.com  https://google.com  https://www.google.com https://*.goldmedalwineclub.com https://stats.g.doubleclick.net  https://i.ytimg.com  https://i.imgur.com  https://*.facebook.com
style-src 'unsafe-inline' https://wineclubreviews.net https://*.wineclubreviews.net https://*.swiftypecdn.com https://maxcdn.bootstrapcdn.com  https://static.olark.com https://*.fontawesome.com https://fonts.googleapis.com  https://cdnjs.cloudflare.com
font-src https://wineclubreviews.net https://*.wineclubreviews.net https://*.fontawesome.com https://fonts.gstatic.com  https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  https://cdnjs.cloudflare.com
frame-src  https://wineclubreviews.net https://*.wineclubreviews.net https://*.consensu.org/ https://*.facebook.com https://static.olark.com  https://www.youtube.com https://*.sharethis.com"
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline'
"frame-src 'self' www.lojatensordin.com *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
script-src https://datamining.immerda.ch/ 'self' 'unsafe-inline' 'unsafe-eval'
img-src https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org data: 'self'"
"default-src https: wss: gap: gap-iab: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' cdn.usersnap.com s.ytimg.com www.youtube.com cdn.polyfill.io www.google-analytics.com platform.twitter.com platform.linkedin.com tagmanager.google.com www.googletagmanager.com bacardilimited.zendesk.com api.usersnap.com https://use.typekit.net https://d3mvnvhjmkxpjz.cloudfront.net 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' https://www.creativejuiz.fr  'unsafe-inline' 'unsafe-eval' https://secure.statcounter.com https://static.codepen.io  https://www.google.com https://www.google-analytics.com https://apis.google.com https://ssl.google-analytics.com https://www.youtube.com https://ajax.googleapis.com https://platform.twitter.com https://syndication.twitter.com http://cdn.api.twitter.com https://connect.facebook.net https://onesignal.com http://creativejuiz.us4.list-manage1.com https://codepen.io http://caniuse.bitsofco.de https://cdn.jsdelivr.net https://s.codepen.io https://codepen.io https://assets.codepen.io https://graph.facebook.com https://widget.intercom.io https://api.imagify.io https://www.paypalobjects.com https://cdn.onesignal.com"
style-src 'self' 'unsafe-inline' *.google.com *.hotjar.com *.cdnwidget.com *.mailchimp.com yomojo.com.au *.yomojo.com.au *.myfonts.net *.joinhoney.com *.optus.com.au *.googleapis.com
img-src https: data: http: *.hotjar.com *.clickmeter.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.akamaized.net *.rokt.com *.facebook.com *.cdnwidget.com *.outbrain.com *.cloudflare.com *.hotjar.com trackcmp.net *.typekit.net *.abmr.net *.tctm.co *.pinterest.com *.addthisedge.com *.amazonaws.com *.google.com *.linkedin.com *.addthis.com *.twitter.com yomojo.com.au data: blob: *.doubleclick.net *.googletagmanager.com *.mathtag.com *.cloudfront.net *.googleadservices.com *.ucweb.com cdn.jsdelivr.net *.sendgrid.net *.optus.com.au code.jquery.com *.googleapis.com www.google-analytics.com dev.visualwebsiteoptimizer.com *.facebook.net tag.marinsm.com tag.retargeter.com bat.bing.com pixel-geo.prfct.co yom001.ges.acquirebpo.com:9443 *.adroll.com
font-src 'self' 'unsafe-inline' data: *.hotjar.com *.typekit.net *.joinhoney.com fonts.gstatic.com
connect-src 'self' *.rokt.com *.hotjar.com *.cdnwidget.com *.cdnbasket.net *.tctm.co *.track.uc.cn *.addthis.com *.linkedin.com *.google.com *.google.com.au *.google.com.ph *.google-analytics.com *.googleadservices.com api.bincodes.com *.api4load.com *.ucweb.com uc.gre gj.track.uc.cn *.facebook.net *.facebook.com *.doubleclick.net freegeoip.net secure.adnxs.com tag.retargeter.com wss: yom001.ges.acquirebpo.com:9443 yom001.ges.acquirebpo.com:8443
frame-src 'self' *.rokt.com *.youtube.com *.hotjar.com *.omgt8.com *.omgst8.com *.google.com *.twitter.com *.addthis.com *.doubleclick.net *.ojrq.net *.dgm-au.com *.mathtag.com *.go2cloud.org www.remintrex.com *.facebook.net *.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.maps.google.com https://maps.googleapis.com *.googletagmanager.com *.googleapis.com *.facebook.com *.facebook.net *.fbcdn.net *.google-analytics.com *.typekit.net https://seal.geotrust.com *.youtube.com/iframe_api https://s.ytimg.com *.hotjar.com *.cloudfront.net *.quantserve.com www.googleadservices.com *.jquery.com *.quantcount.com
style-src 'self' 'unsafe-inline' https://*.gstatic.com *.googleapis.com https://*.cloudflare.com
font-src 'self' 'unsafe-inline' *.gstatic.com https://*.cloudflare.com https://use.typekit.net data:
frame-src 'self' *.fls.doubleclick.net  https://www.facebook.com/ https://vars.hotjar.com/ https://*.doubleclick.net/ https://www.youtube.com/ https://www.twitter.com/
img-src 'self' https://p.typekit.net *.google-analytics.com *.gstatic.com https://www.facebook.com https://*.doubleclick.net pixel.quantserve.com https://www.google.com https://www.google.ie ge https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com *.google.com https://seal.geotrust.com *.googleapis.com data: *
"default-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*
script-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com 'unsafe-eval' http://* https://*
connect-src * 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://* ws://localhost:* wss://*
img-src data: 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*
style-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com ssl.google-analytics.com tt.mbww.com maps.google.com maps.googleapis.com platform.twitter.com cdn.tagcommander.com data.wptag.net static.ads-twitter.com analytics.twitter.com"
"default-src https: data: 'unsafe-inline' 'unsafe-eval'  'self' *.googleapis.com *.google-analytics.com *.gstatic.com wss://*.zopim.com wss://*.hotjar.com"
frame-src https://*.analog.one https://*.computeraudiophile.com https://audiophilestyle.com https://superphonica.com https://*.vimeo.com https://*.youtube.com https://youtu.be https://*.youtube-nocookie.com https://*.google.com https://wordpress.org https://*.wpsecurityauditlog.com https://widgets.wp.com https://*.wp.com https://*.stripe.com https://*.w.org https://akismet.com https://*.cloudflare.com https://wp.freemius.com https://*.gravatar.com https://*.google-analytics.com https://*.cloudflarestream.com https://*.videodelivery.net https://www.thenewsletterplugin.com https://*.twitter.com https://tpc.googlesyndication.com/ https://observantice.com https://www.googletagservices.com/ https://twitter.com https://*.kickstarter.com https://*.tidal.com https://*.facebook.com
script-src  data: blob: 'self' 'unsafe-inline' 'unsafe-eval' use.fontawesome.com m.addthisedge.com script.hotjar.com static.hotjar.com *.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com ajax.googleapis.com googleads.g.doubleclick.net *.facebook.com connect.facebook.net *.trackedlink.net cdn-akamai.mookie1.com cdn.districtm.ca secure.adnxs.com tags.tiqcdn.com widgets.pinterest.com *.addthis.com s.ytimg.com *.youtube.com *.amazonaws.com *.newrelic.com bam.nr-data.net sailoutdoors.formstack.com static.formstack.com www.youtube.com *.addthis.com *.pinterest.com ajax.cloudflare.com *.zopim.com
frame-src 'self' acdn.adnxs.com tags.tiqcdn.com vars.hotjar.com s7.addthis.com www.googletagmanager.com *.moneris.com *.google.com cdn-akamai.mookie1.com *.doubleclick.net *.addthis.com connect.facebook.net gsa://onpageload *.youtube.com *.pinterest.com s3.amazonaws.com
"default-src 'self'  https://va.tawk.to/ https://www.facebook.com/ https://vars.hotjar.com/ https://www.newbuildinspections.com/ https://www.unbiased.co.uk/ https://hoa.org.uk https://ea4me.hoa.org.uk
script-src 'self' 'unsafe-inline' 'unsafe-eval' https http https://optimize.google.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.co.uk *.googlesyndication.com https://tagmanager.google.com/ https://cdnjs.cloudflare.com/ https://www.awin1.com/ https://s.cpx.to/ https://hoateam.atlassian.net https://widget.reviews.co.uk https://cdn.sitesearch360.com/ https://consent.cookiebot.com https://hoa.us5.list-manage.com/ platform.twitter.com www.googleapis.com www.google.com cse.google.com www.unbiased.co.uk www.googletagmanager.com sitesearch360.com *.hotjar.com https://www.googletagmanager.com cdnjs.cloudflare.com d2l7e0y6ygya2s.cloudfront.net cdn.jsdelivr.net *.tawk.to www.reallymoving.com ajax.googleapis.com www.google-analytics.com prf.audiencemanager.de p.cpx.to connect.facebook.net
style-src 'self' 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com/ www.google.com fonts.googleapis.com *.jsdelivr.net *.mailchimp.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com
img-src 'self' https://optimize.google.com https://image2.pubmatic.com/ https://www.googletagmanager.com/ https://cdn.jsdelivr.net/emojione/ https://s.w.org/images/ https://s3.amazonaws.com/gravityforms/ https://insights.sitesearch360.com/ https://images.sitesearch360.com/ https://ps.w.org https://s3-eu-west-1.amazonaws.com data: bat.bing.com sitesearch360.com ads.avocet.io www.google.com.sa awsmedia.s3.amazonaws.com syndication.twitter.com https http su.addthis.com www.audiencemanager.de prf.audiencemanager.de www.google.com.hk www.google.com.sg www.google.ca www.google.ie www.google.co.in www.google.com.au www.google.se www.googleapis.com *.gstatic.com *.google.com https://hoa.org.uk https://unloq-asset.s3.eu-central-1.amazonaws.com abs.twimg.com/emoji/ s.w.org/images/core/emoji/ *.tawk.to www.google.com www.google.co.uk *.adnxs.com *.doubleclick.net *.cpx.to *.google-analytics.com *.facebook.com
font-src 'self' https://cdnjs.cloudflare.com/ data: sxt.cdn.skype.com fonts.gstatic.com *.tawk.to *.hotjar.com maxcdn.bootstrapcdn.com
connect-src 'self' https://global.sitesearch360.com/ https://insights.sitesearch360.com/ https://sentry.hotjar.com/ https://in.hotjar.com/ https://stats.g.doubleclick.net https://www.google-analytics.com https://api-cache.reviews.co.uk syndication.twitter.com api.wpfastestcache.net api.sitesearch360.com wss://*.hotjar.com https yoast.com wss://*.tawk.to *.tawk.to insights.hotjar.com graylog.hotjar.com:12080 graylog.hotjar.com:12443 graylog.hotjar.com
child-src 'self' https://optimize.google.com https://googleads.g.doubleclick.net/ https://maps.googleapis.com/ https://www.google.com/ https://api.localsurveyorsdirect.co.uk/ https://connect.facebook.net/ https://hoateam.atlassian.net/ https://widget.reviews.co.uk https://legacy.keyretirement.co.uk/ *.trustpilot.com *.audioboom.com track.omguk.com www.unbiased.co.uk localsurveyorsdirect.co.uk https://www.localsurveyorsdirect.co.uk clients.lease-advice.org platform.twitter.com https://www.lease-advice.org.uk ecab.planningportal.co.uk www.smartval.co.uk https://www.newbuildinspections.com cse.google.com www.landc.co.uk www.youtube.com https://www.unbiased.co.uk *.tawk.to *.hotjar.com www.newbuildinspections.com www.localsurveyorsdirect.co.uk www.facebook.com white.reallymoving.com *.moonclerk.com
"script-src 'unsafe-eval' 'unsafe-inline' 'self' *.trustwave.com *.pcirapidcomply2.com *.pcirapidcomply.com
connect-src self https://realcareware.nl:443 ws://realcareware.nl:443 wss://realcareware.nl:443
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com
font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com
frame-src 'self' ws://realcareware.nl:443 wss://realcareware.nl:443 rcwweight:
style-src 'self' www.google.com www.gstatic.com 'unsafe-inline'
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cloudflare.com ismatlab.com *.admixer.net *.doubleclick.net https://adservice.google.ru https://www.googletagservices.com *.criteo.net https://yastatic.net https://coinhive.com http://rt.getsale.io https://ajax.googleapis.com https://adservice.google.com https://adservice.google.com.ua https://secure.wayforpay.com https://http-online-knigi-com.disqus.com *.actionteaser.ru *.marketgid.com cdn.sendpulse.com *.ckeditor.com *.hit.ua recreativ.ru https://googleads.g.doubleclick.net http://pagead2.googlesyndication.com https://www.gstatic.com https://www.google.com vk.com *.facebook.net *.yandex.ru https://*.yandex.ru www.google-analytics.com code.jquery.com *.mail.ru *.jquery.com https://code.jquery.com *.rambler.ru http://*.directadvert.ru
frame-src 'self' https://www.youtube.com ismatlab.com *.admixer.net *.googlesyndication.com https://mc.yandex.ru http://yastatic.net http://rt.getsale.io https://secure.wayforpay.com https://disqus.com reformal.ru *.litres.ru *.rambler.ru http://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com vk.com *.facebook.com apycdn.com loginza.ru
connect-src 'self' *.creativecdn.com *.doubleclick.net https://csi.gstatic.com ads.adfox.ru *.yandex.ru *.criteo.com https://stats.g.doubleclick.net wss://wsp.marketgid.com *.googlesyndication.com https://googleads.g.doubleclick.net https://mc.yandex.ru http://www.google-analytics.com http://ajax.googleapis.com http://code.directadvert.ru
"script-src 'self' *.googleapis.com *.cloudflare.com s3.amazonaws.com  *.google.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-eval'  'unsafe-inline' https: data:  *.gstatic.com *.cleversite.ru *.yandex.ru https://top-fwz1.mail.ru https://cdnjs.cloudflare.com *.google-analytics.com https://counter.yadro.ru *.google.ru *.google.com *.facebook.com  *.facebook.net *.doubleclick.net *.hotjar.com wss://*.cleversite.ru
"default-src 'self' 'unsafe-eval' data: blob 'unsafe-inline' fonts.googleapis.com staticxx.facebook.com fonts.gstatic.com www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com www.facebook.com secure.gravatar.com www.googletagmanager.com googletagmanager.com cdnjs.cloudflare.com js.peek.com www.reservecloud.com reservecloud.com js.logentries.com js.stripe.com ps.w.org s.w.org gravityforms.s3.amazonaws.com andybsentertainmentcenters.applytojob.com book.peek.com api.redirect.li dev.bowlandybs.com stats.g.doubleclick.net js.logentries.com yoast.com cdn.mxpnl.com api.mixpanel.com yoa.st youtube.com www.youtube.com gravityforms.s3.amazonaws.com tagmanager.google.com ssl.gstatic.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: secure.statcounter.com
img-src 'self' data: http: https: *.gravatar.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.doubleclick.net https://cdn.ampproject.org  https://adservice.google.com https://adservice.google.co.in https://pagead2.googlesyndication.com https://connect.quovo.com https://maxcdn.bootstrapcdn.com https://www.youtube.com https://s.ytimg.com https://cdn-orig.socket.io  https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://*.amazonaws.com https://*.userreport.com https://cdn.alphastreet.co https://cdn.alphastreet.com https://*.tradingticket.com https://cdn.socket.io https://ajax.googleapis.com https://cdnjs.cloudflare.com https://mobile.usabilitytools.com
style-src 'self' 'unsafe-inline' http://fontawesome.io https://maxcdn.bootstrapcdn.com  https://cdn.alphastreet.co https://cdn.alphastreet.com https://*.tradingticket.com https://ajax.googleapis.com https://fonts.googleapis.com https://tagmanager.google.com https://cdnjs.cloudflare.com
font-src 'self' data: https://cdn.alphastreet.com https://cdn.alphastreet.co https://fonts.gstatic.com https://fonts.google.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com
object-src 'self' https://cdn.alphastreet.com https://cdn.alphastreet.co https://api.alphastreet.com https://api.alphastreet.co
child-src 'self' https://*.tradingticket.com https://www.quovo.com https://youtube.com https://youtu.be https://www.googletagmanager.com https://www.youtube.com https://*.userreport.com
frame-src 'self' https://*.tradingticket.com https://*.quovo.com https://www.youtube.com https://alphastreet.com https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com
"script-src 'self'  'unsafe-inline' 'unsafe-eval' *.googleapis.com http://bam.nr-data.net http://js-agent.newrelic.com *.exaltive.com https://f.vimeocdn.com https://jwpsrv.com *.google.com *.facebook.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com
frame-ancestors 'self' https://chubb.benselect.com *.benselect.com *.mybenefits.biz https://workterra.net *.workterra.net https://www.empben.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://google.com
img-src 'self' https://www.google-analytics.com https://lathamvideo.blob.core.windows.net 'unsafe-inline' 'unsafe-eval' data:
"default-src 'self' data: *.wp.com *.mapbox.com api.ipify.org wordpress.com *.facebook.net *.googleapis.com *.gstatic.com *.google.com cdnjs.cloudflare.com cdn.datatables.net *.meritocracy.is *.hotjar.com *.doubleclick.net maxcdn.bootstrapcdn.com cdn.materialdesignicons.com *.getsentry.com *.pusher.com *.stripe.com *.addthis.com use.typekit.net *.filestackapi.com cdn.filestackcontent.com *.slack.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: sslwidget.criteo.com static.criteo.net *.wp.com *.googletagmanager.com *.quora.com *.indeed.com api.instagram.com cdn.syndication.twimg.com *.twitter.com *.facebook.net *.facebook.com *.linkedin.com ajax.cloudflare.com *.googleapis.com *.google.com cdnjs.cloudflare.com cdn.datatables.net *.meritocracy.is *.google-analytics.com cdn.heapanalytics.com *.hotjar.com oss.maxcdn.com platform.twitter.com s7.addthis.com *.googleadservices.com *.youtube.com *.ytimg.com code.jquery.com unpkg.com raw.github.com raw.githubusercontent.com js-agent.newrelic.com api.filestackapi.com js.pusher.com d3js.org cdn.rawgit.com cdn.ravenjs.com cdn.jsdelivr.net code.highcharts.com static.ads-twitter.com *.indeed.com *.stripe.com *.addthis.com *.addthisedge.com bam.nr-data.net
style-src 'self' 'unsafe-inline' data: *.wp.com *.googleapis.com *.google.com *.twitter.com cdnjs.cloudflare.com cdn.datatables.net meritocracy.is *.meritocracy.is maxcdn.bootstrapcdn.com cdn.materialdesignicons.com unpkg.com *.stripe.com *.addthis.com
img-src 'self' data: blob: *.twimg.com *.quora.com *.imgur.com pbs.twimg.com *.twitter.com scontent.cdninstagram.com *.wp.com *.facebook.net cdnjs.cloudflare.com cdn.datatables.net meritocracy.is *.meritocracy.is ddzgqog6k5jvc.cloudfront.net d1zyh3sbxittvg.cloudfront.net i.ytimg.com img.youtube.com sites.vans.com careers.vans.eu careers.timberland.eu careers.thenorthface.eu process.filestackapi.com cdn.filestackcontent.com *.filepicker.io via.placeholder.com static.jobrapido.com *.facebook.com *.google.com *.google.it heapanalytics.com *.google-analytics.com *.gstatic.com *.googleapis.com *.doubleclick.net lorempixel.com *.stripe.com media.licdn.com scontent.xx.fbcdn.net *.vox-cdn.com *.akamaihd.net *.addthis.com logo.clearbit.com *.indeed.com
frame-src 'self' dis.eu.criteo.com gum.criteo.com *.google.com *.facebook.com *.facebook.net *.youtube.com youtu.be vars.hotjar.com *.filestackapi.com cdn.filestackcontent.com *.stripe.com *.addthis.com *.google.com platform.twitter.com"
"frame-ancestors 'self' *.gameshadow.com http://gameshadow.com https://gameshadow.com"
script-src 'self' https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://platform.twitter.com https://cdn.syndication.twitter.com https://cdn.syndication.twimg.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com
img-src 'self' https://www.giantbomb.com https://www.paypalobjects.com https://syndication.twitter.com https://abs.twimg.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com data:
frame-src 'self' https://www.google.com https://platform.twitter.com https://syndication.twitter.com
child-src 'self' https://www.google.com https://platform.twitter.com https://syndication.twitter.com
img-src 'self' data: https://www.google-analytics.com *.googleusercontent.com
script-src 'self' *.mailtrap.io *.uservoice.com google.com www.google.com recaptcha.net www.recaptcha.net gstatic.com www.gstatic.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.doubleclick.net optimize.google.com js.hs-scripts.com js.hs-analytics.net *.braintreegateway.com *.paypalobjects.com *.uvcdn.com fast.wistia.com connect.facebook.net https://s3.amazonaws.com/assets.heroku.com/boomerang/boomerang.js 'sha256-xstkfc+lb849q8ckihrtivedlhggkxlbsneow1vi6pu=' 'sha256-ihh57mcexrpe0e2rmtazmummtgfypxve+wjzcv2qfhk='
style-src 'self' 'unsafe-eval' 'unsafe-inline' *.mailtrap.io fonts.googleapis.com optimize.google.com fast.wistia.com https://s3.amazonaws.com/assets.heroku.com/boomerang/boomerang.css
font-src 'self' data: *.mailtrap.io fonts.gstatic.com
frame-src 'self' google.com www.google.com www.googletagmanager.com *.doubleclick.net optimize.google.com widget.uservoice.com *.braintreegateway.com *.kaptcha.com *.paypal.com fast.wistia.com connect.facebook.net
connect-src 'self' wss://mailtrap.io *.mailtrap.io www.google-analytics.com stats.g.doubleclick.net errors.rw.rw *.braintreegateway.com *.sandbox.braintreegateway.com *.braintree-api.com *.sandbox.braintree-api.com *.wistia.com *.litix.io
"script-src 'self' 'unsafe-inline' 'unsafe-eval' hbomax.tv connect.facebook.net platform.twitter.com cdn.syndication.twimg.com dpm.demdex.net tags.bkrtx.com hbolag.d2.sc.omtrdc.net
child-src 'self' *.fls.doubleclick.net staticxx.facebook.com www.facebook.com platform.twitter.com stags.bluekai.com tags.bluekai.com
"frame-ancestors https://dev-dnb-web-cms.azurewebsites.net https://uat-web-cms.azurewebsites.net https://uat-dnb-web-main.avantimestage.se https://dnb-web-cms.azurewebsites.net http://dnbeiendom.local"
script-src 'self' 'unsafe-inline' 'unsafe-eval' seal.verisign.com https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
img-src data: blob: 'self' seal.websecurity.norton.com https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
font-src 'self' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com web-start.org:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
script-src 'unsafe-inline' 'unsafe-eval' https://*.cler.ch https://*.mycler.ch https://assets.adobedtm.com
frame-src https://*.cler.ch https://*.mycler.ch https://*.quovadisglobal.com https://www.google.com
style-src 'unsafe-inline' 'unsafe-eval' https://*.cler.ch https://*.mycler.ch
"default-src * 'unsafe-inline' 'unsafe-eval' 'self' app.optimizely.com *.hawksearch.com *.hawksearch.net"
connect-src 'self' https://tawk.to https://*.tawk.to wss://*.tawk.to
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.jsdelivr.net https://embed.tawk.to https://*.tawk.to
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://embed.tawk.to
img-src 'self' https://tawk.link https://static-v.tawk.to https://cdn.jsdelivr.net
font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://static-v.tawk.to
"default-src 'self' mailto: https://www.youtube.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ play.vidyard.com *.vimeo.com *.moneris.com https://rpt.cedexis.com https://chm.tbe.taleo.net
script-src 'self' 'unsafe-inline' 'unsafe-eval'  netdna.bootstrapcdn.com vitalets.github.com vitalets.github.io cdn.jsdelivr.net code.jquery.com connect.facebook.net siteimproveanalytics.com play.vidyard.com https://px.ads.linkedin.com https://analytics.twitter.com https://www.linkedin.com https://snap.licdn.com https://static.ads-twitter.com http://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://maps.googleapis.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://angular-ui.github.io stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' 'unsafe-eval' vitalets.github.com vitalets.github.io https://fonts.googleapis.com https://tagmanager.google.com
img-src 'self' vitalets.github.io netdna.bootstrapcdn.com www.facebook.com us2.siteimprove.com *.google.com https://t.co https://www.google.ca/ https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com stats.g.doubleclick.net data:
"default-src https: blob: data: wss: gap://ready
default-src  'unsafe-inline' 'unsafe-eval' 'self' *.ria.ee www.google-analytics.com *.plumbr.io themes.googleusercontent.com
frame-src 'self' *.youtube.com *.vimeo.com docs.google.com
img-src data: 'self' *.ria.ee www.google-analytics.com
script-src 'self' 'unsafe-inline' *.hs-analytics.net *.hs-scripts.com *.hscta.net *.google-analytics.com *.facebook.net *.facebook.com *.ads-twitter.com *.twitter.com *.hubspot.com *.hsleadflows.net
"default-src 'self' s.ytimg.com consent.cookiebot.com consentcdn.cookiebot.com secure.mari4norm.com api.map.baidu.com api0.map.bdimg.com www.fondationhopitaux.fr api.ipdata.co ipinfo.io www.helloasso.com www.donnerenligne.fr syndication.twitter.com abs.twimg.com checkout.stripe.com www.piecesjaunes.fr cdn.syndication.twimg.com platform.twitter.com cdnjs.cloudflare.com maps.gstatic.com pbs.twimg.com www.linkedin.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com amaris.career-inspiration.com www.google.com.vn stats.g.doubleclick.net fonts.gstatic.com px.ads.linkedin.com www.google-analytics.com www.gstatic.com www.facebook.com fonts.googleapis.com ajax.googleapis.com google-analytics.com www.youtube.com www.googletagmanager.com connect.facebook.net www.google.com snap.licdn.com
font-src * https://fonts.googleapis.com https://fonts.googleapis.com gstatic.com
script-src 'self' 'unsafe-eval' https://www.googletagmanager.com https://ajax.googleapis.com https://www.google.com https://www.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://googleads.g.doubleclick.net 'unsafe-inline'
style-src 'self' 'unsafe-inline' https://fonts.gstatic.com/ https://fonts.googleapis.com/
img-src 'self' https://build.electricmonk.nl/job/ https://img.shields.io https://git.electricmonk.nl https://raw.githubusercontent.com https://docs.python.org
script-src 'self' data: www.teammoreteamlesshpb.com assets.adobedtm.com http://www.google-analytics.com https://tags.tiqcdn.com https://googleads.g.doubleclick.net  https://www.googleadservices.com https://cdn-akamai.mookie1.com https://wt.adctrl.com https://www.gstatic.com cdnjs.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://platform.twitter.com https://connect.facebook.net https://maps.googleapis.com https://facebook.com https://platform.twitter.com https://maps.gstatic.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://khms0.googleapis.com https://khms1.googleapis.com http://maps.googleapis.com https://platform-lookaside.fbsbx.com dpm.demdex.net cm.everesttech.net wogadobeanalytics.sc.omtrdc.net https://bcp.crwdcntrl.net https://www.google.co.in https://s3-ap-southeast-1.amazonaws.com https://s3.amazonaws.com https://beacon.krxd.net https://rp.gwallet.com https://cm.g.doubleclick.net https://wt.adctrl.com https://dsum-sec.casalemedia.com https://rs.gwallet.com  http://maps.googleapis.com https://www.google.com.sg http://www.healthhub.sg https://www.google.com https://fbcdn-profile-a.akamaihd.net https://stats.g.doubleclick.net https://img.youtube.com https://graph.facebook.com https://www.facebook.com https://csi.gstatic.com https://fbrell.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://scontent.xx.fbcdn.net https://app.sttarter.com:9000 https://ssl.sttarter.com:9000 http://app.sttarter.com:9000 http://ssl.sttarter.com:9000 https://ssl.sttarter.com:9443 data:
style-src 'self' maxcdn.bootstrapcdn.com https://fonts.googleapis.com data: 'unsafe-inline' 'unsafe-eval'
font-src 'self' data: http://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.googleapis.com https://fonts.gstatic.com 'unsafe-inline'
connect-src 'self' https://prodigious.imailxpress.com dpm.demdex.net wogadobeanalytics.sc.omtrdc.net https://www.waveem.com secure-ds.serving-sys.com 'unsafe-inline'
frame-src 'self' web.facebook.com connect.facebook.net wogaa.demdex.net https://8416677.fls.doubleclick.net https://www.youtube.com  https://tags.tiqcdn.com https://bid.g.doubleclick.net https://www.youtube.com https://staticxx.facebook.com https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://www.google.com"
img-src 'self' data: https://track.hubspot.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://cdn2.hubspot.net https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://info.lenovosoftware.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://forms.hubspot.com https://forms.hsforms.com https://js.hsforms.net https://www.googleadservices.com https://connect.facebook.net https://cdn.mxpnl.com https://www.google-analytics.com https://js.hs-analytics.net https://widget.intercom.io https://js.hs-scripts.com https://code.jquery.com https://ajax.googleapis.com https://www.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dlcompare.com https://cdn.ckeditor.com https://adservice.google.fr https://pagead2.googlesyndication.com https://www.gstatic.com https://platform.twitter.com https://www.google.com  https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' https://www.dlcompare.com https://www.dlcompare.pt https://i1.wp.com https://platform-lookaside.fbsbx.com https://graph.facebook.com https://i2.wp.com https://www.gravatar.com https://cdn.ckeditor.com https://syndication.twitter.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://www.google-analytics.com/ https://www.google.fr
style-src 'self' 'unsafe-inline' https://www.dlcompare.com https://cdn.ckeditor.com https://fonts.googleapis.com https://assets.zendesk.com
frame-src https://platform.twitter.com https://www.youtube.com https://staticxx.facebook.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://www.google.com https://googleads.g.doubleclick.net
child-src *.googlesyndication.com www.google.com www.youtube.com *.facebook.com discordapp.com
"frame-ancestors 'self' http://www.coolmathgames.com https://www.coolmathgames.com http://edit.coolmathgames.com https://edit.coolmathgames.com
"default-src 'self' http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com data: https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
script-src 'self' 'unsafe-inline' http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com 'unsafe-eval' http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com data: https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
connect-src * 'self' ws://artlimes.com wss://artlimes.com http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com data: https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
img-src data: 'self' http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com http://fbcdn-profile-a.akamaihd.net https://fbcdn-profile-a.akamaihd.net http://secure.gravatar.com https://secure.gravatar.com http://i0.wp.com https://i0.wp.com http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com https: http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
style-src 'self' 'unsafe-inline' http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com data: https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
font-src 'self' http://*.facebook.com https://*.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://connect.facebook.net https://connect.facebook.net http://*.googleusercontent.com https://*.googleusercontent.com http://*.cdninstagram.com https://*.cdninstagram.com data: http://assets.reactioncommerce.com https://assets.reactioncommerce.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://enginex.kadira.io https://enginex.kadira.io http://*.stripe.com https://*.stripe.com http://*.akamaihd.net https://*.akamaihd.net http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.amplitude.com https://*.amplitude.com http://cdn.artlimes.com https://cdn.artlimes.com https://static.intercomcdn.com https://widget.intercom.io https://js.intercomcdn.com https://static.intercomassets.com https://nexus-long-poller-a.intercom.io http://ext-dist.s3.amazonaws.com https://ext-dist.s3.amazonaws.com
"default-src 'self' *.zopim.com wss://*.zopim.com *.zopim.io
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' consentcdn.cookiebot.com consent.cookiebot.com maps.google.com ssl.google-analytics.com ajax.cloudflare.com static.hotjar.com script.hotjar.com www.google-analytics.com www.googletagmanager.com cdn.jsdelivr.net www.google.com www.gstatic.com catalog.dotnetnuke.com *.zopim.com
style-src 'self' data: 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com
img-src 'self' data: insights.hotjar.com static.hotjar.com static.hotjar.com www.googletagmanager.com www.dnnsoftware.com www.google-analytics.com v2assets.zopim.io *.zopim.com update.dotnetnuke.com s3.amazonaws.com secure.gravatar.com www.gstatic.com s3.amazonaws.com
font-src 'self' data: *.zopim.com fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.paypalobjects.com *.paypal.com sxt.cdn.skype.com static.hotjar.com static.hotjar.com
connect-src 'self' *.hotjar.com:* *.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com wss://*.zopim.com *.zopim.com www.google-analytics.com
frame-src 'self' www.google.com vars.hotjar.com consentcdn.cookiebot.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net/scripts/a/ai.0.js
connect-src 'self' ws: https://*.service.signalr.net https://dc.services.visualstudio.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syndication.twimg.com https://s.ytimg.com https://cdn.wisekey.com https://maps.google.com https://www.google.com https://rawgit.com https://maxcdn.bootstrapcdn.com  https://maps.googleapis.com https://www.gstatic.com https://platform.twitter.com https://connect.facebook.net https://www.youtube.com
style-src 'self' 'unsafe-inline' https://ton.twimg.com https://platform.twitter.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://cdn.wisekey.com
img-src 'self' data: https://hugin.info https://abs.twimg.com https://ton.twimg.com https://platform.twitter.com https://pbs.twimg.com https://pbs.twimg.com https://www.facebook.com https://syndication.twitter.com https://img.youtube.com https://csi.gstatic.com https://cdn.wisekey.com
font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://d3o11irj9639cz.cloudfront.net https://cdn.wisekey.com https://fonts.googleapis.com
frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://staticxx.facebook.com https://www.facebook.com https://www.youtube.com https://www.google.com
font-src https: data: https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'"
img-src 'self' data: consent.trustarc.com maps.googleapis.com maps.gstatic.com secure.gravatar.com www.google-analytics.com irdeto-wp-content.irdeto.com content.cdntwrk.com i.ytimg.com stats.g.doubleclick.net public.tableau.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: dc.ads.linkedin.com www.linkedin.com px.ads.linkedin.com snap.licdn.com s.ytimg.com www.youtube.com consent-pref.trustarc.com consent.truste.com consent.trustarc.com cdnjs.cloudflare.com maps.googleapis.com maps.google.com irdeto.com resources.irdeto.com www.google-analytics.com google-analytics.com analytics-eu.clickdimensions.com script.crazyegg.com sitesearch360.com cdn.sitesearch360.com content.cdntwrk.com public.tableau.com e.infogram.com
style-src 'self' 'unsafe-inline' data: cihost.uberflip.com cdnjs.cloudflare.com fonts.googleapis.com irdeto.com content.cdntwrk.com
connect-src 'self' data: api.sitesearch360.com consent.trustarc.com
frame-src 'self' data: www.youtube.com consent.trustarc.com consent-pref.trustarc.com public.tableau.com e.infogram.com
img-src 'self' data: *.google-analytics.com *.g.doubleclick.net
script-src 'strict-dynamic' 'nonce-otliytm1mtctowrhnc00mjbjltk5ntatmjazndawyzfmmgzh' 'unsafe-inline' https: http:
"default-src 'self' *.youtube.com *.gravatar.com *.vimeo.com *.google.com *.vimeocdn.compackages.umbraco.orgour.umbraco.org *.addthis.com *.addthisedge.com
script-src 'self' *.cloudflare.com *.addthis.com *.addthisedge.com *.facebook.com viacep.com.br 'unsafe-inline' 'unsafe-eval'
style-src 'self' 'unsafe-inline' *.googleapis.com *.addthis.com *.addthisedge.com
img-src * 'self' data: *.gravatar.com umbraco.tv api.qrserver.com http://poa-temp.tk
"frame-ancestors 'self' *.plusthis.com box.dev campaignsofthetitans.com"
"frame-ancestors 'self' *.maritzcx.com *.allegiancetech.com *.mcxplatform.com.au *.mcxplatform.com *.mcxplatform.de
style-src https: data: 'unsafe-inline' 'unsafe-eval'
frame-src 'self' *.youtube.com *.vimeo.com docs.google.com *.usti-nad-labem.cz
"default-src https: data: 'self' * 'unsafe-eval' 'unsafe-inline'
"default-src data: 'unsafe-inline' 'unsafe-eval' blob: https: http://*.ooyala.com
script-src 'unsafe-inline' 'sha256-vhmdfvekqtlawtwe+cpc61i58pc0v18slngenut0ym8=' 'sha256-aaokigqzggu4cpn72nosumvty/i5ebyf6acy6q3unse=' 'sha256-gkt1upcdx/8oltck9cgk8g0eldcbtj4amhfjxupio5c=' 'sha256-zqrz1dcbbb30zj0jbj36jyjc4dwss4fs/ohcvzhmu/w=' 'sha256-mzeco6mmzgi8ozbal6qujkmgkfgpkaawroipc72jrcm=' 'sha256-uy/vk9ngbxhf6hlrbbb/meucaoh+zraranayxriyxau=' 'sha256-gsnoptwoxrv8288ed8dezklyypwltg6b/prwlivs730=' 'sha256-bhbkvzfo7+ioex74hk7ujf5jxcvzceyn1dx8eetjkka=' 'sha256-ewyjd5xknoghibsgjyuxxtgehksetx+4g3znket7zru=' 'sha256-o1zb8stbv+juldbnwidl3tms3su3w8dkrhietddz9lk=' 'sha256-hvzjw7u1a/3iyvyrqmvbt69dr0n2tgo8vnqsouu0yti=' 'sha256-wqtc2d8n8odu3fuxk0len0ej0e8ssabj2m2rgmyqilq=' 'sha256-nz3k7lipv2w8sbv/nmoqk1+lb4ugoxt2jxy3mgt7t3a=' 'sha256-rk2v3pobjdaad3ym/cm7kmsbow1mm+gg6bg8f1dgdj8=' 'sha256-og5xlrk1hgvweap5iya8jyp2s6y5n6smb7lam2qtwr0=' 'sha256-5pkerbxeqxp/b8rr1bclez/ddpbleprt49qq49/qlue=' 'sha256-ieuc4qauwyz6xapr00erm+sf4ctirfmj3l4jte9vego=' 'sha256-xgz/twmaejfv5+cxz+i0hj3xi3ngcgdww8ikkwfi39g=' 'sha256-azgcke+olu2slvacjqllvooihzsnrkzxxwmvhfnluom=' 'sha256-jrdd6cdzdlmo0nef3ecbxc81x2njqn/m28wmeik1fs4=' 'sha256-hftdpeblnnf4oi9kgdyh19i1mazez0g+kpsaswqqeto=' 'unsafe-eval' 'self' www.google-analytics.com oss.maxcdn.com stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' static.figleafapp.com https://fonts.googleapis.com https://fonts.gstatic.com
default-src 'self' static.figleafapp.com *.livechatinc.com www.google.com www.gstatic.com
script-src 'self' 'unsafe-inline' static.figleafapp.com www.google.com www.gstatic.com"
"default-src * 'unsafe-inline' data: blob: 'unsafe-inline' 'unsafe-eval'"
img-src 'self' data: *.turkmia.org:443 turkmia.org:443 *.2mdn.net *.google-analytics.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googleadservices.com *.gstatic.com www.google.com code.jquery.com *.disquscdn.com referrer.disqus.com https://*.2mdn.net https://*.google-analytics.com https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://www.google.com https://code.jquery.com https://*.disquscdn.com https://referrer.disqus.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.turkmia.org:443 turkmia.org:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com *.google-analytics.com www.googletagservices.com oss.maxcdn.com code.jquery.com disqus.com *.disqus.com *.disquscdn.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://*.google-analytics.com https://www.googletagservices.com https://oss.maxcdn.com https://code.jquery.com https://disqus.com https://*.disqus.com https://*.disquscdn.com
frame-src 'self' *.turkmia.org:443 turkmia.org:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com disqus.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://disqus.com
object-src 'self' *.turkmia.org:443 turkmia.org:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com
connect-src 'self' *.turkmia.org:443 turkmia.org:443 *.google-analytics.com links.services.disqus.com pipe.skype.com https://*.google-analytics.com https://links.services.disqus.com https://pipe.skype.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.turkmia.org:443 turkmia.org:443 *.googleapis.com *.gstatic.com code.jquery.com *.disquscdn.com https://*.googleapis.com https://*.gstatic.com https://code.jquery.com https://*.disquscdn.com
font-src 'self' data: *.turkmia.org:443 turkmia.org:443 *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com
"default-src 'self' data: https: www.googletagmanager.com www.google-analytics.com optimize.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com optimize.google.com tagmanager.google.com connect.ekomi.de www.googleadservices.com bat.bing.com cdn.mouseflow.com googleads.g.doubleclick.net connect.facebook.net seal.geotrust.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com optimize.google.com
img-src 'self' data: connect.ekomi.de google.de google.com bat.bing.com www.google-analytics.com www.google.com www.google.de stats.g.doubleclick.net optimize.google.com www.googletagmanager.com seal.geotrust.com www.facebook.com
frame-src 'self' *.wuerzburger.com *.travelsecure.de bid.g.doubleclick.net optimize.google.com www.facebook.com
connect-src 'self' www.ekomi.de o2.mouseflow.com optimize.google.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://s9qjuabzx2.execute-api.us-east-2.amazonaws.com https://www.google-analytics.com https://www.googletagmanager.com http://lightningconductor.net https://code.jquery.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.vo.msecnd.net *.cloudflare.com *.usabilla.com *.polyfill.io *.dimml.io *.tiqcdn.com *.youtube.com *.ytimg.com
style-src 'self' 'unsafe-inline' *.cloudfront.net *.googleapis.com
script-src * 'unsafe-inline' 'unsafe-eval' *.zuora.com
img-src * data: 'unsafe-inline' *.zuora.com
img-src 'self' data: about: *.google-analytics.com *.doubleclick.net *.twitter.com *.facebook.com 51degrees.cachefly.net i.creativecommons.org licensebuttons.net *.dotnetnuke.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.linkedin.com *.pinterest.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.addthis.com *.addthisedge.com *.twitter.com *.google.com *.facebook.net cdn.rawgit.com ajax.googleapis.com ts.51degrees.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.bootstrapcdn.com cdn.rawgit.com
frame-src 'self' *.youtube.com *.twitter.com *.addthis.com *.google.com *.facebook.com *.51d.es 51des.azurewebsites.net
child-src 'self' *.addthisedge.com *.addthis.com *.facebook.com *.google.com *.twitter.com
connect-src 'self' *.51degrees.com *.twitter.com *.dnnsharp.com
"default-src https: wss: 'self' 'unsafe-eval' 'unsafe-inline' data: blob:"
"default-src https://fonts.gstatic.com https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://www.youtube.com https://21savage-us.myshopify.com/api/graphql https://shop.21savage.com/api/graphql https://cdn.shopify.com https://sentry.io https://cdnjs.cloudflare.com https://vars.hotjar.com https://static.hotjar.com https://insights.hotjar.com https://embed.vevo.com 'self' cdn.intgrl.co https://www.facebook.com/ https://www.facebook.net https://connect.facebook.net https://connect.facebook.com
script-src https://www.youtube.com https://s.ytimg.com https://static.hotjar.com https://script.hotjar.com 'self' 'unsafe-eval' 'unsafe-inline' https://www.facebook.com/ https://www.facebook.net https://connect.facebook.net https://connect.facebook.com
style-src https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' cdn.intgrl.co facebook.com"
script-src * data: https://www.google-analytics.com https://www.google.com/recaptcha/api.js https://www.gstatic.com ajax.googleapis.com https://cdn.ampproject.org https://js.stripe.com 'unsafe-inline' 'unsafe-eval'
script-src https://www.gstatic.com https://www.google.com http://api.recaptcha.net https://cdn.jotfor.ms https://form.jotform.me https://code.jquery.com https://www.google-analytics.com 'self'
style-src https://cdn.jotfor.ms https://fonts.googleapis.com http://api.recaptcha.net 'self' 'unsafe-inline'
img-src https://imgstatic.phonepe.com http://images.phonepe.com http://api.recaptcha.net https://cdn.jotfor.ms 'self' https://www.google-analytics.com
frame-src http://api.recaptcha.net https://form.jotform.me https://docs.google.com https://qr.phonepe.com https://www.google.com https://phonepe.helpshift.com https://phonepe.freshdesk.com *.phonepe.com https://www.sisainfosec.com https://website.phonepe.com
script-src 'self' https://dyxejg2tuwlpb.cloudfront.net https://cdnjs.cloudflare.com/ajax/libs/clusterize.js/ code.jquery.com cdn.jsdelivr.net/npm/ player.vimeo.com w.soundcloud.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ajax.googleapis.com translate.google.com translate.googleapis.com cdnjs.cloudflare.com/ajax/libs/emojione/ cdn.rawgit.com/yuku-t/jquery-textcomplete/
style-src 'self' 'unsafe-inline' https://dyxejg2tuwlpb.cloudfront.net https://cdnjs.cloudflare.com/ajax/libs/clusterize.js/ maxcdn.bootstrapcdn.com cdn.jsdelivr.net/emojione/assets/ translate.googleapis.com cdnjs.cloudflare.com/ajax/libs/emojione/ https://fonts.googleapis.com/ pro.fontawesome.com
child-src 'self' www.google.com player.vimeo.com w.soundcloud.com
img-src 'self' data: https://dyxejg2tuwlpb.cloudfront.net https://cdnjs.cloudflare.com/ajax/libs/clusterize.js/ cdn.jsdelivr.net/emojione/assets/ translate.google.com maps.googleapis.com cdn.jsdelivr.net/emojione/ cdnjs.cloudflare.com/ajax/libs/emojione/
font-src 'self' data: https://dyxejg2tuwlpb.cloudfront.net https://cdnjs.cloudflare.com/ajax/libs/clusterize.js/ https://fonts.gstatic.com/ pro.fontawesome.com
"default-src https: data: 'unsafe-inline' 'unsafe-eval' https://*.zopim.com wss://*.zopim.com https://*.zopim.io
script-src  'self' ajax.googleapis.com maxcdn.bootstrapcdn.com code.jquery.com commerce.coinbase.com
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com safebrowsing.biz:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
style-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com eurid.matomo.cloud eurid.piwikpro.com www.gstatic.com
script-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' cdn.eurid.eu fonts.googleapis.com maps.google.com maps.googleapis.com www.google.com www.gstatic.com cdnjs.cloudflare.com connect.facebook.net *.twitter.com eurid.matomo.cloud
img-src 'self' 'unsafe-inline' maps.google.com maps.googleapis.com maps.gstatic.com csi.gstatic.com www.gstatic.com www.google.com *.twitter.com www.facebook.com eurid.matomo.cloud eurid.piwikpro.com data:
child-src 'self' cdn.embedly.com www.youtube.com *.twitter.com staticxx.facebook.com www.facebook.com  www.gstatic.com www.google.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' disqus.com *.disqus.com *.youtube.com *.facebook.com http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com *.google-analytics.com *.googleapis.com *.facebook.net *.quantserve.com *.gstatic.com/ *.quantcount.com *.cloudflare.com *.googletagmanager.com *.tagmanager.google.com *.google-analytics.com *.google.com data: https://cdn.ravenjs.com *.doubleclick.net *.googleadservices.com *.google.com.br *.crazyegg.com *.ytimg.com *.navdmp.com *.mathtag.com https://variluxemdobro.clubedepremiosessilor.com.br:82/
style-src 'self' *.googleapis.com  https://connect.facebook.net https://www.google-analytics.com/ *.gstatic.com *.google.com 'unsafe-inline'
frame-ancestors http://www.crizal.com.br www.varilux.com.br http://www.variluxemdobro.com.br/ www.varilux.com.br"
"frame-ancestors https://albi.hu https://setmypage.com https://*.setmypage.com https://*.admin.hu https://*.landing.info https://*.paycare.com"
img-src 'self' https://img.en25.com editor-au.panasonic.com.au *.gstatic.com *.googleapis.com *.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js https://www.gstatic.com *.addthis.com http://m.addthisedge.com *.google.com *.googleapis.com
media-src 'self' blob: https://www.instagram.com https://*.cdninstagram.com https://*.fbcdn.net
script-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net 'unsafe-inline' 'unsafe-eval' blob:
style-src 'self' https://*.www.instagram.com https://www.instagram.com 'unsafe-inline'
connect-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://graph.instagram.com https://*.graph.instagram.com https://*.cdninstagram.com https://api.instagram.com wss://www.instagram.com wss://edge-chat.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net chrome-extension://boadgeojelhgndaghljhdicfkmllpafd
frame-src 'self' https://instagram.com https://www.instagram.com https://staticxx.facebook.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://m.facebook.com
"default-src https: 'self' 'unsafe-eval' 'unsafe-inline' *.internshala.com *.googleadservices.com *.bootstrapcdn.com *.googleads.g.doubleclick.net
img-src 'self' *.amazonaws.com * data: *.googleapis.com pagead2.googlesyndication.com  *.internshala.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.facebook.com *.googleads.g.doubleclick.net *.jquery.com *.bootstrapcdn.com *.google-analytics.com data: pagead2.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.googleapis.com *.amazonaws.com *.gstatic.com *.internshala.com *.linkedin.com
style-src 'self' 'unsafe-eval' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.google.com *.internshala.com
font-src 'self' data: fonts.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.internshala.com
frame-src *.facebook.com *.facebook.net *.doubleclick.net *.google.com *.hellotars.com *.googletagmanager.com *.googleapis.com *.linkedin.com
connect-src 'self' wss://*.internshala.com *.google.com *.google-analytics.com *.doubleclick.net  *.amazonaws.com *.google.co.in *.facebook.com *.instagram.com
script-src 'unsafe-inline' 'nonce-9a8f1f6f6302456a9b2ca3382831271b' 'strict-dynamic' https:
img-src 'self' lxz-images.azureedge.net lxz.blob.core.windows.net d3san4pg9xqi43.cloudfront.net *.google.com *.google.com.tw www.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.bing.com *.tamedia.com.tw cnt.fout.jp placehold.it *.line.me conv.mtburn.com scrlink.cool data:
script-src 'self' google.com *.google-analytics.com *.facebook.net *.vo.msecnd.net *.yimg.com *.tamedia.com.tw *.analytics.yahoo.com *.bing.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net js.fout.jp js.mtburn.com *.line-scdn.net scrlink.cool 'unsafe-inline'
frame-src 'self' *.facebook.com *.youtube.com js.fout.jp *.doubleclick.net
media-src 'self' lxz-images.azureedge.net lxz.blob.core.windows.net d3san4pg9xqi43.cloudfront.net
"default-src 'self' 'unsafe-eval' 'unsafe-inline' siteimproveanalytics.com *.google-analytics.com *.silvercloudinc.com integration.silvercloudinc.com seal.websecurity.norton.com *.siteimprove.com *.googleapis.com *.gstatic.com *.btstatic.com *.onelink-translations.com *.visionsfcu.org *.googleadservices.com *.facebook.net *.g.doubleclick.net *.mathtag.com *.googletagmanager.com *.adnxs.com *.fcc.gov *.w3.org *.google.com *.documatix.com *.stickleyonsecurity.com *.votervoice.net es.visionsfcu.org *.extole.io *.visionsfcu.org referrerals.visionsfcu.org  *.cloudsponge.com cloudsponge.com www.youtube.com *.thebrighttag.com facebook.com *.facebook.com insight.adsrvr.org *.w3.org cdnjs.cloudflare.com visionsfcu.cudlautosmart.com *.infogram.com
style-src 'self' fonts.googleapis.com cdn.hypothes.is 'unsafe-inline'"
script-src https: blob: 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://* http://dev.visualwebsiteoptimizer.com  http://*.bunkerhillins.com http://*.pilgrimins.com http://www.google-analytics.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://* http://ajax.googleapis.com http://www.google-analytics.com http://dev.visualwebsiteoptimizer.com http://tags.tiqcdn.com"
"default-src 'self' blob: data: https://*.doubleclick.net https://accounts.google.com https://apis.google.com https://content.googleapis.com https://fonts.gstatic.com https://google-analytics.com https://googleapis.com https://netdna.bootstrapcdn.com https://*.facebook.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com http://tagmanager.google.com http://staticxx.facebook.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.doubleclick.net https://accounts.google.com https://apis.google.com https://connect.facebook.net https://google-analytics.com https://googleadservices.com https://googletagmanager.com https://graph.facebook.com https://marketing.wfirma.pl https://plus.google.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com http://tagmanager.google.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://googleapis.com http://tagmanager.google.com
img-src 'self' data: blob: https://* http://*
"frame-ancestors 'self' http://*.olympus-ims.com http://*.olympus-lifescience.com *.olympus-ims.com *.olympus-lifescience.com www.olympusamerica.com *.aspiresoft.com
frame-ancestors 'self' https://bloganchoi.com https://*.bloganchoi.com https://*.facebook.com https://facebook.com"
"child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com
connect-src 'self' whaleshares.io wss://whaleshares.io/ws https://whaleshares.io/ws pubrpc.whaleshares.io rpc.wls.services wss://rpc.wls.services https://rpc.wls.services api.wls.services https://api.wls.services api.whaleshares.io https://api.whaleshares.io rpc.whaleshares.io https://rpc.whaleshares.io
font-src data: fonts.gstatic.com fonts.googleapis.com zavoloklom.github.io
style-src 'self' 'unsafe-inline' fonts.googleapis.com zavoloklom.github.io
default-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com projectfiles.limesurvey.org www.youtube.com frontend.pay1.de analytics.limesurvey.org www.google.com kiwiirc.com limesurvey.org
font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com projectfiles.limesurvey.org github.com
style-src 'unsafe-inline' fonts.googleapis.com 'self' maxcdn.bootstrapcdn.com projectfiles.limesurvey.org ajax.googleapis.com www.google.com
form-action 'self' https://*.arcot.com www.paypal.com survey.limesurvey.org
script-src 'self' 'unsafe-eval' 'unsafe-inline' secure.pay1.de projectfiles.limesurvey.org www.google.com www.google-analytics.com
frame-src frontend.pay1.de docs.google.com 'self' download.limesurvey.org kiwiirc.com www.youtube.com limesurvey.org secure.pay1.de
script-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.optmstr.com https://*.optmnstr.com https://*.onesignal.com https://certify.gpwa.org 'nonce-465c90448dfd11b283e9d998b6c55944322170c7' 'nonce-604bbb4d8ef40d0d9c9e75af09c9ced550396056' 'nonce-22f873542e1067a51e1c94271279830c6750c858' 'nonce-19e950ea9998ce3876489cb3976b5e716c8103da' 'nonce-0125beb5f75a4cf5f834c11985d63e9c1a65ddcd' 'nonce-11a8a264b37e0fec72086811bd31e503fa3822d4' 'nonce-2b538cf6890250b16f9222a3fedb71978f1abff3' 'nonce-b90b7d0d615be5b1ac74dd1b8a9ca20eea174f5d' 'nonce-6b7ca7e7bc5ef5e717bff58e59c60c916bcdda95'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagservices.com *.google.ru cdn.jsdelivr.net *.top100.ru *.cloudfront.net *.google.com *.rambler.ru yandex.ru *.yandex.ru yastatic.net *.yandex.net yandex.st *.googleapis.com apis.google.com *.gstatic.com gstatic.com *.googlesyndication.com www.googleadservices.com counter.yadro.ru www.liveinternet.ru vk.com *.vk.com *.mail.ru *.twitter.com cdn.syndication.twimg.com *.facebook.net *.jquery.com cackle.me *.cackle.me
style-src 'self' 'unsafe-inline' *.google.com cackle.me *.cackle.me *.yandex.ru fonts.googleapis.com
font-src 'self' data: *.gstatic.com *.yandex.ru fonts.googleapis.com
"default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://enginex.kadira.io
script-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://enginex.kadira.io
connect-src * 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://enginex.kadira.io
img-src data: 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://enginex.kadira.io
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://enginex.kadira.io
"frame-src 'self' www.reidominoxidilgoiania.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
"default-src 'unsafe-inline' 'unsafe-eval' *.fresco.me wss://*.fresco.me ws://*.fresco.me https://s3-ap-southeast-1.amazonaws.com blob: data: https:"
"default-src 'self' *.homemasters.ru:443 homemasters.ru:443 https://homemasters.ru:443
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://homemasters.ru:443 https://mail.ru https://*.mail.ru https://imgsmail.ru https://*.imgsmail.ru https://google.ru https://*.google.ru https://google-analytics.com https://*.google-analytics.com https://vk.com https://*.vk.com  https://vkontakte.ru https://*.vkontakte.ru https://facebook.net https://*.facebook.net https://facebook.com https://*.facebook.com https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yandex.st https://*.yandex.st https://yastatic.net https://gstatic.com https://*.gstatic.com https://googleads.g.doubleclick.net https://google.com https://*.google.com https://twitter.com https://*.twitter.com https://*.twimg.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagservices.com https://ok.ru https://*.ok.ru https://*.odnoklassniki.ru https://counter.rambler.ru https://st.top100.ru  https://keycaptcha.com https://*.keycaptcha.com https://click-stroy.ru https://*.click-stroy.ru  https://pinterest.com https://*.pinterest.com https://s3.amazonaws.com/ https://mixmarket.biz https://*.mixmarket.biz https://*.adriver.ru https://*.instagram.com
child-src 'self' https://homemasters.ru:443 https://mail.ru https://*.mail.ru https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://twitter.com https://*.twitter.com  https://facebook.com https://*.facebook.com https://vk.com https://*.vk.com https://vkontakte.ru https://*.vkontakte.ru https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yandex.st https://*.yandex.st https://yastatic.net https://yandexadexchange.net https://*.yandexadexchange.net https://gstatic.com https://*.gstatic.com https://googleads.g.doubleclick.net https://youtube.ru https://*.youtube.ru https://youtube.com https://*.youtube.com https://*.googleapis.com https://*.ok.ru https://*.odnoklassniki.ru https://keycaptcha.com https://*.keycaptcha.com https://player.vimeo.com https://coub.com https://*.instagram.com chromenull
connect-src 'self' https://homemasters.ru:443 https://translate.googleapis.com https://pipe.skype.com https://google-analytics.com https://*.google-analytics.com https://*.googlevideo.com https://*.yandex.ru https://mc.yandex.ru https://an.yandex.ru https://www.youtube.com https://rutube.ru https://graph.facebook.com https://*.twitter.com http://kraken.rambler.ru https://top-fwz1.mail.ru
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.homemasters.ru:443 homemasters.ru:443 https://homemasters.ru:443 https://*.bootstrapcdn.com https://*.googleapis.com https://fonts.googleapis.com https://*.gstatic.com https://*.yandex.ru https://yastatic.net https://s3.amazonaws.com https://*.twitter.com https://*.twimg.com data:
font-src 'self' https://homemasters.ru:443 https://*.bootstrapcdn.com  https://*.googleapis.com  https://*.gstatic.com https://*.yandex.ru data:
object-src 'self' https://homemasters.ru:443 https://googleads.g.doubleclick.net https://*.googlesyndication.com https://googlevideo.com https://*.googlevideo.com https://ytimg.com https://*.ytimg.com https://youtube.com https://*.youtube.com https://awaps.yandex.ru https://an.yandex.ru https://*.gstatic.com https://*.keycaptcha.com https://keycaptcha.com https://video.rutube.ru
media-src 'self' https://homemasters.ru:443 * mediastream: *
"default-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net http://tagmanager.google.com https://googleads.g.doubleclick.net https://tagmanager.google.com www.googleadservices.com *.webtrends.com *.webtrendslive.com https://assets.contentstack.io http://51.140.158.21 *.bkrtx.com *.serving-sys.com https://secure.adnxs.com analytics.freespee.com https://fonts.googleapis.com d1q62gfb8siqnm.cloudfront.net/911839/wt_capi.js wtosc.s3.amazonaws.com connect.facebook.net mpp2.vindicosuite.com *.oracleinfinity.io *.en25.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://www.google-analytics.com *.webtrends.com *.webtrendslive.com *.oracleinfinity.io adservice.google.com *.eloqua.com https://secure.fastclick.net https://secure.adnxs.com https://www.google.com https://www.google.co.uk https://secure-media.msg.dotomi.com *.gstatic.com  insight.adsrvr.org aax-eu.amazon-adsystem.com ad.doubleclick.net www.facebook.com data:
connect-src 'self' *.digitalsse.cloud *.sse.co.uk https://fk-contentstack-watch.herokuapp.com/ wss://fk-contentstack-watch.herokuapp.com/ ws://localhost:5000/ *.webtrendslive.com *.oracleinfinity.io
frame-src https://www.youtube.com *.bkrtx.com *.bluekai.com player.vimeo.com secure.img-cdn.mediaplex.com
"font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:
media-src 'self' 'unsafe-eval' 'unsafe-inline' https: data:
child-src 'self' https://www.google.com https://www.youtube.com https://youtube.com https://widget.trustpilot.com https://*.findandfundmycar.com https://www.facebook.com https://staticxx.facebook.com
connect-src 'self' https://insights.algolia.io https://api.postcodes.io https://api.ideal-postcodes.co.uk https://*.visualwebsiteoptimizer.com https://*.google-analytics.com https://*.doubleclick.net https://www.facebook.com/tr/
img-src 'self' https://pixelg.adswizz.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://findandfundmycarcom.cdn.prismic.io https://img.youtube.com https://*.visualwebsiteoptimizer.com https://prismic-io.s3.amazonaws.com https://*.findandfundmycar.com https://stats.g.doubleclick.net data: https://d2bkdfyoj2xgsx.cloudfront.net https://csi.gstatic.com https://maps.gstatic.com https://www.google-analytics.com https://*.googleapis.com https://*.ggpht.com https://www.facebook.com https://www.google.com https://www.google.co.uk
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://app.vwo.com https://api.ideal-postcodes.co.uk https://*.visualwebsiteoptimizer.com https://widget.trustpilot.com https://*.findandfundmycar.com https://www.googletagmanager.com https://mts.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://connect.facebook.net https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://*.findandfundmycar.com https://fonts.googleapis.com
frame-src                     'self'                     *.youtube.com                     *.googletagmanager.com                     *.google.com                     *.doubleclick.net
"script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com *.twimg.com *.coinbase.com zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
child-src *.youtube.com *.stripe.com www.google.com *.coinbase.com zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
style-src 'self' 'unsafe-inline' *.googleapis.com zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
img-src 'self' data: zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:* *.githubusercontent.com i.ytimg.com *.twimg.com *.googleapis.com *.gstatic.com www.google-analytics.com secure.gravatar.com avatars.slack-edge.com a.slack-edge.com spectrum-proxy.imgix.net spectrum-imgp.imgix.net spectrum.imgix.net github.com image.mux.com blob:
media-src 'self' stream.mux.com *.fastly.net *.stackpathdns.com *.hwcdn.net blob: zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
connect-src 'self' zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:* hooks.slack.com zeit-slackin.now.sh wss://state-io.zeit.co wss://log-io.zeit.co wss://zeit.co wss://ws.api-stream.zeit.sh api-zeit-day-scholarship.zeit.sh www.google-analytics.com spectrum.chat stream.mux.com *.fastly.net *.hwcdn.net *.stackpathdns.com sentry.io
"frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.eprotect.vantivprelive.com *.eprotect.vantivcnp.com *.maps.arcgis.com *.google-analytics.com *.googleapis.com *.google.com *.ywxi.net *.com/mfesecure-public/
script-src 'self' https://bam.nr-data.net https://js-agent.newrelic.com http://xxxx 'unsafe-eval' 'unsafe-inline' *.vantivprelive.com *.vantivcnp.com *.google.com *.google-analytics.com *.googleapis.com *.ywxi.net *.com/mfesecure-public/
img-src blob: data: * 'unsafe-eval' 'unsafe-inline'
"script-src data: 'unsafe-inline' 'unsafe-eval' https:"
script-src 'self' *.wp.com www.google-analytics.com ajax.cloudflare.com secure.gravatar.com kolompc-7t3ppqdtruls9fd.netdna-ssl.com connect.facebook.net static.xx.fbcdn.net https://www.google.com/recaptcha/ m.mixadvert.com www.gstatic.com 'unsafe-inline'
style-src 'self' kolompc-7t3ppqdtruls9fd.netdna-ssl.com *.wp.com fonts.googleapis.com secure.gravatar.com static.xx.fbcdn.net 'unsafe-inline'
img-src 'self' data: kolompc-7t3ppqdtruls9fd.netdna-ssl.com *.wp.com www.google-analytics.com secure.gravatar.com https://i.mixadvert.com/ lh3.googleusercontent.com lh3.ggpht.com
font-src 'self' data: https: fonts.googleapis.com
frame-src 'self' *.wp.com *.facebook.com www.google.com https://www.youtube.com
"script-src 'unsafe-inline' 'unsafe-eval'  *.facebook.net *.twitter.com *.instagram.com speakerdeck.com raibledesigns.com *.twimg.com *.twitter.com *.google-analytics.com *.flickr.com *.wufoo.com wufoo.com
": default-src 'self' data: *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.paypalobjects.com *.paypal.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com s3.amazonaws.com ausliebezumduft.us14.list-manage.com *.paypalobjects.com *.paypal.com *.hotjar.com connect.facebook.net
style-src 'self' data: 'unsafe-inline' *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.paypalobjects.com *.paypal.com *.hotjar.com
img-src 'self' data: *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.paypalobjects.com *.paypal.com *.doubleclick.net *.facebook.com
frame-src 'self' data: *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.youtube.com *.paypalobjects.com *.paypal.com *.hotjar.com
font-src 'self' data: *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com
connect-src 'self' data: *.ausliebezumduft.de *.firstinfragrance.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.paypalobjects.com *.paypal.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://maps.googleapis.com https://maps.gstatic.com  https://maps.google.com/ https://*.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com/ https://stats.spdns.de https://secure.aha.io/
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/metismenu/ https://cdn.datatables.net/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/
img-src 'self' data: https://www.medical-it-services.de/ https://www.securepoint.de/ https://*.googleapis.com https://*.gstatic.com/ https://stats.spdns.de https://maps.google.com/ https://api.tiles.mapbox.com/
frame-src 'self' https://securepoint.uservoice.com https://www.google.com/recaptcha/ https://www.youtube.com/embed/ https://support.securepoint.de/ https://wunschbox.ideas.aha.io/
img-src 'self' data: blob: data: blob: filesystem android-webview-video-poster www.google-analytics.com ssl.google-analytics.com s3.nodecraft.com filepicker.nodecraft.com s3.amazonaws.com/filepicker.nodecraft.com/* piwik.nodecraft.com crafatar.com csi.gstatic.com maps.gstatic.com www.gstatic.com stats.g.doubleclick.net www.paypalobjects.com syndication.twitter.com platform.twitter.com pbs.twimg.com ton.twimg.com abs.twimg.com www.facebook.com web.facebook.com/ maps.googleapis.com *.sentry.io sentry.io cloud.filestackapi.com static.filestackapi.com cdn.filestackcontent.com a.disquscdn.com c.disquscdn.com referrer.disqus.com/juggler/stat.gif i.ytimg.com js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com uploads.intercom-mail-200.com cdn.ringcaptcha.com
"connect-src 'self' https://www.google.com https://*.smct.co https://smct.co https://performance.typekit.net https://api.sparkenergy.co.uk https://chat.puzzel.com https://chat.intele.com https://www.gstatic.com
default-src 'self' https://*.smct.co https://smct.co https://www.googleadservices.com https://*.bing.com https://*.twitter.com https://*.tradedoubler.com https://*.ads-twitter.com https://*.facebook.com https://*.g.doubleclick.net https://t.co https://*.google.com https://*.mention-me.com http://cdnjs.cloudflare.com https://scripts.affiliatefuture.com https://www.securesuite.co.uk https://www.mycardsecure.com https://chat.puzzel.com https://chat.intele.com https://gstatic.com https://www.google.com
script-src 'self'  'unsafe-inline' 'unsafe-eval' https://*.smct.co https://smct.co https://*.tradedoubler.com https://www.googleadservices.com https://*.bing.com https://*.twitter.com https://*.ads-twitter.com https://*.facebook.com https://*.g.doubleclick.net https://t.co https://*.google.com https://*.mention-me.com https://scripts.affiliatefuture.com https://www.gstatic.com https://performance.typekit.net  https://chat.puzzel.com https://chat.intele.com widget.trustpilot.com https://www.google.com https://use.typekit.net www.google-analytics.com  www.googletagmanager.com https://s3.amazonaws.com https://ssl.google-analytics.com https://connect.facebook.net https://fonts.gstatic.com
img-src 'self' data: https://*.google.co.uk https://*.smct.co https://smct.co  https://www.googleadservices.com https://*.bing.com https://*.twitter.com https://*.ads-twitter.com https://*.facebook.com https://*.g.doubleclick.net https://t.co https://*.google.com https://stats.g.doubleclick.net www.google-analytics.com https://s3.amazonaws.com https://scripts.affiliatefuture.com https://p.typekit.net  https://ssl.google-analytics.com https://s-static.ak.facebook.com
style-src 'self' 'unsafe-inline'  https://s3.eu-west-1.amazonaws.com/smc-fonts/ http://cdnjs.cloudflare.com https://chat.puzzel.com https://chat.intele.com https://fonts.googleapis.com https://cdnjs.cloudflare.com
font-src 'self' data:  https://s3.eu-west-1.amazonaws.com/smc-fonts/ https://use.typekit.net https://chat.puzzel.com https://chat.intele.com https://fonts.gstatic.com https://themes.googleusercontent.com
"default-src 'none' http://*.hp.com https://*.hp.com http://*.d41.co https://*.optimizely.com https://*.company-target.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/ *.cnetcontent.com tagmanager.google.com https://secure.hp-ww.com http://www.googletagmanager.com http://nexus.ensighten.com *.hp.com http://*.demandbase.com https://*.demandbase.com http://*.optimizely.com https://*.optimizely.com http://*.d41.co https://*.d41.co http://*.en25.com https://*.en25.com http://*.rlcdn.com http://*.agkn.com *.hpshopping.co.nz https://connect.facebook.net
img-src 'self' http://*.acquire.co.nz http://acquire.co.nz https://acquire.co.nz https://*.acquire.co.nz https://asite.io https://www.google-analytics.com https://*.eloqua.com http://*.hp.com http://*.company-target.com http://*.bidr.io http://*.rlcdn.com https://stats.g.doubleclick.net https://www.google.com/ads https://www.google.co.nz/ads https://www.google.com.au/ads https://*.gstatic.com https://www.facebook.com/tr/ data:
frame-src https://www.google.com/recaptcha/ https://www.youtube.com https://cdn.flipsnack.com/ *.cnetcontent.com *.optimizely.com
script-src 'self' 'nonce-3be9ddb9556f44edb3c24b13be8296ed' https://www.google-analytics.com/ https://maps.googleapis.com/ https://static.getclicky.com/ https://in.getclicky.com/ https://cdn.carbonads.com/ http://srv.carbonads.net/ https://adn.fusionads.net/ https://m.servedby-buysellads.com/ https://srv.buysellads.com/ https://platform.twitter.com/ https://static.ads-twitter.com/ https://analytics.twitter.com/ https://codepen.io/ https://assets.codepen.io/ https://cdn.syndication.twimg.com/
": default-src 'self' *.googleapis.com *.googletagmanager.com"
"script-src 'self' https://cdnjs.cloudflare.com https://www.google-analytics.com https://cdn.mathjax.org https://ajax.cloudflare.com 'unsafe-inline' 'unsafe-eval' https://dmoj.algome.me
style-src 'self' data: 'unsafe-inline' https://dmoj.algome.me
connect-src wss://dmoj.ca wss://events.dmoj.ca 'self' https://events.dmoj.ca https://maps.googleapis.com https://sentry.io https://dmoj.algome.me
img-src 'self' data: https://www.gravatar.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://stats.g.doubleclick.net https://slack.dmoj.ca https://dmoj.algome.me https://camo.algome.me
frame-src 'self' https://en.m.wikipedia.org https://www.youtube.com https://www.google.com https://docs.google.com
img-src * data: blob: about: 'unsafe-inline'
frame-ancestors 'self' *.greenvelopetesting.com *.greenvelope.com localizejs.com localize.live
style-src 'self' 'unsafe-inline' www.google-analytics.com code.jquery.com
img-src 'self' data: www.google-analytics.com ssl-i.cdn.openx.com ox-d.carlsonwagonlit.com ox-i.carlsonwagonlit.com *.openx.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.google-analytics.com www.googletagmanager.com app.tagibletravel.com              *.googleapis.com code.jquery.com content.voyagerwebsites.com ox-d.carlsonwagonlit.com *.openx.net
frame-src 'self' *.satovacations.com satovacations.com *.cwtsatotravel.com cwtsatotravel.com *.jbsatravel.com jbsatravel.com              www.google.com/recaptcha/ www.googletagmanager.com issuu.com
frame-ancestors 'self' cwtvacations.com *.cwtvacations.com travel.carlsonwagonlit.com *.travel.carlsonwagonlit.com jbsatravel.com *.jbsatravel.com satovacations.com *.satovacations.com cwtvacationclub.com *.cwtvacationclub.com"
frame-src 'self' gsa: gap: staticxx.facebook.com www.facebook.com www.youtube.com maps.google.com www.google.com www.googletagmanager.com static.olark.com *.gaiareply.eu *.mpayment.it vars.hotjar.com http://*.mpayment.it http://*.gaiareply.eu
img-src 'self' redooc.com *.redooc.com www.google-analytics.com https://*.googleusercontent.com https://www.facebook.com https://static.olark.com https://*.fbcdn.net static.olark.com log.olark.com
font-src 'self' connect.facebook.net fonts.gstatic.com maxcdn.bootstrapcdn.com
script-src 'self'  'unsafe-eval' 'unsafe-inline'  *.hotjar.com www.google-analytics.com www.googletagmanager.com connect.facebook.net *.olark.com clients1.google.com www.googleapis.com
style-src 'self' 'unsafe-inline'  fonts.googleapis.com  static.olark.com maxcdn.bootstrapcdn.com
connect-src 'self' *.hotjar.com *.olark.com ws://*.hotjar.com https://www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://www.google-analytics.com https://rum-static.pingdom.net https://connect.facebook.net https://maps.googleapis.com https://track.adform.net/ https://bs.serving-sys.com https://ssl.p.jwpcdn.com https://platform.twitter.com https://cdnjs.cloudflare.com https://js-agent.newrelic.com https://bam.nr-data.net https://code.jquery.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://graph.facebook.com https://www.googletagmanager.com https://static.ads-twitter.com https://analytics.twitter.com https://www.totalerg.it
"default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'
"default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:"
worker-src https://assets.gitlab-static.net https://gl-canary.global.ssl.fastly.net https://gitlab.com blob:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.gitlab-static.net https://gl-canary.global.ssl.fastly.net https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.gstatic.com/recaptcha/ https://apis.google.com
style-src 'self' 'unsafe-inline' https://assets.gitlab-static.net https://gl-canary.global.ssl.fastly.net
frame-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://content.googleapis.com https://content-compute.googleapis.com https://content-cloudbilling.googleapis.com https://content-cloudresourcemanager.googleapis.com https://*.codesandbox.io
connect-src 'self' https://assets.gitlab-static.net https://gl-canary.global.ssl.fastly.net wss://gitlab.com https://sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.skoda-storyboard.com *.cdninstagram.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googletagmanager.com *.googlevideo.com *.youtube.com *.ytimg.com *.vimeo.com *.doubleclick.net *.gomexlive.com *.hotjar.com *.googleapis.com cdnjs.cloudflare.com www.googletagmanager.com static.hotjar.com *.mailguide.cz *.twitter.com twitter.com platform.twitter.com twitter.com *.twimg.com www.instagram.com *.instagram.com *.ads-twitter.com"
"frame-src 'strict-dynamic' 'unsafe-inline' http: https:
"default-src 'self' https://*.google.com/ https://login.dotomi.com/ https://images.winecountrygiftbaskets.com/ https://www.youtube.com/ https://qwww435.americanexpress.com/ https://wcgift.com/ https://aslvwebt1.arroweyesolutions.net/ https://cards.cardways.com/ https://checkout.americanexpress.com/ https://dis.eu.criteo.com/ https://dis.us.criteo.com/ https://bid.g.doubleclick.net/ https://echeckout.americanexpress.com/ https://gum.criteo.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://www.facebook.com/
script-src 'self' https://*.googleapis.com/ https://www.googleadservices.com/ https://*.google.com/ https://www.googletagmanager.com/ https://code.murdoog.com/ https://secure-cdn.mplxtms.com/ https://www.google-analytics.com/ https://custom-wrs.api.responsys.net/ https://images.winecountrygiftbaskets.com/ https://icm.aexp-static.com/ https://qicm.americanexpress.com/ https://qwww435.americanexpress.com/ https://adadvisor.net/ https://apis.murdoog.com/ https://aa.agkn.com/ https://checkout.americanexpress.com/ https://t.mplxtms.com/ https://api.pinterest.com/ https://api.instagram.com/ https://static.criteo.net/js/ld/ld.js https://sslwidget.criteo.com/ https://widget.eu.criteo.com/ http://s7d1.scene7.com/ https://bat.bing.com/ https://s.yimg.com/ https://sp.analytics.yahoo.com/ https://www.adobetag.com/ https://googleads.g.doubleclick.net/ https://100008590.collect.igodigital.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://echeckout.americanexpress.com/ https://s7d5.scene7.com/ https://connect.facebook.net/ 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://*.googleapis.com/ https://www.googleadservices.com/ https://*.google.com/ https://www.googletagmanager.com/ https://code.murdoog.com/ https://secure-cdn.mplxtms.com/ https://www.google-analytics.com/ https://custom-wrs.api.responsys.net/ https://images.winecountrygiftbaskets.com/ https://icm.aexp-static.com/ https://qicm.americanexpress.com/ https://qwww435.americanexpress.com/ https://adadvisor.net/ https://apis.murdoog.com/ https://aa.agkn.com/ https://checkout.americanexpress.com/ https://s7d1.scene7.com/ https://www.youtube.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://echeckout.americanexpress.com/ https://s7d5.scene7.com/ 'unsafe-inline' 'unsafe-eval'
font-src 'self' data: https://*.googleapis.com/ https://fonts.gstatic.com/ https://www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff https://www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-1.ttf
connect-src 'self' https://*.googleapis.com/ https://*.google.com/ https://www.google-analytics.com/ https://t.mplxtms.com/tags https://wrs.adrsp.net/ https://www.youtube.com/ https://widget.eu.criteo.com/ https://images.winecountrygiftbaskets.com/
"default-src data: https: 'unsafe-inline' 'unsafe-eval'"
img-src 'self' https://siwecos.de https://webstats.eco.de https://*.twitter.com https://*.twimg.com data:
script-src 'self' 'sha256-gdawd7jo073hejcl6adkng1dwlyfctlsuyzyfugqz0k=' https://webstats.eco.de https://*.twitter.com https://*.twimg.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.twitter.com https://*.twimg.com
"defalt-src https: data: 'unsafe-inline' 'unsafe-eval'"
script-src arxip.com 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.google-analytics.com yastatic.net maps.googleapis.com
style-src arxip.com 'self' 'unsafe-inline' fonts.googleapis.com
connect-src arxip.com 'self' wss://arxip.com 'self' mc.yandex.ru yastatic.net
img-src arxip.com 'self' arxip.com https: data: blob: filesystem:
font-src arxip.com 'self' https: data: fonts.googleapis.com
img-src 'self' data: www.google-analytics.com ci.appveyor.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com/analytics.js https://ssl.google-analytics.com/ga.js https://ws.sharethis.com/button/buttons.js https://ws.sharethis.com/button/async-buttons.js https://ws.sharethis.com/button/p.js https://t.sharethis.com/1/d/t.dhj https://players.brightcove.net/1839446729001/hjr1vw8ab_default/index.min.js *.zencdn.net https://maps.googleapis.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com/css https://ws.sharethis.com/button/css/buttons-secure.css
img-src 'self' data: https://www.google-analytics.com/collect https://ssl.google-analytics.com/r/__utm.gif https://ssl.google-analytics.com/__utm.gif https://metrics.brightcove.com/v2/tracker *.akamaihd.net *.boltdns.net https://maps.googleapis.com https://maps.gstatic.com
connect-src 'self' https://l.sharethis.com *.brightcove.com *.brightcovecdn.com *.boltdns.net https://ssl.google-analytics.com
frame-src 'self' https://t.sharethis.com/ https://ws.sharethis.com/ https://c.sharethis.mgr.consensu.org
media-src 'self' blob: https://secure.brightcove.com https://f1.media.brightcove.com https://manifest.prod.boltdns.net https://house-fastly-signed-us-east-1-prod.brightcovecdn.com
"script-src 'self' 'unsafe-inline' browser-update.org platform.twitter.com www.googletagmanager.com www.google-analytics.com rum-static.pingdom.net https://tagmanager.google.com/debug assets.zendesk.com static.zdassets.com ekr.zdassets.com browser.sentry-cdn.com sentry.system.data.gov.au
script-src 'unsafe-inline' https://code.jquery.com:443 https://www.googletagmanager.com:443 https://www.google-analytics.com:443 https://cdnjs.cloudflare.com:443 https://maxcdn.bootstrapcdn.com:443 https://cdn.gchrl.org:443 https://www.google.com:443 https://www.gstatic.com:443 https://my.nicheacademy.com:443 https://connect.facebook.net:443 https://www.googleapis.com:443
style-src https://cdn.gchrl.org:443 'unsafe-inline' https://cdn.datatables.net:443 https://maxcdn.bootstrapcdn.com:443 https://cdnjs.cloudflare.com:443 https://my.nicheacademy.com:443 https://www.gstatic.com:443
img-src https://cdn.gchrl.org:443 https://gchrl.org:443 https://www.google-analytics.com:443 https://stats.g.doubleclick.net:443 https://gapines.org:443 https://dummyimage.com:443 https://cdnjs.cloudflare.com:443 https://my.nicheacademy.com:443
frame-src 'self' https://cdn.gchrl.org:443 https://staticxx.facebook.com:443 https://my.nicheacademy.com:443 https://www.google.com:443
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.facebook.com http://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.fbcdn.net http://*.fbcdn.net http://*.twitter.com https://*.twitter.com http://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com https://*.google.com http://*.google-analytics.com https://*.google-analytics.com https://*.doubleclick.net http://*.doubleclick.net https://*.googleadservices.com http://*.googleadservices.com http://*.schema.org https://*.schema.org http://*.w3.org https://*.w3.org http://*.googletagmanager.com https://*.googletagmanager.com http://*.imedia.cz https://*.imedia.cz
"default-src https: 'self' 'unsafe-eval' 'unsafe-inline' goo.gl data:
"font-src 'self' https://use.fortawesome.com/ data: https://cdnjs.cloudflare.com/ data: https://maxcdn.bootstrapcdn.com/ data:
img-src 'self' freecadweb.org analytics.freecad.io data: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.google-analytics.com
frame-src 'self' docs.google.com www.youtube.com www3.moneris.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://machinelearnings.co:443 https://*.machinelearnings.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src 'self' wss://dev-ws.switcheo.io wss://test-ws.switcheo.io wss://ws.switcheo.io https://*.switcheo.network:* https://min-api.cryptocompare.com https://*.infura.io https://geoip-js.maxmind.com https://seed1.cityofzion.io https://seed2.cityofzion.io https://seed3.cityofzion.io https://seed4.cityofzion.io https://seed5.cityofzion.io https://seed1.red4sec.com:10332 https://ethereum-rpc.trustwalletapp.com
script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://js.maxmind.com https://info.switcheo.network https://verify.sendwyre.com 'sha256-5n4pp5uchkbiuxxxfe+kdysfhzhqxoizn80eq+jf9p4=' 'sha256-/fcuycospg5w5rt7pgbdlufk2t9mzrrpesv2mct1b/i=' 'sha256-whuny2zcwga8vph7z9gtobhkz/x9lgl1bodysclve8k='
"default-src 'self' *.addthis.com *.google-analytics.com *.instagram.com *.googleapis.com *.trustpilot.com *.facebook.com
child-src 'self' *.w.org *.gstatic.com *.googleapis.com *.addthis.com *.addthisedge.com *.facebook.com *.youtube.com *.trustpilot.com *.vimeo.com https://*.google.com platform.twitter.com platform.linkedin.com
style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com
font-src 'self' data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com
frame-src 'self' www.google.com app.briefbox.com.au www.youtube.com
img-src 'self' data: www.google-analytics.com cdnjs.cloudflare.com"
"default-src https: data: 'unsafe-eval' 'unsafe-inline'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' ads.brasilct.com ads.brasilct.net *.googletagmanager.com *.google-analytics.com *.google.com dnn506yrbagrg.cloudfront.net js-agent.newrelic.com bam.nr-data.net *.amazonaws.com dev.visualwebsiteoptimizer.com *.googleapis.com *.jsdelivr.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
style-src 'self' 'unsafe-inline' *.amazonaws.com *.googleapis.com *.jsdelivr.net
frame-src 'self' *.youtube.com viagens.bonusesfera.com.br viagens.pontosesfera.com.br homol.viagens.brasilct.net *.googletagmanager.com https://www.google.com/recaptcha/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de
"frame-ancestors 'self' rtvs.sk *.rtvs.sk rtvs.org *.rtvs.org"
"default-src 'self' fonts.gstatic.com *.tumblr.com notecounterstorageacc.blob.core.windows.net
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ fonts.gstatic.com
img-src 'self' *.tumblr.com https://notecounterstorageacc.blob.core.windows.net/ data:
img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com t.co 'self' 'unsafe-inline' blob: elliottueno.fwd.wf res.cloudinary.com s3-us-west-1.amazonaws.com data:
style-src 'self' 'unsafe-inline' blob: 'self' 'unsafe-inline' fonts.googleapis.com blob:"
img-src 'self' rakuma.r10s.jp *.sofmap.com *.fril.jp mbok.jp *.mercari.com *.dena.ne.jp *.janpara.co.jp *.com *.co.jp *.ne.jp *.googleusercontent.com *.ggpht.com www.musbi.net item-shopping.c.yimg.jp *.a8.net *.valuecommerce.com *.linksynergy.com
script-src 'self' www.google-analytics.com uh.nakanohito.jp js-agent.newrelic.com bam.nr-data.net pagead2.googlesyndication.com ad.jp.ap.valuecommerce.com 'unsafe-inline'
script-src clevertarget.ru www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com telegram.org mc.yandex.ru api.vk.com vk.com 'unsafe-inline' 'unsafe-eval'
frame-src clevertarget.ru www.google.com vk.com oauth.telegram.org
img-src clevertarget.ru pp.userapi.com data: vk.com www.google-analytics.com mc.yandex.ru
connect-src clevertarget.ru login.vk.com wss://clevertarget.ru mc.yandex.ru"
font-src https: data: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' wss://api.picnic.software/ https: data:
img-src 'self' data: blob: https: https://assets.dumpsters.com
script-src data: https://solutions.invocacdn.com https://*.fontawesome.com https://*.cloudfront.net https://cdn.mouseflow.com https://disqus.com https://assets.dumpsters.com 'self' https://cdn.callrail.com 'unsafe-inline' https://www.google-analytics.com https://ajax.googleapis.com https://www.googletagmanager.com 'unsafe-eval' https://dev.visualwebsiteoptimizer.com https://maps.googleapis.com https://script.crazyegg.com https://s3.amazonaws.com https://connect.facebook.net https://dumpsters-com.disqus.com https://apis.google.com https://assets.pinterest.com https://c.disquscdn.com https://log.pinterest.com https://www.googleadservices.com https://www.gstatic.com https://api.picnic.software/app/1519827157341:12:16dcec65-46f8-4363-8062-4a3759c9f3dc https://www.google.com/ https://googleads.g.doubleclick.net https://solutions.invocacdn.com https://pnapi.invoca.net
style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://*.cloudfront.net https://fonts.googleapis.com data: https://assets.dumpsters.com https://c.disquscdn.com
frame-src https: data: 'self' blob: https://www.homeadvisor.com
connect-src 'self' wss://*.visitors.live wss://visitors.live https://*.mixpanel.com https://*.luckyorange.com https://*.luckyorange.net"
"default-scr https: data: 'unsafe-inline' 'unsafe-eval'"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thebalance.com *.qa.aws.thebalance.com atlas.thebalance.com atlas.local.thebalance.com"
"default-src 'self' www.mega-xxx.biz mega-xxx.biz http://st.mega-xxx.biz megabc.info mega-bc.info https://fex.net *.fex.net https://n161adserv.com http://mpay3.info http://redirect.mpay69.info http://mpay69.com http://mpay69.biz 69v.club *.xcvgdf.party https://*.vids69.com *.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com yandex.st an.yandex.ru *.google.com pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' http://www.mega-xxx.biz http://mega-xxx.biz data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
frame-src 'self' https://d-nb.info https://*.dnb.de https://id.loc.gov http://getty.edu http://www.getty.edu https://*.wikipedia.org https://museum-digital.jrenslin.de
img-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://ssl.google-analytics.com/ga.js https://ajax.cloudflare.com https://amp.cloudflare.com https://www.google.com https://www.gstatic.com https://www.instagram.com https://platform.instagram.com https://www.redditstatic.com https://stats.g.doubleclick.net https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.syndication.twimg.com https://connect.facebook.net https://platform.twitter.com https://syndication.twitter.com
style-src 'self' 'unsafe-inline' https://www.google.com https://ajax.googleapis.com https://amp.cloudflare.com https://ton.twimg.com https://platform.twitter.com
connect-src 'self' *.amp.cloudflare.com https://platform.twitter.com https://syndication.twitter.com https://stats.g.doubleclick.net
frame-src 'self' data: blob: https://www.google.com https://twitter.com https://platform.twitter.com https://syndication.twitter.com https://mobile.twitter.com https://t.co https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com https://m.facebook.com https://static.xx.fbcdn.net https://www.instagram.com https://www.redditmedia.com https://w.soundcloud.com https://youtube.com https://www.youtube.com https://player.vimeo.com https://dailymotion.com https://www.dailymotion.com *.amp.cloudflare.com
"child-src 'self' *.vimeo.com vimeocdn.com *.youtube.com *.shinyapps.io shiny.niwa.co.nz cdn.knightlab.com s7.addthis.com"
script-src *.marxists.org 'self' 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' my.ship7.com *.amazonaws.com assets1.freshchat.io youparcel.freshchat.io fonts.googleapis.com fonts.gstatic.com www.google-analytics.com www.google.com www.youtube.com cdn.ywxi.net stats.g.doubleclick.net *.cloudflare.com *.mcafeesecure.com *.facebook.net *.facebook.com *.zoho.com *.zohopublic.com wss://*.zohopublic.com *.zohostatic.com *.cloudfront.net *.googletagmanager.com *.google.com *.hotjar.com *.gstatic.com wss://*.hotjar.com *.ads-twitter.com *.twitter.com t.co
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com/ https://www.gstatic.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.google.com https://*.gstatic.com/feedback/ https://maps.googleapis.com https://ajax.googleapis.com https://cdnjs.cloudflare.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com https://www.googletagmanager.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com ssl.google-analytics.com translate.google.com translate.googleapis.com
"script-src * 'self' 'unsafe-inline' 'unsafe-eval' *.google.com gstatic.com
"script-src find pcagentgroup.com agencysis.com agencyftis.com agencyclis.com agencycfis.com agencyais.com stillwater.com stillwaterinsurance.com *.stillwater.com *.stillwaterinsurance.com https://verify.authorize.net https://www.google-analytics.com https://seal.digicert.com https://secure.providesupport.com *.googleapis.com https://na4.smartcommunications.cloud 'unsafe-eval' 'unsafe-inline'
object-src find pcagentgroup.com agencysis.com agencyftis.com agencyclis.com agencycfis.com agencyais.com stillwater.com stillwaterinsurance.com *.stillwater.com *.stillwaterinsurance.com https://verify.authorize.net https://www.google-analytics.com https://seal.digicert.com https://secure.providesupport.com *.googleapis.com https://na4.smartcommunications.cloud 'unsafe-eval' 'unsafe-inline'
"default-src 'self' https://*.hotjar.com:* wss://*.hotjar.com 'unsafe-eval'
img-src 'self' https://ws.patentstyret.no https://stats.g.doubleclick.net https://www.google-analytics.com
script-src 'self' https:  'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com cdn.jsdelivr.net oss.maxcdn.com vars.hotjar.com
style-src 'self' 'unsafe-inline' https: fonts.googleapis.com data:
font-src 'self' https: fonts.googleapis.com fonts.gstatic.com
img-src 'self' *.msgapp.com data: blob: filesystem: https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com *.amazonaws.com *.google.com http://ps.w.org http://i0.wp.com http://i1.wp.com *.gravatar.com *.googleapis.com *.gstatic.com https://www.google-analytics.com http://www.google-analytics.com *.twitter.com *.twimg.com https://cdnjs.cloudflare.com https://stats.g.doubleclick.net *.stats.g.doubleclick.net *.google.fr https://share.synolia.com https://v2assets.zopim.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.synolia.com *.msgapp.com *.gstatic.com https://use.fontawesome.com *.fontawesome.com http://s7.addthis.com *.google.com *.google.fr *.googleapis.com www.google-analytics.com https://www.google-analytics.com *.twitter.com https://cdn.syndication.twimg.com https://code.jquery.com http://maps.google.com https://maps.googleapis.com http://maps.googleapis.com https://cdnjs.cloudflare.com https://www.googleadservices.com/pagead/conversion.js https://static.hotjar.com https://static.zdassets.com https://v2.zopim.com
style-src 'self' 'unsafe-inline' https://maps.googleapis.com https://fonts.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.twitter.com *.google.com *.jsdelivr.net https://cdnjs.cloudflare.com
"script-src 'self' *.sdicamps.com *.heartlandportico.com *.pointstreak.com *.google.com *.googleapis.com *.google-analytics.com *.newrelic.com *.nr-data.net 'unsafe-inline' 'unsafe-eval'"
script-src 'self' http://finanzkaufleute.de https://finanzkaufleute.de http://hidden.cocopro.de 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com
font-src 'self' fonts.googleapis.com fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://tr1.cbsistatic.com https://c.disquscdn.com/ data:
"default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com
font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://static2.sharepointonline.com https://spoprod-a.akamaihd.net
img-src 'self' data: https://nlcloans.com https://www.google-analytics.com https://stats.g.doubleclick.net https://scontent-ort2-1.cdninstagram.com https://www.google.com https://images.nlcapp.com https://maps.gstatic.com https://maps.googleapis.com"
"default-src https: 'self' d3sjx7m1rsw5t2.cloudfront.net *.optimizely.com ss42phpnet.phpnet.org
child-src 'self' player.vimeo.com payment.hipay.com test-payment.hipay.com www.youtube.com www.google.com www.google.be *.optimizely.com secure.ogone.com www.kbc.be www.cbc.be secure-gateway.hipay-tpp.com payment-web.sips-atos.com platform.twitter.com syndication.twitter.com *.facebook.com *.talkgadget.google.com *.stripe.com *.ing.be *.g.doubleclick.net *.intercom.io *.intercom-sheets.com fast.wistia.net dis.eu.criteo.com vars.hotjar.com
connect-src wss: 'self' d3sjx7m1rsw5t2.cloudfront.net ws://d3sjx7m1rsw5t2.cloudfront.net api.rollbar.com *.hotjar.com *.log.optimizely.com *.inspectlet.com *.facebook.com *.stripe.com agilecrm.s3.amazonaws.com www.google.com faqbot.co www.faqbot.co *.intercom.io *.intercomcdn.com *.intercomusercontent.com app.getsentry.com *.pusherapp.com
font-src 'self' d3sjx7m1rsw5t2.cloudfront.net data: *.gstatic.com cdnjs.cloudflare.com *.intercomcdn.com maxcdn.bootstrapcdn.com
img-src 'self' data: d3sjx7m1rsw5t2.cloudfront.net listminutv3-prod-assets.s3.amazonaws.com listminut.be cidoum.s3.amazonaws.com *.gstatic.com *.googleapis.com www.google-analytics.com www.google.com pci.usd.de code.jquery.com *.facebook.com scontent.xx.fbcdn.net my.clickdesk.com s3.amazonaws.com d1gwclp1pmzk26.cloudfront.net d25wh3ilibgxb0.cloudfront.net contactuswidget.appspot.com stats.g.doubleclick.net *.log.optimizely.com *.intercomcdn.com *.intercomassets.com *.intercomusercontent.com cdn.ckeditor.com www.google.be *.inspectlet.com *.stripe.com pbs.twimg.com *.chiens-chats.be *.toutoublog.com *.gralon.net *.seniorsavotreservice.com *.ldh.be cluster015.ovh.net ss42phpnet.phpnet.org s3-eu-west-1.amazonaws.com faqbot.co www.faqbot.co listminut.zendesk.com p3.zdusercontent.com *.fbsbx.com
media-src https: 'self' d3sjx7m1rsw5t2.cloudfront.net js.intercomcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' d3sjx7m1rsw5t2.cloudfront.net cdnjs.cloudflare.com cdn.ckeditor.com cdn.jsdelivr.net ajax.cloudflare.com code.jquery.com code.highcharts.com js-agent.newrelic.com bam.nr-data.net connect.facebook.net my.clickdesk.com d1gwclp1pmzk26.cloudfront.net d3dy5gmtp8yhk7.cloudfront.net clickdeskvisitors.appspot.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.google.com *.googleapis.com *.hotjar.com *.optimizely.com *.intercom.io js.intercomcdn.com *.stripe.com cdn.inspectlet.com platform.twitter.com graph.facebook.com talkgadget.google.com d37gvrvc0wt4s1.cloudfront.net www.google.be faqbot.co www.faqbot.co static.criteo.net widget.criteo.com dis.eu.criteo.com sslwidget.criteo.com www.googletagmanager.com
style-src 'self' fonts.googleapis.com 'unsafe-inline' code.jquery.com cdnjs.cloudflare.com d3sjx7m1rsw5t2.cloudfront.net d1gwclp1pmzk26.cloudfront.net cdn.ckeditor.com *.stripe.com maxcdn.bootstrapcdn.com *.googletagmanager.com"
script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com 'unsafe-inline'
style-src 'self' https://fonts.googleapis.com https://optimize.google.com 'unsafe-inline'"
"font-src 'self' fonts.gstatic.com p.typekit.net fonts.typekit.net use.typekit.net data:
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: http://download.deltadna.net *.deltadna.net ajax.googleapis.com animate.adobe.com use.edgefonts.net checkout.stripe.com deltadna.freshdesk.com p.typekit.net fonts.googleapis.com use.typekit.net www.googletagmanager.com s3.amazonaws.com api.status.io fonts.gstatic.com www.google-analytics.com https://www.google.com https://www.gstatic.com
script-src 'self' 'unsafe-inline' https://www.google-analytics.com/ https://connect.facebook.net/ https://www.googletagmanager.com https://maps.googleapis.com/ https://fonts.googleapis.com/ code.jquery.com https://ssl.google-analytics.com https://www.youtube.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://maps.googleapis.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.stalbert.ca https://addsearch.com https://s3.amazonaws.com https://*.arcgis.com https://*.arcgisonline.com https://*.ctctcdn.com https://*.facebook.net https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.googlecode.com https://*.gstatic.com https://*.googletagmanager.com https://assets.ca.recollect.net https://api.recollect.net https://recollect.net https://*.searchcdn.com https://*.typekit.net https://widget.twnmm.com
style-src 'self' 'unsafe-inline' https://*.stalbert.ca https://*.addsearch.com https://*.arcgis.com https://*.arcgisonline.com https://*.cloudfront.net https://*.ctctcdn.com https://*.google.com https://*.googleapis.com https://cdn-images.mailchimp.com https://assets.ca.recollect.net https://recollect.a.ssl.fastly.net https://recollect.net https://widget.twnmm.com
img-src 'self' data: https://*.stalbert.ca https://addsearch.com https://*.addsearch.com https://*.arcgis.com https://*.arcgisonline.com  https://*.cloudfront.net https://*.facebook.com https://*.google.ca https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://assets.ca.recollect.net https://api.recollect.net https://recollect.a.ssl.fastly.net https://recollect-images.global.ssl.fastly.net https://recollect.net https://widget.twnmm.com https://*.typekit.net
font-src 'self' data: https://*.stalbert.ca https://*.arcgis.com https://recollect.a.ssl.fastly.net https://*.gstatic.com https://assets.ca.recollect.net https://recollect.net https://*.typekit.net
frame-src 'self' https://10.20.0.125 https://*.arcgis.com https://cosa1861.ca  https://*.cosa1861.ca https://environment.alberta.ca https://*.google.ca https://*.google.com https://*.granicus.com https://*.legistar.com https://pbtech.org https://assets.ca.recollect.net https://api.recollect.net https://recollect.net https://seeclickfix.com https://monitoringpublic.solaredge.com https://*.stalbert.ca https://live.tourdash.com https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com
"default-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
script-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
connect-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
font-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
img-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
child-src http: https: data: 'self' 'unsafe-inline' 'unsafe-eval'
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thoughtco.com *.qa.aws.thoughtco.com atlas.thoughtco.com atlas.local.thoughtco.com"
"frame-ancestors 'self' amazon.co.jp *.amazon.co.jp chrome-extension://*"
script-src 'self' 'unsafe-inline' 'unsafe-eval' dpm.demdex.net *.telus.com
img-src https: data: 'self' www.google-analytics.com
script-src 'self' www.google-analytics.com browser-update.org 'sha256-gfo1p3m/lnelwnozybaa1ighzud/lcltfdyv21kx3oa=' 'sha256-8itbiciuugzmgmqn4aulhnuljchx4mrwvw3fvzwegfi=' 'sha256-cjvhfly1gckhu4herguvmxw4yxxm0fa7lcxwvai4/zg=' 'sha256-qmkgaogqdt0cqokijv2ofxd9govwwef0kuszjgpnakk=' 'sha256-ez6k8htkl2zvaiuqz/w2at6ngjlpv8tbq3ebqxy4aru=' 'sha256-bnoj3se9idthbty8bb+indtekb7nih6vrgp6ktdl3w8=' 'sha256-fcwnm+92/pztvdm+ybtx4a+j59bxqxvcqyxelux/hoc=' 'sha256-odsk2nsbnev8oifekvxmko9artphs6kd7283snfhzam='
style-src https: 'self' 'unsafe-inline' netdna.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com http://*.force.com https://*.force.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.usabilla.com https://*.usabilla.com http://api.filepicker.io https://api.filepicker.io https://www.pingvp.com https://pingmediavod.download.kpnstreaming.nl https://s.ytimg.com https://www.youtube.com https://youtu.be http://*.cookiebot.com https://*.cookiebot.com
img-src data: 'self' https://www.pingvp.com http://www.google-analytics.com http://cdn.guidion.com https://cdn.guidion.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://images.contentful.com https://images.ctfassets.net http://*.cloudfront.net https://*.cloudfront.net http://*.usabilla.com https://*.usabilla.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.pingvp.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.cloudfront.net https://*.cloudfront.net
font-src 'self' http://cdn.guidion.com https://cdn.guidion.com https://fonts.gstatic.com
frame-src 'self' http://*.cookiebot.com https://*.cookiebot.com http://*.force.com https://*.force.com http://*.salesforce.com https://*.salesforce.com https://dialog.filepicker.io https://www.filepicker.io https://www.youtube.com https://youtu.be
"font-src https://sxt.cdn.skype.com https://fonts.gstatic.com https://www.progreso.com.do data:
script-src https://www.progreso.com.do https://maps.googleapis.com https://www.gstatic.com https://www.google.com/recaptcha/api.js https://www.googletagmanager.com https://www.google-analytics.com http://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com.do 'unsafe-inline' 'unsafe-eval'
img-src https://www.progreso.com.do https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net data:
"default-src 'self' *.google.com *.facebook.net *.googleadservices.com *.mixpanel.com *.disqus.com *.google.com *.livechatinc.com *.atlantic.net *.addthis.com *.optimizely.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3.amazonaws.com/cdn.knightlab.com/ *.google.com *.mxpnl.com *.googleadservices.com *.mixpanel.com *.disquscdn.com https://ajax.cloudflare.com/cdn-cgi/ https://s2.amazonaws.com/cdn.knightlab.com/libs/timeline/latest/js/ *.twitter.com *.ads-twitter.com *.linkedin.com *.facebook.com *.api.twitter.com *.atlantic.net *.iljmp.com *.addthis.com *.optimizely.com *.livechatinc.com https://libs.a2zinc.net/common/js/10.6.0.0/a2zwidget.js *.woopra.com *.googleapis.com *.clicky.com *.getclicky.com https://s.adroll.com https://d.adroll.com https://www.google-analytics.com https://s.adroll.com/j/roundtrip.js https://static.getclicky.com/js https://www.googletagmanager.com/ *.disqus.com https://a.disquscdn.com/embed.js https://maxcdn.bootstrapcdn.com/bootstrap/3.3.2/js/bootstrap.min.js https://www.gstatic.com
img-src 'self' data: https://t.co/ *.googleadservices.com *.google.com *.facebook.net *.wikimedia.org *.kiosked.com *.smartadserver.com *.lijit.com *.admaym.com *.pubmatic.com *.adtechus.com *.swid.switchads.com *.gumgum.com *.doubleclick.net *.openx.net *.disquscdn.com https://a.disquscdn.com/next/embed/assets/img/loader-bg.83a51a23e5c47337475113016b8fb0de.png https://s3.amazonaws.com/cdn.knightlab.com/libs/timeline/latest/css/ *.t.co *.google.com *.googleapis.com *.addthis.com *.optimizely.com *.gstatic.com *.getclicky.com *.googleusercontent.com *.livechatinc.com https://secure.adnxs.com https://ads.yahoo.com https://x.bidswitch.net https://ib.adnxs.com https://analytics.twitter.com https://idsync.rlcdn.com https://d.adroll.com https://www.facebook.com https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://pixel.sitescout.com https://ssl.gstatic.com *.gravatar.com *.disqus.com data *.disqus.com
style-src 'self' 'unsafe-inline' https://s3.amazonaws.com/cdn.knightlab.com/libs/timeline/latest/css/ *.google.com *.getclicky.com *.optimizely.com https://fonts.googleapis.com https://a.disquscdn.com https://use.typekit.net/ https://maxcdn.bootstrapcdn.com/bootstrap/3.3.2/css/bootstrap-theme.min.css https://maxcdn.bootstrapcdn.com/bootstrap/3.3.2/css/bootstrap.min.css https://fonts.googleapis.com
frame-src 'self' *.doubleclick.net *.youtube.com *.addthis.com https://libs.a2zinc.net *.optimizely.com http://status.atlantic.net *.livechatinc.com https://www.google.com https://disqus.com
font-src 'self' data: *.livechatinc.com *.googleusercontent.com *.optimizely.com https://fonts.gstatic.com
connect-src 'self' https://www.google-analytics.com https://maps.google.com https://secure.velocify.com
img-src 'self' data: https://nlcloans.com https://nlcloans.sharepoint.com https://www.google-analytics.com https://stats.g.doubleclick.net https://scontent-ort2-1.cdninstagram.com https://www.google.com https://images.nlcapp.com https://content.nlcapp.com https://maps.gstatic.com https://maps.googleapis.com"
"default-src https: 'self' pics.getynet.com fonts.googleapis.com ajax.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net connect.facebook.net staticxx.facebook.com facebook.com data: 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://api.salesfeed.com https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:3101 *.google.com *.google.ru *.google.de *.google.co.uk *.google.com.ua *.google.fr *.google.nl *.google.ie *.google.by *.google.lt *.google.pl *.googletagmanager.com *.google-analytics.com *.googleadservices.com yandex.ru yastatic.net *.yandex.ru *.yandex.net *.jivosite.com *.ravenjs.com *.nr-data.net *.newrelic.com *.g.doubleclick.net *.criteo.net *.criteo.com
style-src blob: data: 'self' 'unsafe-inline' yandex.ru yastatic.net *.yandex.ru *.yandex.net *.foodfox.ru *.cloudflare.com
font-src 'self' fonts.gstatic.com yastatic.net *.yandex.net
connect-src wss: 'self' localhost:3101 *.foodfox.ru *.jivosite.com *.yandex.ru *.yandex.net *.googlesyndication.com www.google-analytics.com *.nr-data.net"
"frame-ancestors http://www.vistaprint.se https://www.vistaprint.se http://vistaprint.se https://vistaprint.se
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  eval *.google.ru *.googletagservices.com http://*.yandex.ru *.yandex.ru yandex.ru *.yandex.kz *.google.co.nz *.google.com.af *.google.com.kw *.google.com.ng *.google.co.za *.google.si *.google.co.th *.google.com *.yandex.fr *.yandex.ua  *.g.doubleclick.net *.google.com.br *.google.jo *.google.co.jp *.google.com.om *.google.com.lb *.google.com.eg *.google.com.au *.google.sk *.google.hr *.google.ie *.google.tm *.google.no *.google.pt *.google.nl *.google.at *.google.se *.google.ro *.google.bg *.google.com.ph *.google.ge *.google.fi *.google.md *.google.co.uk *.google.ae *.google.cz *.google.es *.google.hu *.google.co.uz *.google.az *.google.it *.google.ee *.google.co.il *.google.kz *.google.kg *.google.de *.google.pl *.google.lv *.google.co.kr *.google.com.tr ymetrica1.com *.google.ca *.google.fr  www.instagram.com www.instagram.com *.google.com.ua *.google.com.tj *.google.lu *.google.ch *.google.lt *.google.com.sg *.google.me *.google.com.qa *.google.gr *.google.rs *.google.com.cy *.google.co.in *.google.be *.google.com.hk ymetrica.com *.webvisor.org *.googleapis.com yastatic.net *.yastatic.net yandex.st *.yandex.net *.mail.ru cdn.api.twitter.com api.facebook.com *.facebook.net vk.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.googlesyndication.com *.g.doubleclick.net *.googletagmanager.com googletagmanager.com vk.com *.googlesyndication.com apis.google.com *.gstatic.com login.vk.com *.facebook.com *.api.twitter.com *.twitter.com *.odnoklassniki.ru ok.ru *.facebook.com *.instagram.com phdt.ru i9d.ru *.google.com *.google.com *.ampproject.org
font-src 'self' *.gstatic.com gstatic.com *.googleapis.com *.bootstrapcdn.com *.yandex.ru data:
object-src 'self' http://www.youtube.com *.googlesyndication.com youtube.com *.youtube.com
frame-src 'self' *.yastatic.net yandex.ru *.youtube-nocookie.com *.webvisor.org *.g.doubleclick.net *.yandex.ru ymetrica1.com yastatic.net *.yandexadexchange.net yandexadexchange.net *.instagram.com *.youtube.com youtube.com *.g.doubleclick.net *.google.com
img-src 'self' *.yandex.ru *.yandex.fr *.webvisor.org mc.webvisor.org *.yadro.ru *.ytimg.com *.youtube.com http://icellulite.com http://*.ytimg.com *.googlesyndication.com yastatic.net *.mds.yandex.net *.yandex.net *.mail.ru data:
"script-src 'self' https://tatsumaki.xyz https://discordapp.com https://oss.maxcdn.com https://www.google-analytics.com 'unsafe-inline'
script-src bam.nr-data.net js-agent.newrelic.com *.cloudfront.net *.config.parsely.com *.cloudfront.net appboycdn.com www.google-analytics.com bat.bing.com connect.facebook.net jssdkcdns.mparticle.com www.googleadservices.com doubleclick.net secure.adnxs.com *.cloudfront.net platform.twitter.com blob: data: 'self' 'unsafe-inline' 'unsafe-eval' *
style-src *.cloudfront.net maxcdn.bootstrapcdn.com data: blob: 'unsafe-inline' *
img-src 'self' ssl.cf2.rackcdn.com bat.bing.com blob: data: *
child-src staticxx.facebook.com platform.twitter.com blob: data: *
frame-src 'self' data: adservice.google.com adservice.google.cz pagead2.googlesyndication.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.facebook.com *.youtube.com *.google.com *.twitter.com *.imedia.cz *.svet-zdravi.cz *.visualwebsiteoptimizer.com *.hotjar.com www.pestryjidelnicek.cz *.onesignal.com onesignal.com www.pestryjedalnicek.sk
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: imgpj.com *.visualwebsiteoptimizer.com adservice.google.cz pagead2.googlesyndication.com *.googleapis.com *.facebook.net *.twitter.com *.google.com partner.frankmikes.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.imedia.cz *.hotjar.com *.google-analytics.com www.googleadservices.com *.zopim.com trackcmp.net *.formisimo.com *.svet-zdravi.cz *.gstatic.com *.onesignal.com onesignal.com cdn.jsdelivr.net
connect-src 'self' wss: ws: *.googleapis.com adservice.google.cz pagead2.googlesyndication.com partner.frankmikes.com *.hotjar.com *.zopim.com *.googlesyndication.com *.doubleclick.net *.google-analytics.com *.formisimo.com *.svet-zdravi.cz *.doubleclickadexchange.net *.facebook.com *.facebook.net *.onesignal.com onesignal.com
style-src 'self' 'unsafe-inline' imgpj.com *.googleapis.com adservice.google.cz pagead2.googlesyndication.com maxcdn.bootstrapcdn.com *.svet-zdravi.cz lp.fitomat.cz *.onesignal.com onesignal.com fitomat.sk naturomat.cz naturomat.sk
font-src 'self' data: imgpj.com *.zopim.com fonts.gstatic.com adservice.google.cz pagead2.googlesyndication.com maxcdn.bootstrapcdn.com onesignal.com fonts.googleapis.com *.googlesyndication.com *.doubleclick.net *.onesignal.com onesignal.com *.skype.com
object-src 'self' partner.frankmikes.com adservice.google.cz pagead2.googlesyndication.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' analytics.ethicspoint.eu
script-src 'self' 'unsafe-eval' 'unsafe-inline' analytics.ethicspoint.eu *.navexglobal.com *.pendo.io *.truste.com *.appdynamics.com
img-src 'self' data: analytics.ethicspoint.eu *.truste.com *.pendo.io
frame-src 'self' 'unsafe-eval' analytics.ethicspoint.eu *.navexglobal.com *.policytech.com
"frame-ancestors https://idsrv.fanball.com https://www.cdmsports.com https://cdmsports.com https://www.bb10s.com https://playnfbkc.sportshubtech.com https://playnfbc.shgn.com https://playnffc.shgn.com https://nfbcforums.shgn.com"
"frame-src *.laquotavincente.it push.laquotavincente.it *.googlesyndication.com *.betfair.com *.adform.net *.rubiconproject.com *.twitter.com *.facebook.com *.addthis.com *.casalemedia.com *.google.com *.bet365affiliates.com *.youtube.com *.jwpsrv.com *.serving-sys.com *.appspot.com *.doubleclick.net *.gssprt.jp *.flashtalking.com *.criteo.com *.2mdn.net *.mathtag.com *.a3cloud.net *.spongecell.com *.betfair.com
child-src 'self' www.facebook.com www.youtube.com vk.com yastatic.net api-maps.yandex.ru google.com www.google.com login.vk.com connect.ok.ru connect.facebook.net staticxx.facebook.com
frame-src 'self' extra.egrp365.ru www.facebook.com www.youtube.com vk.com yastatic.net api-maps.yandex.ru google.com www.google.com login.vk.com connect.ok.ru connect.facebook.net staticxx.facebook.com onesignal.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' widgets.egrp365.ru extra.egrp365.ru yastatic.net vk.com m.vk.com login.vk.com connect.ok.ru connect.facebook.net yandex.ru api-maps.yandex.ru www.google-analytics.com mc.yandex.ru cdn.mxpnl.com code.jivosite.com www.gstatic.com www.google.com cdn.onesignal.com onesignal.com http://188.166.98.145 https://pkk5.rosreestr.ru https://dev.virtualearth.net
style-src 'unsafe-inline' 'self' egrp365.ru extra.egrp365.ru api-maps.yandex.ru fonts.googleapis.com onesignal.com
font-src data: 'self' egrp365.ru fonts.gstatic.com fonts.googleapis.com themes.googleusercontent.com
connect-src https: http://*.rosreestr.ru wss://*.jivosite.com http://127.0.0.1:4059 'self' egrp365.ru wss://egrp365.ru
"default-src http: https: wss://*.zopim.com data: blob: 'self' 'unsafe-inline' 'unsafe-eval'"
default-src 'unsafe-inline' 'self' https://*.trackjs.com https://*.cloudfront.net https://*.dcrworkforce.net https://dcrworkforce.net
script-src 'unsafe-inline' 'unsafe-eval' https://*.dcrworkforce.net https://dcrworkforce.net https://*.trackjs.com
font-src https://*.cloudflare.com https://*.bootstrapcdn.com https://*.gstatic.com  https://*.dcrworkforce.net https://dcrworkforce.net
style-src 'unsafe-inline' https://*.cloudflare.com https://*.bootstrapcdn.com https://*.dcrworkforce.net  https://dcrworkforce.net https://*.googleapis.com/
img-src 'self' https://*.amazonaws.com https://*.cloudfront.net https://*.dcrworkforce.net https://dcrworkforce.net https://*.trackjs.com data:
"default-src https://apoonline.org:443 https://www.apoonline.org:443 https://*.wepay.com https://*.youtube.com http://npzonline.org http://www.npzonline.org https://*.google.com https://*.paypal.com https://*.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://cdn.rawgit.com https://*.twitter.com http://*.twitter.com
style-src 'unsafe-inline' https://apoonline.org:443 https://www.apoonline.org:443 http://npzonline.org http://www.npzonline.org http://fonts.googleapis.com https://fonts.googleapis.com https://cdn.datatables.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://maxcdn.bootstrapcdn.com
script-src https://apoonline.org https://www.apoonline.org http://npzonline.org http://www.npzonline.org https://*.zopim.com https://*.zdassets.com https://*.wepay.com https://*.googleadservices.com https://*.facebook.net https://downloads.mailchimp.com https://*.twitter.com http://*.twitter.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://cdn.rawgit.com https://*.google.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://malsup.github.io http://malsup.github.io 'unsafe-inline' 'unsafe-eval' blob:
frame-src https://apoonline.org:443 https://www.apoonline.org:443 http://npzonline.org https://*.wepayapi.com http://www.npzonline.org https://*.twitter.com https://*.cincopa.com/ http://*.twitter.com http://*.wepay.com https://*.wepay.com https://*.facebook.net https://*.facebook.com https://*.google.com https://*.youtube.com
connect-src https://apoonline.org:443 https://www.apoonline.org:443 http://npzonline.org http://www.npzonline.org wss://*.zopim.com https://*.zopim.com https://*.zipim.com https://*.zdassets.com https://*.zendesk.com https://*.google-analytics.com https://*.doubleclick.net https://*.intercom.io wss://*.intercom.io wss:
font-src https://apoonline.org:443 https://www.apoonline.org:443 http://npzonline.org http://www.npzonline.org https://*.zopim.com https://*.gstatic.com http://*.gstatic.com https://maxcdn.bootstrapcdn.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.googleadservices.com http://weather.yahooapis.com https://weather.yahooapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com https://connect.facebook.net
img-src 'self' data: https://www.facebook.com https://www.google.ca https://www.google.com http://px.demdex.net https://px.demdex.net http://flyhamilton.ca http://pixel.sitescout.com/ https://stats.g.doubleclick.net http://lancheck.net http://*.gravatar.com https://maps.googleapis.com https://*.gstatic.com http://*.google-analytics.com https://*.google-analytics.com https://s-static.ak.facebook.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://*.gstatic.com http://*.gstatic.com
font-src 'self' data: https://*.gstatic.com http://*.gstatic.com https://themes.googleusercontent.com
frame-src https://www.google.com https://www.google.ca https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.fls.doubleclick.net/ https://vortex.flyhamilton.ca http://vortex.flyhamilton.ca http://hamiltonairport.siraza.net https://www.facebook.com https://s-static.ak.facebook.com http://*.youtube.com https://*.youtube.com
connect-src http://flyhamilton.ca https://flyhamilton.ca http://*.jquery.com https://www.facebook.com
"default-src 'self' blob: https://stats.tele-task.de:443 https://www10-fms.hpi.uni-potsdam.de:443
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://stats.tele-task.de:443
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://salestechnologylab.com:443 https://*.salestechnologylab.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' api.energielabel-erklaert.de static.etracker.com code.etracker.com www.etracker.de www.energie-effizienz-experten.de customers.lmis.de 'unsafe-eval' 'unsafe-inline' *.jwpcdn.com
connect-src 'self' *.streamfarm.net *.deutschland-machts-effizient.de *.etracker.de
style-src 'self' api.energielabel-erklaert.de 'unsafe-inline' *.jwpcdn.com
frame-src *.deutschland-machts-effizient.de *.energielabel-erklaert.de *.energie-effizienz-experten.de customers.lmis.de:443
"frame-ancestors 'self' planar.com *.planar.com leyard.com *.leyard.com
script-src 'self' *.transunion.com *.addthis.com *.vols7feed.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.mutualofomaha.com *.mutualofomahabank.com cdn.mutualofomaha.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net use.typekit.net p.typekit.net
form-action 'self' https://*.jinn.vn https://www.facebook.com/tr/ https://*.facebook.net
font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com
frame-src 'self' https://*.jinn.vn https://*.facebook.com https://*.facebook.net https://www.youtube.com https://*.google.com
img-src 'self' data: https://*.gstatic.com https://secure.gravatar.com https://stats.g.doubleclick.net https://*.jinn.vn https://www.facebook.com https://www.google.com.vn https://www.google.com https://maps.googleapis.com https://maps.gstatic.com https://*.fbcdn.net https://www.google-analytics.com
connect-src 'self' https://yoast.com https://*.jinn.vn wss://*.jinn.vn
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://*.google.com https://stats.g.doubleclick.net https://ssl.google-analytics.com https://connect.facebook.net https://apis.google.com https://bitrix.info https://intranet.jinn.vn https://*.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://*.googleapis.com https://*.fbcdn.net
style-src 'self' 'unsafe-inline' https://*.google.com https://cdnjs.cloudflare.com https://*.jinn.vn https://www.gstatic.com https://fonts.googleapis.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: dadu.ru *.dadu.ru https://dadu.ru https://www.dadu.ru japancar.ru www.japancar.ru static.japancar.ru *.static.japancar.ru https://greenparts.ru https://*.greenparts.ru greenpart.ru *.greenparts.ru wiweb.ru *.wiweb.ru qx9.ru *.qx9.ru jc9.ru *.jc9.ru justcommunication.ru www.justcommunication.ru *.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net *.googleapis.com *.gstatic.com yandex.ru *.yandex.ru https://yandex.ru https://*.yandex.ru https://mc.yandex.ru yandex.net *.yandex.net https://yandex.net https://*.yandex.net counter.yadro.ru icq.com www.icq.com skype.com www.skype.com youtube.com www.youtube.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob:
script-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:
"frame-ancestors 'self' https://webvisor.com http://webvisor.com https://sl-ira.bitrix24.ua"
"default-src https: data: 'unsafe-inline' 'unsafe-eval' 'self'
img-src https: 'self' data: http://www.google-analytics.com https://notify.bugsnag.com https://www.gravatar.com https://i0.wp.com/ 'unsafe-inline'
frame-src 'self' amplifychange.fr *.amplifychange.fr amplifychange.org *.amplifychange.org *.facebook.com *.twitter.com http://www.youtube.com https://www.youtube.com https://docs.google.com https://www.google.com 'unsafe-inline'
script-src 'self' 'unsafe-eval' ssl.google-analytics.com d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net *.googletagmanager.com dev.visualwebsiteoptimizer.com heatmap.visualwebsiteoptimizer.com 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com d5phz18u4wuww.cloudfront.net https://tagmanager.google.com https://www.googleadservices.com https://sjs.bizographics.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://www.google-analytics.com
style-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net *.googleapis.com app.vwo.com 'unsafe-inline' https://tagmanager.google.com
frame-src *.youtube.com *.youtube-nocookie.com app.vwo.com *.googletagmanager.com https://player.vimeo.com
font-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net *.gstatic.com app.vwo.com
img-src 'self' ssl.google-analytics.com stats.g.doubleclick.net d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net *.visualwebsiteoptimizer.com *.googleapis.com data: *.google.com.tr *.google.com https://ssl.gstatic.com https://www.gstatic.com www.google.co.uk https://www.google-analytics.com
"frame-ancestors 'self' *.yourpayroll.com.au *.qbo.intuit.com *.intuit.com secure.employmenthero.com
script-src 'self' img.onehash.com browser.sentry-cdn.com www.google.com www.gstatic.com *.facebook.net *.cloudflare.com www.google-analytics.com player.twitch.tv *.googleapis.com cvp.twitch.tv www.youtube.com f0a903cc-ef01-4bb4-82d5-d3098aed1fdb.curacao-egaming.com *.userengage.com 67p6hmd3.fnswb.com 'nonce-d73d83e8-ef7c-404f-92b2-3a8d4d166759'
connect-src 'self' img.onehash.com wss://*.onehash.com *.doubleclick.net www.youtube.com *.twitch.tv *.ttvnw.net api.mixpanel.com *.googleapis.com app.getsentry.com 8b750flw.jjysjnuego.com https://app.userengage.com wss://*.userengage.com https://api.giphy.com s.nethone.io 67p6hmd3.fnswb.com www.facebook.com
img-src 'self' data: www.facebook.com www.google-analytics.com *.doubleclick.net www.gstatic.com translate.google.com f0a903cc-ef01-4bb4-82d5-d3098aed1fdb.curacao-egaming.com *.userengage.com *.giphy.com https://unpkg.com
img-src https: data: blob: 'unsafe-inline'
media-src data: https: http://*.miisolutions.net:1935 http://c.brightcove.com https://brightcove.hs.llnwd.net https://secure.brightcove.com http://brightcove.vo.llnwd.net blob:
frame-ancestors http: https: 'self' http://library.uml.edu"
"default-src 'self' *.lvvwd.com *.youtube.com data:
style-src 'self' 'unsafe-inline' *.lvvwd.com *.juicer.io *.mqcdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net *.googleapis.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.lvvwd.com *.juicer.io *.digicert.com *.mqcdn.com *.google-analytics.com *.googleapis.com *.jwpcdn.com *.onefiserv.com *.gstatic.com *.google.com *.googletagmanager.com *.facebook.net https://sdks.shopifycdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net data:
connect-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.mapquestapi.com *.mapquest.com *.google-analytics.com *.googleapis.com *.gstatic.com *.doubleclick.net https://springs-preserve.myshopify.com *.cludo.com *.cludo.com.cdn.cloudflare.net data:
font-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.jwpcdn.com *.gstatic.com data:
frame-src 'self' *.onefiserv.com *.streamtext.net *.youtube.com *.google.com *.facebook.com data:
media-src 'self' *.lvvwd.com blob: data:
script-src apis.google.com *.google-analytics.com 'self' 'unsafe-inline'
"default-src 'self' 'unsafe-inline' https://materials.8card.net https://assets.8card.net
child-src 'self' www.googletagmanager.com b.yjtag.jp js.fout.jp www.google.com www.google.co.jp www.facebook.com static.ak.facebook.com s-static.ak.facebook.com staticxx.facebook.com googleads.g.doubleclick.net www.youtube.com bid.g.doubleclick.net js.stripe.com materials.8card.net
connect-src 'self' *.8card.net graph.facebook.com bam.nr-data.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' stats.g.doubleclick.net www.googletagmanager.com s.yjtag.jp yjtag.yahoo.co.jp y.nakanohito.jp connect.facebook.net fonts.googleapis.com www.google-analytics.com s.thebrighttag.com s.yimg.jp b92.yahoo.co.jp b97.yahoo.co.jp platform.twitter.com graph.facebook.com js-agent.newrelic.com bam.nr-data.net www.googleadservices.com atm.im-apps.net cdn.smartnews-ads.com js.stripe.com googleads.g.doubleclick.net www.google.com www.google.co.jp tagmanager.google.com static.ads-twitter.com analytics.twitter.com d-cache.microad.jp cdn.treasuredata.com aid.send.microad.jp in.treasuredata.com acq-3pas.admatrix.jp pi.pardot.com *.8card.net assets.8card.net:443
style-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com fonts.googleapis.com materials.8card.net assets.8card.net assets.8card.net:443"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' ws://localhost:3000 *.postmarkapp.com fonts.googleapis.com app.vwo.com *.cloudfront.net wildbit.sinter-collect.com createsend.com wildbit.createsend.com js.createsend1.com *.createsend.com *.typekit.net fast.fonts.net fast.fonts.com *.helpscout.net *.googletagmanager.com *.googleadservices.com  *.google-analytics.com *.google.com *.visualwebsiteoptimizer.com *.twitter.com *.ads-twitter.com t.co *.facebook.net *.hs-analytics.net *.fullstory.com *.gstatic.com *.getsitecontrol.com *.helpscoutdocs.com *.github.io *.twimg.com *.vimeo.com *.youtube.com api.usemessages.com tag.rightmessage.com js.hs-scripts.com *.wistia.com *.wistia.net *.akamaihd.net src.litix.io data: blob: https://api.keen.io https://*.rightmessage.com
"style-src www.digicode.hu cdn1.digicode.hu system.digicode.hu *.google.com *.youtube.com *.googleapis.com *.facebook.com 'unsafe-inline'
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.verywellfit.com *.qa.aws.verywellfit.com atlas.verywellfit.com atlas.local.verywellfit.com https://specials.verywellfit.com"
"connect-src 'self' wss://*.wire.com wss://*.zinfra.io https://wire.com https://*.wire.com https://*.zinfra.io https://api.mapbox.com https://events.mapbox.com https://*.tiles.mapbox.com https://wire.innocraft.cloud
font-src 'self' https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com
frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://*.marketo.com https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com https://*.youtube.com https://*.youtube-nocookie.com
img-src 'self' data: blob: images.ctfassets.net https://*.marketo.com https://wire.innocraft.cloud https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://wire.com https://*.wire.com https://*.zinfra.io https://*.youtube.com https://*.ytimg.com https://*.ggpht.com
prefetch-src 'self' https://wire.innocraft.cloud https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com
script-src 'self' 'unsafe-inline' blob: https://wire.innocraft.cloud https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://*.marketo.com https://wire.com https://*.wire.com https://*.zinfra.io https://*.youtube.com https://*.ytimg.com https://*.ggpht.com
style-src 'self' 'unsafe-inline' https://*.marketo.com https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com"
script-src 'self' http: https: 'unsafe-inline' 'unsafe-eval'
style-src 'self' http: https: 'unsafe-inline'
"default-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com
img-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com data:
script-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com 'unsafe-inline'
style-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.com/ https://ajax.googleapis.com/ https://connect.facebook.net/ \t\thttps://www.youtube.com/ https://s.ytimg.com/ https://cdn.printfriendly.com/ https://ds-4047.kxcdn.com/ https://*.truehits.in.th/ \t\thttps://www.googletagmanager.com/ https://www.google-analytics.com/
connect-src 'self' https://clients6.google.com/ https://graph.facebook.com/ https://www.google-analytics.com/
img-src 'self' http://*.mtec.or.th/ https://secure.gravatar.com/ https://www.facebook.com/ https://web.facebook.com/ https://img.youtube.com/ \t\thttps://cdn.printfriendly.com/ https://*.truehits.in.th/ http://*.truehits.in.th/ https://www.google-analytics.com/ https://i.ytimg.com/ \t\thttps://stats.g.doubleclick.net/ data:
font-src 'self' https://fonts.gstatic.com/ https://use.fontawesome.com/ https://at.alicdn.com/ data:
style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' https://use.fontawesome.com/
frame-src 'self' https://*.mtec.or.th/ https://*.facebook.com/ https://www.youtube.com/ https://*.google.com/ \t\thttps://player.vimeo.com/
"frame-ancestors 'self' http: https: *.simplywall.st simplywall.st
connect-src wss: 'self' files.rapidlms.com *.newrelic.com *.nr-data.net *.google.com *.google.ca *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.stripe.com *.ably.io *.ably-realtime.com *.statushub.io *.hellomedian.com *.facebook.com *.juicer.io *.hotjar.com *.reviews.io *.tawk.to *.hubspot.com *.learnerverified.com *.optmnstr.com
img-src 'self' data: d5vbshbduovn.cloudfront.net d16aqe2hb8mnsq.cloudfront.net *.google.com *.google.ca *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.stripe.com *.gravatar.com *.newrelic.com *.nr-data.net s3.amazonaws.com *.bing.com *.twimg.com *.facebook.net *.facebook.com *.fbcdn.net *.imgur.com *.livechatinc.com *.juicer.io *.rumiview.com *.hotjar.com *.tawk.to
script-src 'self' 'unsafe-inline' d5vbshbduovn.cloudfront.net use.fontawesome.com *.google.com *.google.ca *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.stripe.com *.ably.io *.ably-realtime.com *.newrelic.com *.nr-data.net *.hotjar.com *.facebook.net *.facebook.com 'unsafe-eval' *.bing.com *.hellobar.com *.juicer.io *.reviews.io *.livechatinc.com *.hellomedian.com *.visitor-track.com *.rumiview.com *.adobedtm.com blob: www.bugherd.com *.tawk.to *.jsdelivr.com *.leadquizzes.com *.learnerverified.com *.optmnstr.com *.googleapis.com *.googletagservices.com *.googletagmanager.com
style-src 'self' 'unsafe-inline' d5vbshbduovn.cloudfront.net use.fontawesome.com fonts.googleapis.com *.juicer.io tagmanager.google.com
"frame-src https://*.facebook.com  http://*.facebook.com https://*.jollybuy.com http://*.jollybuy.com https://mfme.map.com.tw https://*.youtube.com
frame-ancestors https://*.facebook.com  http://*.facebook.com  https://*.jollybuy.com http://*.jollybuy.com http://admin.jollybuy.com"
img-src 'self' data: blob: filesystem: https://www.youtube.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com *.amazonaws.com *.google.com http://ps.w.org http://i0.wp.com http://i1.wp.com *.gravatar.com *.googleapis.com *.gstatic.com *.indexel.com https://www.google-analytics.com *.twitter.com *.twimg.com https://its.tradelab.fr https://ib.adnxs.com https://secure.adnxs.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com *.gstatic.com https://use.fontawesome.com *.fontawesome.com http://s7.addthis.com *.google.com *.googleapis.com www.google-analytics.com *.twitter.com https://cdn.syndication.twimg.com https://code.jquery.com http://maps.google.com https://maps.googleapis.com http://maps.googleapis.com https://cdn.tradelab.fr https://ib.adnxs.com https://its.tradelab.fr
style-src 'self' 'unsafe-inline' https://maps.googleapis.com https://fonts.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.twitter.com *.google.com *.jsdelivr.net
script-src 'self'  'unsafe-inline' 'unsafe-eval' *.googleapis.com http://bam.nr-data.net http://js-agent.newrelic.com *.exaltive.com https://f.vimeocdn.com https://jwpsrv.com *.google.com *.facebook.net *.qualtrics.com https://a248.e.akamai.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.com localhost:*
img-src 'self' *.googleapis.com *.gstatic.com data: *.ggpht.com
"frame-ancestors https://*.vrecards.com https://*.best3dmodel.com https://*.webvr360videos.com https://*.webvrtool.com"
img-src data: https://*.akb.ch https://*.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://*.doubleclick.net https://*.google.com
script-src 'unsafe-inline' 'unsafe-eval' https://*.akb.ch https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.ticketpark.ch https://*.google.com https://*.gstatic.com https://www.contovista.com https://www.newhome.ch
frame-src https://*.akb.ch https://*.cashgate.ch https://www.newhome.ch https://www.companymarket.ch https://b2c-stage.extranet.netcetera.biz/ https://b2c-prod.netcetera.ch https://www.youtube.com https://go.online-ident.ch https://*.ticketpark.ch https://go.test.idnow.de https://*.google.com https://*.gstatic.com https://mw.weaver.ch
style-src 'unsafe-inline' 'unsafe-eval' https://*.akb.ch https://fonts.googleapis.com
"frame-ancestors 'self' *.ubt.com ubt-beta.wealthcareportal.com ubt.wealthcareportal.com
script-src www.google-analytics.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' 'self' www.youtube.com
style-src 'unsafe-inline' 'self' fonts.googleapis.com www.gstatic.com cdnjs.cloudflare.com www.youtube.com
script-src http: https: *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com *.myqnapcloud.com *.myqnapcloud.cn 'unsafe-inline' 'unsafe-eval'
style-src http: https: *.myqnapcloud.com *.myqnapcloud.cn 'unsafe-inline'
connect-src http: https: *.myqnapcloud.com *.myqnapcloud.cn fcm.googleapis.com *.google.com"
"default-src 'self' https://www.yearone.com:443 * 'unsafe-inline' 'unsafe-eval'"
script-src 'unsafe-inline' 'unsafe-eval' blob: data: *.qwant.com *.kamoov.com
script-src 'self' c.mql5.com c.mql5.com trade.mql5.com www.mql5.com content.mql5.com content.mql5.com content.finteza.org search.mql5.com maps.googleapis.com maps.google.com mc.yandex.ru *.google-analytics.com stats.g.doubleclick.net connect.facebook.net www.facebook.com player.youku.com  'unsafe-inline' 'unsafe-eval'
style-src c.mql5.com fonts.googleapis.com player.youku.com 'unsafe-inline'
img-src 'self' msg1.mql5.dev msg1.mql5.com c.mql5.com c.mql5.com www.mql5.com content.mql5.com content.mql5.com content.finteza.org download.mql5.com charts.mql5.com www.metatrader5.com www.metatrader4.com www.metaquotes.net www.metaquotes.ru trade.mql5.com stat.mql5.com blob: *.tile.openstreetmap.org csi.gstatic.com maps.gstatic.com maps.google.com maps.googleapis.com chart.googleapis.com khms0.googleapis.com khms1.googleapis.com khms2.googleapis.com khms3.googleapis.com mc.yandex.ru *.google-analytics.com stats.g.doubleclick.net www.facebook.com connect.facebook.net
media-src 'self' msg1.mql5.dev msg1.mql5.com trade.mql5.com c.mql5.com
connect-src 'self' trade.mql5.com wss://msg1.mql5.dev https://msg1.mql5.dev wss://msg1.mql5.com wss://www.mql5.com https://msg1.mql5.com gwt1.mql5.com gwt2.mql5.com gwt3.mql5.com gwt4.mql5.com gwt5.mql5.com gwt6.mql5.com gwt7.mql5.com gwt8.mql5.com gwt9.mql5.com gwt10.mql5.com gwt11.mql5.com mc.yandex.ru *.google-analytics.com stats.g.doubleclick.net connect.facebook.net www.facebook.com
frame-src 'self' blob: trade.mql5.com content.mql5.com www.youtube.com player.youku.com c.mql5.com www.facebook.com mql5buy: mql4buy:
object-src 'self' blob: trade.mql5.com www.youtube.com player.youku.com c.mql5.com
child-src 'self' trade.mql5.com www.youtube.com player.youku.com c.mql5.com
script-src 'self' https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://maps.googleapis.com https://maps.gstatic.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com apis.google.com code.jquery.com maxcdn.bootstrapcdn.com www.google-analytics.com s.imgur.com cdnjs.cloudflare.com www.googletagmanager.com
img-src 'self' data: cdnjs.cloudflare.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.gstatic.com storage.googleapis.com
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com maxcdn.bootstrapcdn.com fast.fonts.net
font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com
frame-src player.vimeo.com imgur.com apis.google.com accounts.google.com
"default-src 'self' data: https://*.piratenpartei-bayern.de/ https://piratenpartei-bayern.de/
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://eddsyti-modules.xing-events.com/ https://*.piratenpartei-bayern.de/ https://piratenpartei-bayern.de/
style-src 'self' 'unsafe-inline' https://*.piratenpartei-bayern.de/ https://piratenpartei-bayern.de/
"font-src 'self' *.googleapis.com fonts.gstatic.com *.googleapis.com fonts.gstatic.com
img-src 'self' data: *.mittwaldserver.info *.vds.de *.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.google-analytics.com *.googleapis.com *.mittwaldserver.info *.vds.de
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com maxcdn.bootstrapcdn.com code.jquery.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' adverto.co *.google-analytics.com *.googleapis.com *.google.com code.jquery.com *.dropbox.com *.doubleclick.net  \tplatform.twitter.com *.googleadservices.com *.staticstuff.net"
script-src 'self' 'unsafe-inline' /js/* use.typekit.net/bau6zwr.js www.google-analytics.com ajax.googleapis.com
"default-src 'self' 'unsafe-inline' cdnjs.cloudflare.com code.jquery.com connect.facebook.net fast.fonts.net fonts.googleapis.com pccdelivery.net platform.twitter.com s3.amazonaws.com stats.g.doubleclick.net storage.googleapis.com www.google-analytics.com www.googletagmanager.com www.pccdelivery.net api.salesflare.com fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com platform.twitter.com connect.facebook.net www.googletagmanager.com cdnjs.cloudflare.com code.jquery.com connect.facebook.net pccdelivery.net s3.amazonaws.com storage.googleapis.com www.google-analytics.com www.googletagservices.com pccdelivery.net ad.doubleclick.net *.2mdn.net *.googlesyndication.com
style-src fast.fonts.net 'self' 'unsafe-inline' fonts.googleapis.com
connect-src 'self' api.salesflare.com stats.g.doubleclick.net www.pccdelivery.net
frame-src 'self' platform.twitter.com storage.googleapis.com www.googletagmanager.com *.2mdn.net *.googlesyndication.com
"img-src * data: content: https: *.googleapis.com
"default-src 'self'  'unsafe-inline' 'unsafe-eval' *
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.tripsavvy.com *.qa.aws.tripsavvy.com atlas.tripsavvy.com atlas.local.tripsavvy.com"
default-src 'self' *.0lik.ru 0lik.ru mc.yandex.ru
connect-src 'self' *.0lik.ru 0lik.ru *.mail.ru api.depositphotos.com mc.yandex.ru mc.yandex.ua https://*.yandex.ru syndication.twitter.com www.google-analytics.com https://yastatic.net https://login.vk.com
font-src 'self' data: *.0lik.ru 0lik.ru fonts.gstatic.com
frame-src 'self' 'unsafe-inline' about: https://vk.com vk.com *.youtube.com *.google.com https://st.yandexadexchange.net yastatic.net connect.ok.ru platform.twitter.com apis.google.com *.facebook.com accounts.google.com https://api.vk.com
img-src 'self' data: *.0lik.ru 0lik.ru vk.com *.depositphotos.com *.akamaihd.net *.yadro.ru *.mail.ru *.yandex.net mc.yandex.ru mc.yandex.ua *.rambler.ru www.google-analytics.com https://an.yandex.ru *.yandex.ru *.facebook.com *.twitter.com *.gstatic.com
media-src 'self' *.0lik.ru 0lik.ru *.akamaihd.net
object-src 'self' *.0lik.ru 0lik.ru about: stg.odnoklassniki.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.0lik.ru 0lik.ru *.akamaihd.net fotovramku.ru *.googleapis.com userapi.com vk.com stg.odnoklassniki.ru *.depositphotos.com st.mycdn.me yandex.st an.yandex.ru mc.yandex.ru mc.yandex.ua *.rambler.ru *.mail.ru www.google-analytics.com connect.ok.ru yastatic.net connect.facebook.net platform.twitter.com apis.google.com https://www.google.com *.google.com https://www.gstatic.com *.gstatic.com *.googletagmanager.com https://api.vk.com
style-src 'self' 'unsafe-inline' *.0lik.ru 0lik.ru *.akamaihd.net stg.odnoklassniki.ru st.mycdn.me *.depositphotos.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.net *.adroll.com *.gstatic.com *.addthis.com *.addthisedge.com *.bing.com *.feefo.com *.feefo.com/* *.google-analytics.com *.google.com *.googleapis.com *.jquery.com *.voicestar.com *.googletagmanager.com https://s7.addthis.com/js/300/addthis_widget.js *.trustpilot.com *.googleadservices.com *.google.co.uk *.ads-twitter.com *.twitter.com
style-src 'self' 'unsafe-inline' *.addthis.com *.addthisedge.com *.feefo.com *.google-analytics.com *.googleapis.com *.jquery.com
img-src 'self' 'unsafe-inline' 'unsafe-eval' * *.yahoo.com *.krxd.net *.w55c.net *.liadm.com *.adsrvr.org *.demdex.net *.amazon-adsystem.com *.pippio.com *.openx.net *.rlcdn.com *.bidswitch.net *.googletagmanager.com *.3lift.com *.taboola.com *.pubmatic.com *.facebook.com *.rubiconproject.com *.outbrain.com *.casalemedia.com *.adnxs.com *.advertising.com *.adroll.com *.addthis.com *.bing.com *.feefo.com *.google-analytics.com *.googleapis.com *.google.com *.google.co.uk *.marchex.io *.doubleclick.net data: http://*.gravatar.com
connect-src 'self' *.addthis.com *.feefo.com *.google-analytics.com *.doubleclick.net https://s7.addthis.com/js/300/addthis_widget.js *.trustpilot.com
font-src 'self' *.google.com *.googleapis.com *.gstatic.com data:
img-src 'self' data: https://www.googletagmanager.com http://secure.adnxs.com https://secure.adnxs.com http://*.linkedin.com https://*.linkedin.com http://*.gstatic.com https://*.gstatic.com https://*.google.it http://*.google.it https://*.google.com http://*.google.com https://www.google.pl http://www.google.pl http://*.googleadservices.com https://*.googleadservices.com http://*.doubleclick.net https://*.doubleclick.net http://*.facebook.com https://*.facebook.com http://*.google-analytics.com https://*.google-analytics.com
"default-src 'self' player.vimeo.com app.validic.com 'unsafe-eval'
img-src 'self' data: blob: dck0i7x64ch95.cloudfront.net app.validic.com www.edamam.com nyexercisedb.blob.core.windows.net content.motivationalliance.com
"default-src 'self' https://*.tealiumiq.com https://*.google.com https://*.google.de https://*.doubleclick.net https://*.optimizely.com https://www.google-analytics.com https://*.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.net https://java.com https://optimizely.s3.amazonaws.com https://tags.tiqcdn.com https://static-artifact.heg-cp.com https://cdn.polyfill.io https://www.google.com https://www.gstatic.com https://*.optimizely.com https://www.googleadservices.com https://bat.bing.com https://www.dwin1.com https://connect.facebook.net https://www.google-analytics.com ajax.googleapis.com https://*.twitter.com https://static.ads-twitter.com https://*.ampproject.org https://*.wsimg.com https://*.liveperson.net https://*.lpsnmedia.net
img-src 'self' 'unsafe-inline' https://java.com https://www.df.eu/ data: https://i.ytimg.com https://*.g.doubleclick.net https://bat.bing.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.de https://t.co https://*.multiscreensite.com
frame-src 'self' https://www.google.com https://*.optimizely.com https://*.facebook.com https://*.facebook.net www.youtube.com *.vimeo.com *.vimeocdn.com https://*.fls.doubleclick.net https://*.lpsnmedia.net
"connect-src https://*.peplink.com http://*.peplink.com https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net *.facebook.net *.google-analytics.com *.google.com *.googlecode.com 127.0.0.1:* *.cloudflare.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adobedtm.com therandomhousegroupltd.d3.sc.omtrdc.net ssl.google-analytics.com *.google.com *.gstatic.com connect.facebook.net www.dwin2.com *.riddle.com *.hotjar.com *.jotfor.ms *.jotformeu.com
"script-src 'self' data: 'unsafe-eval' https://fast.fonts.net 'sha256-flkyfao5rgjvu0smfvrvsstot2lqichipnmciyhpyc8=' 'sha256-r8oe4nj8djuyrmjy4rqfqgxkmrzgi87jssrerhs1uzc=' 'sha256-bsl/bebfdsg+bmeough/snxkda7weo2dfkzpi18gs+u=' https://www.googletagmanager.com https://www.google-analytics.com https://js.locatorsearch.com https://detectca.easysol.net 'sha256-le1r4ytium2uxhlxxk3lfqd/3vo0oopwt1b4d362ixu=' https://www.gstatic.com
style-src 'self' 'unsafe-inline' https://cloud.typography.com http://fast.fonts.net https://fast.fonts.net
"script-src 'self' https://gstsatic.com https://static.vidyo.io https://seal.verisign.com 'unsafe-eval' 'unsafe-inline'
img-src 'self' https: data: blob: https://hispagatos.space
media-src 'self' https: data: https://hispagatos.space
connect-src 'self' blob: https://hispagatos.space wss://hispagatos.space
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: counter.rambler.ru cdn.jsdelivr.net *.top100.ru *.cloudfront.net *.google.com *.rambler.ru yandex.ru *.yandex.ru yastatic.net *.yandex.net yandex.st *.googleapis.com apis.google.com *.gstatic.com gstatic.com *.googlesyndication.com www.googleadservices.com counter.yadro.ru www.liveinternet.ru vk.com *.vk.com *.mail.ru *.twitter.com cdn.syndication.twimg.com *.facebook.net *.jquery.com cackle.me *.cackle.me
style-src 'self' 'unsafe-inline' cackle.me *.cackle.me *.yandex.ru fonts.googleapis.com *.google.com
"default-src https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn.rawgit.com https://www.google.com https://tracking.leadlander.com https://1.tl813.com https://geoip-js.maxmind.com https://www.google.co.uk https://*.g.doubleclick.net https://www.youtube.com 'self' 'unsafe-eval' 'unsafe-inline' *.searchtechnologies.com
script-src 'self' https://cdnjs.cloudflare.com https://cdn.rawgit.com https://www.gstatic.com https://www.google.com https://tracking.leadlander.com https://www.linkedin.com https://ajax.googleapis.com https://formalyzer.com https://www.googleadservices.com https://www.googletagmanager.com https://px.ads.linkedin.com https://www.google-analytics.com https://*.trackalyzer.com https://js.maxmind.com https://bat.bing.com https://storage.googleapis.com https://snap.licdn.com https://t.sf14g.com https://1.tl813.com https://code.jquery.com https://googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'
img-src https://raw.githubusercontent.com https://cdn.rawgit.com https://tracking.leadlander.com https://www.google.iq https://www.google.co.uk https://www.google-analytics.com https://t2.trackalyzer.com https://bat.bing.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com 'self' *.searchtechnologies.com data:
connect-src https://geoip-js.maxmind.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com 'self' *.searchtechnologies.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.zenaps.com https://www.google.ro/pagead/attribution/wcm https://www.google.ie/pagead/attribution/wcm https://www.google.fr/pagead/attribution/wcm https://www.google.com/pagead/attribution/wcm https://optimize.google.com https://count-server.sharethis.com https://buttons-config.sharethis.com https://platform-api.sharethis.com https://graph.facebook.com https://www.dwin1.com https://mymachine.salecycle.com:8080/dev/bundle.js 195.70.95.42 https://www.google.fr https://googleads.g.doubleclick.net https://www.googletagmanager.com https://seal.websecurity.norton.com https://widgets.trustedshops.com https://www.googleadservices.com https://bat.bing.com/bat.js https://maps.googleapis.com https://static.criteo.net https://www.google-analytics.com https://sslwidget.criteo.com https://creativecdn.com https://vu.veoxa.com https://track.adform.net https://apicit.net https://config1.veinteractive.com https://connect.facebook.net https://js-agent.newrelic.com https://bam.nr-data.net https://tagmanager.google.com https://az601263.vo.msecnd.net https://www.tokywoky.com *.salecycle.com *.auto-ies.com *.amazonaws.com *.cloudfront.net *.userlike.com *.googleapis.com *.google.com/recaptcha/api.js *.gstatic.com https://embed.tawk.to/5c5418fc6cb1ff3c14cab42e/default https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com https://code.jquery.com https://*.google-analytics.com https://cdn.ckeditor.com https://ajax.googleapis.com https://assets.zendesk.com https://connect.facebook.net https://*.leadboxer.com https://cdn.rawgit.com https://*.cookiebot.com
img-src 'self' data: https://stats.g.doubleclick.net https://cdn.ckeditor.com https://*.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://*.leadboxer.com
style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com https://fonts.googleapis.com http://fonts.googleapis.com https://assets.zendesk.com https://cdn.rawgit.com https://cdnjs.cloudflare.com
font-src 'self' data: https://themes.googleusercontent.com https://cdnjs.cloudflare.com https://fonts.gstatic.com
frame-src 'self' https://www.youtube.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com
connect-src https://clicklogger.rm.uol.com.br https://app-ab09.marketo.com urlhttps://www.google-analytics.com https://stats.g.doubleclick.net https://logger.uol.com.br https://in.hotjar.com https://8816855.fls.doubleclick.net https://insights.hotjar.com https://mcaptcha.uol.com.br wss://ws2.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf https://*.dynad.net https://*.adilligo.com 'self'
img-src https://8816855.fls.doubleclick.net https://app-ab09.marketo.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://m.t.tailtarget.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://imguol.com.br https://imguol.com http://imguol.com.br http://imguol.com https://e.indice.uol.com.br https://stc.uol.com https://boacompra.captcha.uol.com.br https://imguol.com https://smetrics.uol.com.br https://sb.scorecardresearch.com https://www.google-analytics.com https://*.dynad.net https://*.adilligo.com https://*.facebook.com https://cm.g.doubleclick.net 'self'
script-src https://8816855.fls.doubleclick.net https://app-ab09.marketo.com https://px.ads.linkedin.com https://snap.licdn.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://mcaptcha.uol.com.br https://tracker.bt.uol.com.br https://me.jsuol.com.br https://script.hotjar.com https://static.hotjar.com https://tm.jsuol.com.br https://simg.uol.com.br https://jsuol.com https://www.google-analytics.com https://*.dynad.net https://*.adilligo.com https://connect.facebook.net https://*.googletagmanager.com https://*.googleadservices.com https://*.linkedin.com 'self' 'unsafe-inline' 'unsafe-eval'
worker-src https://www.google.com.br https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://*.dynad.net https://clicklogger.rm.uol.com.br https://vars.hotjar.com https://tracker.bt.uol.com.br https://m.t.tailtarget.com https://tm.uol.com.br https://*.adilligo.com
frame-src https://app-ab09.marketo.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://*.dynad.net https://*.adilligo.com https://clicklogger.rm.uol.com.br https://vars.hotjar.com https://tracker.bt.uol.com.br https://m.t.tailtarget.com https://tm.uol.com.br
style-src https://app-ab09.marketo.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://jsuol.com https://*.adilligo.com 'self' 'unsafe-inline'
"object-src 'self' data: java.com local-trust.com w3.org
style-src 'self' data: 'unsafe-inline' java.com local-trust.com w3.org
img-src 'self' data: java.com local-trust.com webstats.local-trust.com w3.org
media-src 'self' data: java.com local-trust.com w3.org
font-src 'self' data: java.com local-trust.com w3.org
connect-src 'self' data: java.com local-trust.com w3.org"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://code.jquery.com https://ssl.google-analytics.com
img-src 'self' data: https://ssl.google-analytics.com https://secure.gravatar.com
font-src 'self' data: https://fonts.gstatic.com https://themes.googleusercontent.com
"script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' https://optimize.google.com
style-src * 'self' data: 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com
img-src * 'self' data: blob: https://optimize.google.com
font-src * 'self' data: https://fonts.gstatic.com
"frame-ancestors https://v2.hiverhq.com https://hiverhq.com https://mail.google.com chrome-extension://fcinnggknmdfkilogcndkgpojpfojeem"
script-src 'self' 'unsafe-inline' 'unsafe-eval' d3svtxhzihmz8n.cloudfront.net ssl.google-analytics.com www.google-analytics.com www.gstatic.com https://www.googletagmanager.com maps.googleapis.com js.hs-analytics.net cdn.inspectlet.com tag.marinsm.com pixel-geo.prfct.co www.googleadservices.com fast.fonts.net cdnjs.cloudflare.com widget.intercom.io js.intercomcdn.com boards.greenhouse.io js.hsforms.net forms.hubspot.com api.hubapi.com js.hsleadflows.net js.hscollectedforms.net js.leadin.com js.hs-scripts.com https://js.usemessages.com https://api.usemessages.com https://*.addthis.com https://*.googleapis.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5452726296641536.storage.googleapis.com https://*.adroll.com https://js-agent.newrelic.com bam.nr-data.net connect.facebook.net *.honestbuildings.com
style-src 'self' 'unsafe-inline' d3svtxhzihmz8n.cloudfront.net cloud.typography.com fast.fonts.net fonts.googleapis.com https://*.pendo.io pendo-static-5452726296641536.storage.googleapis.com
font-src 'self' data: d3svtxhzihmz8n.cloudfront.net themes.googleusercontent.com fonts.googleapis.com cloud.typography.com fast.fonts.net fonts.gstatic.com d30ccf54iisij5.cloudfront.net https://*.intercomcdn.com
connect-src 'self' data: ws://*.inspectlet.com ws://*.intercom.io ws://*.honestbuildings.com wss://*.inspectlet.com wss://*.intercom.io wss://*.honestbuildings.com https://*.honestbuildings.com https://*.inspectlet.com https://js.leadin.com https://*.intercom.io https://*.intercomcdn.com https://forms.hubspot.com https://www.google-analytics.com https://js-agent.newrelic.com bam.nr-data.net app.pendo.io https://*.procore.com
frame-src 'self' fast.wistia.net https://forms.hsforms.com https://boards.greenhouse.io app.pendo.io
"default-src 'unsafe-inline' 'self' *.gravatar.com *.youtube.com *.google.com *.google.pl *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com *.gemius.pl *.doubleclick.net data:
"frame-ancestors 'self' http://jcn.dev http://*.jewishcontentnetwork.com jewishcontentnetwork.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.googleadservices.com *.google-analytics.com *.googleusercontent.com *.googletagmanager.com  *.googleapis.com *.gstatic.com *.doubleclick.net *.livechatinc.com *.authorize.net *.reddit.com *.youtube.com *.capterra.com
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' api-maps.yandex.ru www.google-analytics.com mc.yandex.ru
style-src https: 'self' 'unsafe-inline' fonts.googleapis.com
img-src 'self' *.importgenius.com data: importgenius.com  sb.scorecardresearch.com *.youtube.com ssl.google-analytics.com *.google.com *.google-analytics.com *.swaychat.com *.cloudfront.net cdn.ampproject.org pbs.twimg.com ws.sharethis.com l.sharethis.com *.facebook.com *.ucarecdn.com ucarecdn.com
media-src 'self' *.importgenius.com *.google.com *.google-analytics.com *.swaychat.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com cdn.ranksci.com *.importgenius.com *.google.com *.optimizely.com ssl.google-analytics.com *.cloudfront.net *.googleapis.com firebaseio.com api.swayio.com swaychat.firebaseio.com *.google.com *.google-analytics.com www.gstatic.com *.swaychat.com *.googleadservices.com swaychat.firebaseio.com *.youtube.com s.ytimg.com cdn.ampproject.org *.sharethis.com connect.facebook.net
frame-src 'self' *.importgenius.com *.google.com *.swaychat.com *.googleapis.com www.youtube.com *.sharethis.com *.facebook.com prezi.com
connect-src 'self' *.swayio.com *.importgenius.com wss://*.firebaseio.com *.swaychat.com swaychat.firebaseio.com *.googleapis.com swaychat.firebaseio.com l.sharethis.com *.facebook.com *.ucarecdn.com ucarecdn.com
font-src 'self' *.importgenius.com data: *.swaychat.com *.cloudfront.net fonts.gstatic.com *.googleapis.com
style-src 'self' 'unsafe-inline' *.importgenius.com *.swaychat.com *.googleapis.com ws.sharethis.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com code.jquery.com gravatar.com www.google-analytics.com http://*.zopim.com https://*.zopim.com ajax.aspnetcdn.com ajax.microsoft.com www.google.com sys.mailworx.info/ cdnjs.cloudflare.com www.gstatic.com cdn.mlwrx.com *.facebook.com *.facebook.net
frame-src 'self' *.facebook.com *.youtube.com cdn.mlwrx.com *.mailworx.info *.facebook.net
connect-src 'self' wss://*.zopim.com ws://*.zopim.com wss://sys.mailworx.info ws://sys.mailworx.info https://cdn.mlwrx.com http://cdn.mlwrx.com graph.facebook.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://thecocktail.engineering:443 https://*.thecocktail.engineering:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com www.google-analytics.com www.e-tsw.com ajax.e-tsw.com www.exodus.mx cdn.jsdelivr.net"
"default-src 'self' apis.live.net www.google.com mc.yandex.ru zenforms.io ipapi.co *.cannasos.com cannasos.com wss://cannasos.com wss://*.cannasos.com ip-api.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' maps.googleapis.com www.google-analytics.com js.hs-scripts.com js.hs-analytics.net www.googletagmanager.com www.googleadservices.com bat.bing.com connect.facebook.net googleads.g.doubleclick.net mc.yandex.com mc.yandex.ru stats.g.doubleclick.net *.cannasos.com cannasos.com wss://cannasos.com wss://*.cannasos.com ip-api.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.cannasos.com cannasos.com wss://cannasos.com wss://*.cannasos.com ip-api.com
font-src 'self' fonts.gstatic.com *.cannasos.com cannasos.com wss://cannasos.com wss://*.cannasos.com ip-api.com
frame-src *.youtube.com *.vimeo.com connect.facebook.net *.doubleclick.net *.facebook.com mc.yandex.ru
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.paypalobjects.com https://www.paypal.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com
connect-src 'self' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercom.io https://app.brand24.com http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com https://mc.yandex.ru https://sumo.com https://clients6.google.com https://app.userengage.com wss://app.userengage.com http://cdn.heapanalytics.com http://heapanalytics.com https://cdn.heapanalytics.com https://heapanalytics.com https://proxy.synerise.com https://tck.synerise.com wss://messenger.synerise.com"
connect-src wss://*.wecu.com http://*.wecu.com *.google-analytics.com *.wecu.com *.silvercloudinc.com cdn.plyr.io 'self'
frame-src *.wecu.com *.podbean.com *.fraudmap.net *.fraudmap-uat.net 'self' *.youtube.com *.duosecurity.com *.silvercloudinc.com *.mortgagewebcenter.com
img-src data: *.silvercloudinc.com *.googleusercontent.com *.youtube.com *.w.org http://*.wecu.com *.wecu.com *.googleapis.com *.ggpht.com maps.gstatic.com 'self' *.formstack.com *.doubleclick.net *.google-analytics.com
script-src *.msecnd.net *.aspnetcdn.com *.wecu.com *.youtube.com *.cloudflare.com *.cloudflare.net *.googleapis.com *.fraudmap-uat.net *.fraudmap.net 'unsafe-eval' 'unsafe-inline' maps.googleapis.com s.ytimg.com 'self' *.formstack.com *.bugherd.com *.google-analytics.com *.silvercloudinc.com
style-src *.silvercloudinc.com *.googleapis.com 'unsafe-inline' 'self' *.formstack.com *.cloudflare.net/* *.cloudfront.net *.cloudfront.com"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://m.addthis.com:443
\tframe-src 'self' https://lt.morningstar.com:443 https://s7.addthis.com:443 https://www.google.com:443
\tscript-src 'self' 'unsafe-inline' 'unsafe-eval' https://bam.nr-data.net:443 https://js-agent.newrelic.com:443 https://www.google.com:443 https://www.gstatic.com:443 https://www.google-analytics.com:443 https://maps.googleapis.com:443 https://s7.addthis.com:443 https://m.addthis.com:443 https://m.addthisedge.com:443
\timg-src 'self' data: https://secure.gravatar.com:443 https://www.google-analytics.com:443 https://ps.w.org:443 https://maps.gstatic.com:443 https://maps.gstatic.com:443
\tstyle-src 'self' 'unsafe-inline' https://fonts.googleapis.com:443 https://ajax.googleapis.com:443
connect-src 'self' https://*.zotero.org https://t0guvf0w17.execute-api.us-east-1.amazonaws.com https://v1snar4wu4.execute-api.us-east-1.amazonaws.com https://zbib-data.s3.amazonaws.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.snapengage.com https://storage.googleapis.com https://v2.zopim.com https://webtools.ec.europa.eu"
"script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'"
style-src https: 'unsafe-inline' 'self' https://fonts.googleapis.com/ https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com/ https://khms0.googleapis.com/ https://khms1.googleapis.com/ https://lh3.ggpht.com/ https://cbks0.googleapis.com/ https://lh3.ggpht.com/ https://geo0.ggpht.com/ https://geo2.ggpht.com/ https://geo1.ggpht.com/ https://geo3.ggpht.com/
"script-src 'self' *.mapbox.com codepen.io *.codepen.io analytics.chrisruppel.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.mapbox.com assets.chrisruppel.com analytics.chrisruppel.com data: blob:
frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com codepen.io
sandbox allow-scripts allow-same-origin allow-popups allow-forms"
script-src 'self' https://sumday.azureedge.net https://az416426.vo.msecnd.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.liveperson.net https://*.lpsnmedia.net https://connect.facebook.net https://cdn.cookielaw.org/ https://code.jquery.com https://geolocation.onetrust.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' https://sumday.azureedge.net https://tagmanager.google.com https://*.gstatic.com https://fonts.googleapis.com/ https://cdn.cookielaw.org/ 'unsafe-inline'
connect-src 'self' data: https://dc.services.visualstudio.com https://www.facebook.com
font-src 'self' data: https://sumday.azureedge.net https://*.gstatic.com https://fonts.googleapis.com/
img-src 'self' data: https://sumday.azureedge.net https://www.google-analytics.com https://*.doubleclick.net https://www.google.com https://*.gstatic.com https://*.lpsnmedia.net https://www.facebook.com https://cdn.cookielaw.org/
frame-src 'self' https://www.googletagmanager.com https://tagmanager.google.com https://*.liveperson.net https://*.lpsnmedia.net https://www.facebook.com https://staticxx.facebook.com/"
style-src 'self' data: chrome-extension-resource: 'unsafe-inline'
"frame-ancestors http://www.vistaprint.be https://www.vistaprint.be http://vistaprint.be https://vistaprint.be
"script-src 'unsafe-inline' 'unsafe-eval' zachej.ladesk.com zachej-sk.test localhost:8080 www.bart.sk dev.zachej.sk www.zachej.sk www.google-analytics.com static.hotjar.com cdnjs.cloudflare.com connect.facebook.net pap.ocean.sk www.googleadservices.com ssl.heureka.sk www.heureka.sk agent.zachej.sk script.hotjar.com googleads.g.doubleclick.net microservices.bart.sk www.google.com www.gstatic.com js-agent.newrelic.com"
img-src 'self' data:                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.googletagmanager.com                *.live2support.com *.yotpo.com *.networksolutions.com *.listrakbi.com                *.viglink.com
style-src 'self' 'unsafe-inline'                *.googleapis.com                *.yotpo.com *.live2support.com                 *.disqus.com *.disquscdn.com                *.listrakbi.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                *.yotpo.com *.live2support.com *.listrakbi.com *.networksolutions.com                 disqus.com *.disqus.com *.disquscdn.com                *.hirebridge.com *.zscalertwo.net
font-src 'self' data:                *.gstatic.com                *.live2support.com *.yotpo.com
frame-src 'self'                *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                disqus.com                *.hirebridge.com *.zscalertwo.net
connect-src 'self' *.windows.net *.google.com                *.live2support.com *.yotpo.com                *.disqus.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pi.pardot.com/ https://*.callrail.com/ https://cdnjs.cloudflare.com/ https://*.googleadservices.com/             https://*.google-analytics.com/ https://*.googletagmanager.com/ https://*.google.com/ https://*.facebook.net/ https://*.facebook.com/ https://munchkin.marketo.net/ https://fast.wistia.net/ https://fast.wistia.com/ https://src.litix.io/              https://*.twitter.com/ https://*.adroll.com/ https://devbridge.disqus.com/ https://*.disquscdn.com/ https://*.vimeocdn.com/ https://*.cloudfront.net/ https://*.slideshare.net/ https://*.leadforensics.com/              https://*.amazonaws.com/ https://*.aspnetcdn.com https://*.youtube.com https://*.ytimg.com https://disqus.com https://*.licdn.com https://*.linkedin.com https://*.googleapis.com https://*.olark.com              https://*.devbridge.com https://*.bizographics.com https://*.elformo.com
connect-src 'self' *.mktoresp.com *.marketo.com *.google-analytics.com *.disqus.com *.wistia.com *.wistia.net *.akamaihd.net *.pardot.com *.adroll.com formsubmit.io devbridge.local:8889 *.litix.io              *.twitter.com *.olark.com *.elformo.com
img-src 'self' data: https: https://devbridge.local/ blob:
media-src 'self' data: https: https://dbcms.s3.amazonaws.com/devbridgecom/bcms/ https://*.akamaihd.net blob:
child-src 'self' https://fast.wistia.com/ https://fast.wistia.net/ https://*.360yield.com/ https://*.facebook.com/ https://disqus.com/ https://devbridge.disqus.com/             https://*.vimeo.com/ https://www.youtube.com/ https://*.slideshare.net https://slideshare.net https://go.pardot.com/ blob:
frame-src 'self' https://fast.wistia.com/ https://fast.wistia.net/ https://*.360yield.com/ https://*.facebook.com/ https://disqus.com/ https://devbridge.disqus.com/             https://*.vimeo.com/ https://www.youtube.com/ https://*.slideshare.net https://slideshare.net https://go.pardot.com/ https://*.twitter.com/ https://*.olark.com             https://*.featureupvote.com https://*.devbridge.com blob:
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://carzoom.in http://*.carzoom.in
default-src https: data: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-eval' *.gstatic.com 'nonce-2000c7f20c' *.interactievetv.nl *.appsquad.net https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.interactievetv.nl *.appsquad.net
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com
connect-src 'self' *.mobgen.com *.interactievetv.nl *.itvonline.nl *.theoplayer.com *.kpnstreaming.nl *.kpndrm.nl time.akamai.com https://www.google-analytics.com
img-src 'self' data: res.cloudinary.com *.itvonline.nl *.theoplayer.com *.interactievetv.nl https://www.google-analytics.com
media-src 'self' blob: https://kpnvideovod.download.kpnstreaming.nl *.kpnstreaming.nl
"child-src 'self' *.adform.net *.criteo.com *.criteo.net *.selbstbauprofi.de *.sociomantic.com *.toom.de *.tp-de.net *.webmasterplan.com app.parasol-island.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com www.efs-survey.com www.facebook.com www.findibus-online.de www.google.com/maps/ www.google.com/recaptcha/ *.optimizely.com www.toom-baumarkt.de www.youtube.com www.youtube.de *.youtube-nocookie.com
frame-src 'self' *.adform.net *.optimizely.com *.criteo.com *.criteo.net *.selbstbauprofi.de *.sociomantic.com *.toom.de *.tp-de.net *.webmasterplan.com app.parasol-island.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com www.efs-survey.com www.facebook.com www.findibus-online.de www.google.com/maps/ www.google.com/recaptcha/ www.toom-baumarkt.de www.youtube.com www.youtube.de *.youtube-nocookie.com
script-src 'self' code.jquery.com www.google-analytics.com x.tmp.sx
style-src 'self' x.tmp.sx maxcdn.bootstrapcdn.com fonts.googleapis.com
font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com
script-src 'self' *.heatmap.it  *.bing.com *.crisp.chat *.googletagmanager.com *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to *.hotjar.com *.google-analytics.com customerportal.opencrm.co.uk *.intercom.io *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'
child-src 'self' *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to bat.bing.com *.googletagmanager.com https:
connect-src wss: 'self' *.crisp.chat *.tawk.to *.twitter.com *.hotjar.com *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com
font-src https: data: *.crisp.chat *.opencrm.co.uk *.gstatic.com *.tawk.to *.google.com *.googletagmanager.com
script-src 'self' https://www.google-analytics.com https://www.recaptcha.net https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.google.com https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com https://*.msecnd.net *.acceleratoradmin.com 'unsafe-inline' https://www.googletagmanager.com *.mxpnl.com
style-src 'self' https://ajax.aspnetcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com 'unsafe-inline'
connect-src 'self' https://www.google-analytics.com *.visualstudio.com *.acceleratoradmin.com https://api.mixpanel.com
frame-src https://www.google.com *.swiftprepaid.com *.acceleratoradmin.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.lincolnelectricdigitalrewards.com *.adpclientappreciation.com *.youtube.com https://youtu.be"
"default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *
connect-src 'self' wss://*.nciphub.org https://www.google-analytics.com https://stats.g.doubleclick.net https://www.purdue.edu wss://nciphub.org https://www.dropbox.com https://graph.facebook.com
font-src 'self' https://fonts.gstatic.com data: safari-extension: chrome-extension:
frame-src 'self' https://*.nciphub.org https://*.nciphub.aws.hubzero.org  https://*.google.com https://*.youtube.com https://content.googleapis.com https://*.facebook.com https://*.twitter.com data: https://apis.google.com https://www.ncbi.nlm.nih.gov https://youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google-analytics.com https://*.google.com https://connect.facebook.net https://www.linkedin.com https://platform.twitter.com  https://cdn.syndication.twimg.com https://www.gstatic.com https://*.googleapis.com https://platform.linkedin.com data: blob:
style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com https://*.googleapis.com https://www.google.com https://ajax.googleapis.com
img-src 'self' *.amazonaws.com http://img.issl.co.uk *.issl.co.uk pbs.twimg.com maps.gstatic.com maps.google.com http://content.metropix.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' google-analytics.com maps.google.com ajax.googleapis.com maps.googleapis.com
"script-src 'unsafe-inline' 'unsafe-eval' 'self' *.simplifile.com fast.wistia.com fast.wistia.net ssl.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/ https://www.google-analytics.com https://connect.facebook.net/ https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-scripts.com https://v2.zopim.com
"connect-src 'self' https://*.olark.com https://fastmail.innocraft.cloud https://storage.listbox.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.pobox.com https://*.google.com https://*.gstatic.com https://*.twimg.com https://connect.facebook.net https://fastmail.innocraft.cloud https://platform.twitter.com https://run-static.pingdom.net https://*.gstatic.com https://*.facebook.com https://*.olark.com
frame-src 'self' https://*.twitter.com https://*.facebook.com https://*.google.com https://*.olark.com
"default-src http: https: data: wss: blob: 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://www.youtube.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.ru https://www.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://yastatic.net https://*.yandex.ru https://*.googleapis.com https://*.vk.com https://vk.com https://*.facebook.net https://*.facebook.com https://maxcdn.bootstrapcdn.com https://cdn.thinglink.me https://*.thinglink.me https://*.thinglink.com https://ajax.googleapis.com https://dachernenko.justclick.ru
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com
img-src 'self' data: http://e.issuu.com http://menunedeli.ru https://tbcdnwidgetsprod.azureedge.net http://mn.ocharovanie-zhenstvennosti.ru https://*.vk.me https://mc.yandex.ru https://vk.com https://badges.instagram.com https://counter.yadro.ru https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://cdn.thinglink.me https://*.thinglink.com https://stats.g.doubleclick.net https://www.google.ru https://www.google.com
connect-src https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://menunedeli.ru https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://mc.yandex.ru https://vk.com https://cdn.thinglink.me https://*.thinglink.com https://ajax.googleapis.com https://dachernenko.justclick.ru
frame-src https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://*.yandex.ru https://*.vk.com https://vk.com https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://www.youtube.com https://bid.g.doubleclick.net"
"connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.youtube.com https://cdn.securelist.com https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://securelist.com https://www.google-analytics.com
default-src 'self' https://*.securelist.com https://cdn.securelist.com https://kasperskycontenthub.com https://kasperskycontenthub.com/securelist https://securelist.com
font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.wp.com https://assets.kasperskycontenthub.com https://cdn.securelist.com https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://securelist.com
frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.youtube.com https://cdn.securelist.com https://kasperskycontenthub.com https://player.vimeo.com https://s-static.ak.facebook.com https://securelist.com https://tpc.googlesyndication.com https://www.brighttalk.com
img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.netdna-ssl.com https://*.securelist.com https://*.sharethis.com https://*.staticflickr.com https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://blog.kaspersky.com https://cdn.securelist.com https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://securelist.com https://stats.g.doubleclick.net https://t.co https://threatpost.com https://track.addevent.com
object-src 'self' https://*.securelist.com https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://securelist.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.securelist.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://cdn.optimizely.com https://cdn.securelist.com https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://securelist.com https://share.yandex.ru/ https://static.ads-twitter.com https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.googletagmanager.com https://www.googletagservices.com https://www.linkedin.com
style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://assets.kasperskycontenthub.com https://cdn.securelist.com https://fonts.googleapis.com https://kasperskycontenthub.com https://s0.wp.com https://secure.gravatar.com https://securelist.com"
"upgrade-insecure-requests, frame-ancestors 'self' *.ariba.com *.sciquest.com *.punchout2go.com *.colamco.com *.colamco.dev *.colamco.local"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' uat-cache.infoslipscloud.com cache.infoslipscloud.com www.google-analytics.com js-agent.newrelic.com bam.nr-data.net"
"frame-ancestors 'self' *.getpaidtoshop.us *.cashbackassociates.com *.cashbackdonations.org *.integrion.us *.integrion.com *.10freedollars.com *.10freedollars.com *.localhost *.localhost *.localhost:8080 *.localhost:8080 *.firebaseapp.com *.firebaseapp.com
default-src 'self' yastatic.net yandex.ru *.yandex.ru *.payture.com *.foodfox.ru *.jivosite.com *.yandex.net
frame-src 'self' https://www.google.com/ https://mc.yandex.ru/ https://yastatic.net/ https://*.me-talk.ru/ https://*.youtube.com/ https://youtube.com/ https://api-maps.yandex.ru/ https://st.yandexadexchange.net
style-src 'self' data: 'unsafe-inline' https://*.550550.ru http://fonts.googleapis.com/ https://api-maps.yandex.ru/ https://www.gstatic.com/
img-src 'self' data: blob: https://m4clicks.com https://yandex.ru/ https://www.google-analytics.com https://*.550550.ru https://mc.yandex.ru https://api-maps.yandex.ru/ https://*.maps.yandex.net https://marketplace-cdn.atlassian.com/ https://avatars.mds.yandex.net https://an.yandex.ru/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://m4clicks.com https://*.maps.yandex.net https://me-talk.ru https://www.google-analytics.com https://mc.yandex.ru https://yastatic.net https://static.me-talk.ru https://www.google.com https://www.gstatic.com https://api-maps.yandex.ru/ http://api-maps.yandex.ru/ http://mc.yandex.ru https://an.yandex.ru/ https://*.monitis.com/
connect-src 'self' https://mc.yandex.ru https://www.google-analytics.com wss://wiki.550550.ru https://marketplace.atlassian.com/ https://aptekar.site https://an.yandex.ru https://analytics.atlassian.com/
child-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/ https://www.facebook.com/ https://app-3qndemwefo.marketingautomation.services/
frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/ https://www.facebook.com/ https://app-3qndemwefo.marketingautomation.services/"
script-src 'unsafe-inline' 'self' *.lendingclub.com lendingclub.com js-agent.newrelic.com bam.nr-data.net t.a3cloud.net cdn.plaid.com *.googletagmanager.com/gtag/ *.googleadservices.com/pagead/ googleads.g.doubleclick.net/pagead/ s.pinimg.com connect.facebook.net 'unsafe-inline' 'self' js-agent.newrelic.com bam.nr-data.net static.lendingclub.com 'unsafe-eval' heapanalytics.com static-stage.tlcinternal.com tags.tiqcdn.com cdn.heapanalytics.com *.liveperson.net *.lpsnmedia.net
connect-src 'self' js-agent.newrelic.com bam.nr-data.net ct.pinterest.com
frame-src 'self' cdn.plaid.com *.lpsnmedia.net *.liveperson.net 'self'
style-src 'unsafe-inline' 'self' 'unsafe-inline' 'self' c.comenity.net
"script-src 'unsafe-inline' 'self' 'unsafe-eval' s.ytimg.com connect.facebook.net fast.fonts.net www.google-analytics.com www.google.com www.gstatic.com youtube.com www.youtube.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com
connect-src 'self' https://*.adobedtm.com http://*.amegybank.com https://*.amegybank.com https://*.omtrdc.net https://*.demdex.net https://*.cludo.com
script-src 'self' data: 'unsafe-inline' https://*.adobedtm.com https://*.doubleclick.net https://connect.facebook.net https://*.googletagmanager.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://*.google.com http://*.amegybank.com https://*.amegybank.com https://*.zionsbank.com https://*.cludo.com 'unsafe-eval'
object-src 'self' data: http://*.amegybank.com https://*.amegybank.com
style-src 'self' data: 'unsafe-inline' https://*.googleapis.com https://*.google.com https://*.cludo.com
img-src 'self' data: https://www.facebook.com https://*.doubleclick.net https://*.gstatic.com http://*.amegybank.com https://*.amegybank.com https://*.online-metrix.net https://*.omtrdc.net https://*.demdex.net https://*.everesttech.net https://*.googleapis.com https://*.google.com https://*.cludo.com
frame-src 'self' http://*.amegybank.com https://*.amegybank.com https://issuu.com https://*.doubleclick.net https://*.demdex.net https://secure.checkout.visa.com https://*.youtube.com https://*.pages05.net https://*.brightcove.net
font-src 'self' data: 'unsafe-inline' https://fonts.gstatic.com
script-src 'self' https://code.jquery.com https://apis.google.com https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' ssl.gstatic.com https://usenet.farm https://www.coinpayments.net https://www.vipernews.com https://cdn.vipernews.com data:
frame-src 'self' https://youtube.com https://www.youtube.com https://www.google.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://thebolditalic.com:443 https://*.thebolditalic.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
child-src http://*.x-lime.com https://*.x-lime.com https://x-lime.com https://nkjjx.sckxppzdm.com http://*.bongacams.com https://*.bongacams.com https://promo-bc.com https://*.xcvgdf.party http://www.youtube.com https://www.youtube.com http://www.youtube-nocookie.com https://www.youtube-nocookie.com http://vk.com https://vk.com https://login.vk.com https://drive.google.com https://apis.google.com https://accounts.google.com http://www.google-analytics.com http://yastatic.net https://yastatic.net https://mp-https.info
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com http://www.google-analytics.com https://apis.google.com apis.google.com platform.twitter.com http://ajax.googleapis.com http://vk.com https://vk.com https://login.vk.com http://yastatic.net https://yastatic.net http://yandex.st https://yandex.st http://mc.yandex.ru https://mc.yandex.ru http://yandex.ru https://promo-bc.com http://i.bongacash.com http://*.bongacams.com https://*.bongacams.com https://*.xcvgdf.party http://v.dlski.space https://yandex.ru https://mp-https.info https://nkjjx.sckxppzdm.com https://cug.sckxppzdm.com https://pus.qjudpxkisv.xyz http://*.x-lime.com https://*.x-lime.com
"default-src 'self' data: *.wdesk.com *.wdesk.net *.wdesk.org *.workiva.org *.webfilings.com *.webfilings.org *.appspot.com *.google-analytics.com https://fpdownload.adobe.com https://embed-ssl.wistia.com
img-src 'self' data: blob: *.wdesk.com *.wdesk.net *.wdesk.org *.workiva.org *.webfilings.com *.webfilings.org *.google-analytics.com
object-src 'self' data: blob: *.wdesk.com *.wdesk.net *.wdesk.org *.workiva.org *.webfilings.com *.webfilings.org *.appspot.com *.google-analytics.com https://fpdownload.adobe.com https://embed-ssl.wistia.com
script-src 'self' 'unsafe-eval' *.wdesk.com *.wdesk.net *.wdesk.org *.workiva.org *.webfilings.com *.webfilings.org *.google-analytics.com https://ajax.googleapis.com https://getsatisfaction.com
style-src 'self' 'unsafe-inline' *.wdesk.com *.wdesk.net *.wdesk.org *.workiva.org *.webfilings.com *.webfilings.org
connect-src 'self' *.wdesk.com:* *.wdesk.net:* *.wdesk.org:* *.workiva.org:* *.webfilings.com:* *.webfilings.org:* *.appspot.com:* wss://*.wdesk.com:* wss://*.wdesk.net:* wss://*.wdesk.org:* *.google-analytics.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com
"frame-ancestors learndirect.atomlms.co.uk www.apprenticeshippro.co.uk dev.atomlms.epa.stonebridge.uk.com dev.atomlms.co.uk  dev.aelp.atomlms.co.uk dev.oa.atomlms.co.uk dev.sac.atomlms.co.uk learndirect.atomlms.co.uk sac.atomlms.co.uk learndirect.atomlms.co.uk learndirect.atomlms.co.uk 'self' www.elearnuk.co.uk www.onlineacademies.co.uk
img-src 'self' data: i.gyazo.com www.google-analytics.com www.google.com www.google.co.jp googleads.g.doubleclick.net
script-src 'self' cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com stats.g.doubleclick.net googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.psmail.net *.twimg.com *.twitter.com *.google-analytics.com *.googleapis.com www.google.com *.gstatic.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.psmail.net *.twitter.com *.googleapis.com *.google-analytics.com *.twimg.com
img-src *.psmail.net *.twitter.com *.googleapis.com *.google-analytics.com *.twimg.com www.google.com data:
"default-src 'self' *.continuum.ie ajax.aspnetcdn.com webinator.continuous.ie static.ads-twitter.com lptag.liveperson.net lpcdn.lpsnmedia.net *.googletagmanager.com platform.twitter.com analytics.twitter.com accdn.lpsnmedia.net lo.v.liveperson.net ajax.googleapis.com servedby.flashtalking.com accreditation.datacash.com *.googleadservices.com 2866153.fls.doubleclick.net googleads.g.doubleclick.net use.typekit.net static.addtoany.com ib.adnxs.com *.google.com *.google.ie *.google-analytics.com code.jquery.com service.gamma.ie *.t.co d1j07uq9klr1j0.cloudfront.net service.autoaddress.ie api.autoaddress.ie dev.virtualearth.net edge.quantserve.com connect.facebook.net rules.quantcount.com *.youtube.com s.ytimg.com r.turn.com secure.quantserve.com ds-aksb-a.akamaihd.net *.facebook.com *.thrive-csr.com *.hotjar.com:* wss://*.hotjar.com 'unsafe-eval' 'unsafe-inline'
frame-src * d1j07uq9klr1j0.cloudfront.net *.youtube.com *.thrive-csr.com"
img-src 'self' data: https://www.google-analytics.com https://steamcdn-a.akamaihd.net/
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net
frame-src 'self' *.google.com *.itella.com *.youtube.com
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.uz https://*.yandex.uz static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.uz *.yandex.uz
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.uz https://passport.yandex.uz wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.uz *.yandex.uz
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.uz https://*.yandex.uz awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.uz *.yandex.uz
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.uz https://www.yandex.uz https://pass.yandex.uz https://mc.yandex.uz an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.uz www.yandex.uz suggest.yandex.uz
child-src 'self' www.youtube.com player.vimeo.com staticxx.facebook.com www.facebook.com www.google.com www.google.com.au platform.twitter.com syndication.twitter.com accounts.google.com https://drive.google.com http://broomfield.maps.arcgis.com https://docs.google.com https://s3-us-west-1.amazonaws.com
connect-src 'self' blob: bam.nr-data.net a.tiles.mapbox.com plus.browsealoud.com syndication.twitter.com/settings z-m-graph.facebook.com graph.facebook.com s3.amazonaws.com/ehq-production-australia/ s3.amazonaws.com/ehq-production-europe/ s3.amazonaws.com/ehq-production-canada/ s3.amazonaws.com/ehq-production-us-california/ ehq-production-us-california.s3.amazonaws.com/ ehq-production-canada.s3.amazonaws.com/ ehq-production-australia.s3.amazonaws.com/ ehq-production-europe.s3.amazonaws.com/ ehq-production-us-california.s3.us-west-1.amazonaws.com/ ehq-production-canada.s3.ca-central-1.amazonaws.com/ ehq-production-australia.s3.ap-southeast-2.amazonaws.com/ ehq-production-europe.s3.eu-west-1.amazonaws.com/ s3-ap-southeast-2.amazonaws.com/ehq-production-australia/ s3-ca-central-1.amazonaws.com/ehq-production-canada/ s3-us-west-1.amazonaws.com/ehq-production-us-california/ s3-eu-west-1.amazonaws.com/ehq-production-europe/ s3.ca-central-1.amazonaws.com/ehq-production-canada/ https://www.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' data: 'unsafe-eval' cdn.jsdelivr.net cdnjs.cloudflare.com ajax.googleapis.com www.browsealoud.com plus.browsealoud.com maxcdn.bootstrapcdn.com www.google-analytics.com ssl.google-analytics.com api.mapbox.com assets.zendesk.com cdn.mxpnl.com cdn.ravenjs.com f1-oc.readspeaker.com epsg.io analytics.engagementhq.com platform.twitter.com cdn.syndication.twimg.com log.pinterest.com assets.pinterest.com connect.facebook.net www.googletagmanager.com translate.google.com s.ytimg.com www.youtube.com/iframe_api apis.google.com translate.googleapis.com s3-ap-southeast-2.amazonaws.com/ehq-bonfire-production/ d569gmo85shlr.cloudfront.net d2i63gac8idpto.cloudfront.net dksxg5o1pn16c.cloudfront.net d2gu4vothxmtom.cloudfront.net d3b3ehuo35wzeh.cloudfront.net d3sbxpiag177w8.cloudfront.net js-agent.newrelic.com bam.nr-data.net https://s3-ap-southeast-2.amazonaws.com
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-f39hfqhwtskucpu7x0ecyzpm9y+7v+cjhyakh+nscjo='
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ravenjs.com https://www.googletagmanager.com https://ajax.aspnetcdn.com https://www.gstatic.com https://use.fontawesome.com https://*.googlesyndication.com https://googleadservices.com https://tag.getdrip.com https://connect.facebook.net https://cdnjs.cloudflare.com https://*.google.com https://code.jquery.com https://cdn.mathjax.org https://*.google-analytics.com https://*.googleapis.com https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://checkout.stripe.com
frame-src https://checkout.stripe.com https://googleads.g.doubleclick.net https://docs.google.com https://maps.google.com https://www.google.com https://www.youtube.com https://player.vimeo.com https://*.facebook.com
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.verywellfamily.com *.qa.aws.verywellfamily.com atlas.verywellfamily.com atlas.local.verywellfamily.com https://specials.verywellfamily.com"
"frame-ancestors 'self' http://www.texaselectricityratings.com http://texaselectricityratings.com https://www.texaselectricityratings.com https://texaselectricityratings.com http://www.facebook.com http://facebook.com https://www.facebook.com https://facebook.com"
img-src 'self' data:                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                     *.hirebridge.com *.zscalertwo.net
frame-src 'self'                *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                *.hirebridge.com *.zscalertwo.net
"default-src 'self' data: parrotsec.org *.parrotsec.org *.parrotsec.io *.parrot.sh *.geocdn.co *.fzbx.io *.frozenbx.org"
script-src 'unsafe-eval' https://pony.town/assets/scripts/bootstrap-f07e19ad22.js https://pony.town/assets/scripts/bootstrap-es.js https://www.google-analytics.com
"frame-src 'self' www.pinkflower.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com