font-src 'self' http://fonts.gstatic.com https://fonts.gstatic.com http://themes.googleusercontent.com https://themes.googleusercontent.com data:
style-src 'self' http://fonts.googleapis.com https://fonts.googleapis.com 'unsafe-inline'
script-src 'self' http://connect.facebook.net https://connect.facebook.net http://www.google-analytics.com https://www.google-analytics.com http://www.googleadservices.com https://www.googleadservices.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net http://tpc.googlesyndication.com https://tpc.googlesyndication.com http://www.google.com https://www.google.com http://www.google.hu https://www.google.hu http://translate.googleapis.com https://translate.googleapis.com
connect-src 'self' http://www.facebook.com https://www.facebook.com http://www.google-analytics.com https://www.google-analytics.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://translate.googleapis.com https://translate.googleapis.com
"frame-ancestors 'self' *.sciquest.com *.ariba.com *.nova.edu *.coupahost.com *.covestro.com *.intellecat.com *.bmc.com *.vinimaya.com *.oraclecloud.com *.equallevel.com *.terracon.com *.eplus.com *.pacificorp.us *.punchout2go.com *.state.pa.us equallevel.com *.macewan.ca p2p.caci.com *.verian.com *.aquiire.net *.nvenergy.com *.sherwin.com *.fwisd.org *.cchmc.org *.esmsolutions.com *.ocps.* *.pacificorp.us *.oracleoutsourcing.com *.ocps.k12.fl.us *.ivalua.us *.vroozi.com *.varstreet.com *.ocps.net"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://amaysim.engineering:443 https://*.amaysim.engineering:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
child-src 'self' http://*.kt.com https://*.kt.com http://assets.adobedtm.com https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com http://dart.fss.or.kr
"script-src 'unsafe-inline' 'self' maps.google.com maps.googleapis.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://entrepreneurshandbook.co:443 https://*.entrepreneurshandbook.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors 'self' mail.google.com chrome-extension://iffdacemhfpnchinokehhnppllonacfj/ chrome-extension://dkfhfaphfkopdgpbfkebjfcblcafcmpi/
"frame-ancestors http://arqa.hbogola.com https://dev-tve.hbo-la.com https://qa-tve.hbo-la.com https://stg-tve.hbopaseo.com https://tve.hbopaseo.com http://ar.hbogola.com http://ar.cinemaxgola.com http://www.enowlatino.com http://play.tuhistory.com http://la.canalsony.com http://la.axn.com http://play.canalaetv.com http://play.milifetime.tv http://www.syfyla.com http://www.universalchannel.com http://www.studiouniversal.com https://www.supercanal-arlink.com.ar http://devlag.hbogola.com
script-src              'self'              'unsafe-inline'              'unsafe-eval'               https://www.googletagmanager.com               http://www.googletagmanager.com                 https://connect.facebook.net               https://ssl.google-analytics.com               http://v2.zopim.com               https://assets.zendesk.com               http://cdn.pardot.com               https://pi.pardot.com               http://downloads.mailchimp.com               http://recorder-assets.getjaco.com               http://www.google-analytics.com               https://vimeo.com               https://cdnjs.cloudflare.com               https://ajax.googleapis.com               https://code.jquery.com               https://maxcdn.bootstrapcdn.com               https://static.zdassets.com               https://sjs.bizographics.com               https://px.ads.linkedin.com               https://www.linkedin.com               https://www.google.com/recaptcha/api.js               https://www.gstatic.com/recaptcha/api2/v1540189908068/recaptcha__en.js               https://www2.sbtpg.com/analytics               https://fast.wistia.com/static/embed_shepherd-v1.js
style-src               'self'               'unsafe-inline'               https://fonts.googleapis.com               https://fonts.gstatic.com               https://maxcdn.bootstrapcdn.com               https://fast.wistia.com/static/embed_shepherd-v1.js
img-src               'self'               data:               http://*.tiles.mapbox.com               http://v2.zopim.com               http://www.google-analytics.com               https://www.google-analytics.com               https://www.google.com               https://www.youtube.com               https://vimeo.com               https://support.sbtpg.com               https://ds.reson8.com               https://stats.g.doubleclick.net               https://www.facebook.com               https://px.ads.linkedin.com
connect-src               'self'               http://cdn.pardot.com               https://cdn.pardot.com               https://pi.pardot.com               https://assets.zendesk.com               https://vimeo.com               https://fpdl.vimeocdn.com               wss://*.zopim.com               http://a.tiles.mapbox.com               https://tpgtaxpro.zendesk.com               https://rapi.getjaco.com               https://ekr.zdassets.com               https://rollbar-us.zdassets.com               http://recorder-assets.getjaco.com               https://recorder-assets.getjaco.com                              https://vimeo.com
font-src               data:               'self'               'unsafe-inline'               https://fonts.googleapis.com               https://fonts.gstatic.com               http://v2.zopim.com               https://maxcdn.bootstrapcdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.123copydvd.com *.google-analytics.com *.simplify.com *.stripe.com *.upsellit.com *.youtube.com *.ytimg.com ajax.googleapis.com cdnjs.cloudflare.com connect.facebook.net linkconnector.com seal.buysafe.com https://123copydvd.com:443/wordpress
style-src 'self' 'unsafe-inline' *.123copydvd.com code.jquery.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://123copydvd.com:443/wordpress
img-src 'self' *.123copydvd.com *.facebook.com *.google-analytics.com *.gravatar.com *.stripe.com code.jquery.com data: linkconnector.com ps.w.org seal.buysafe.com https://123copydvd.com:443/wordpress
font-src 'self' *.123copydvd.com data: fonts.gstatic.com maxcdn.bootstrapcdn.com https://123copydvd.com:443/wordpress
frame-src 'self' *.123copydvd.com *.simplify.com *.stripe.com *.youtube.com https://123copydvd.com:443/wordpress
child-src 'self' *.123copydvd.com *.simplify.com *.stripe.com *.youtube.com https://123copydvd.com:443/wordpress
connect-src 'self' https://*.stripe.com ws://123copydvd.com wss://123copydvd.com https://123copydvd.com:443/wordpress
"script-src 'self' 'strict-dynamic' https: http:
style-src 'self' fonts.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com
frame-src 'self' www.google.com www.youtube.com accounts.google.com apis.google.com plus.google.com *.doubleclick.net
img-src 'self' data: s.ytimg.com *.googleusercontent.com storage.googleapis.com *.gstatic.com www.google-analytics.com *.doubleclick.net services.google.com www.google.com www.google.co.uk cdn4.thr.com *.ggpht.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.clarksons.net www.clarksons.net crsl.com https://www.clarksons.com cloud.clarksons.com https://gstatic.com https://www.gstatic.com *.googleapis.com bing.com app.powerbi.com visuals.azureedge.net dc.services.visualstudio.com wabi-uk-south-api.analysis.windows.net https://cdn.jsdelivr.net https://use.fontawesome.com https://ajax.googleapis.com *.bootstrapcdn.com https://kendo.cdn.telerik.com/ *.duosecurity.com *.base.maps.cit.api.here.com *.aerial.maps.cit.api.here.com *.tile.openstreetmap.org *.cloudflare.com https://code.jquery.com"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://apis.google.com
style-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com
img-src 'self' data: https://images.rpowered.com https://www.google.com https://ssl.gstatic.com https://www.gravatar.com https://www.google-analytics.com
script-src 'self' 'nonce-fezxxxfoedrehyqlhchiw7+i/q14hr0mwxati8zl8vk=' 'unsafe-eval' *.vistek.ca ajax.aspnetcdn.com *.klevu.com www.google-analytics.com js.hs-analytics.net js.hs-scripts.com js.hsleadflows.net js.hscollectedforms.net js.hsforms.net forms.hsforms.com forms.hubspot.com www.paypalobjects.com *.paypal.com www.googleadservices.com connect.facebook.net www.facebook.com *.turnto.com *.doubleclick.net maps.googleapis.com www.google.com *.ladesk.com *.iubenda.com *.steelhousemedia.com
font-src 'self' js.klevu.com static.www.turnto.com fonts.gstatic.com
img-src 'self' data: *.vistek.ca *.vistek.net prophotoblog.ca d1c86o3nm55du5.cloudfront.net s3.amazonaws.com *.ytimg.com js.klevu.com stats.g.doubleclick.net www.google.com www.google.ca www.facebook.com www.paypal.com track.hubspot.com maps.gstatic.com maps.googleapis.com *.turnto.com *.adsrvr.org *.adsymptotic.com
style-src 'self' 'unsafe-inline' data: fonts.googleapis.com *.turnto.com js.klevu.com
frame-src 'self' *.vistek.ca *.youtube.com *.vimeo.com *.paypal.com *.ladesk.com *.google.com *.g.doubleclick.net *.iubenda.com *.turnto.com *.doubleclick.net forms.hsforms.com forms.hubspot.com
connect-src 'self' *.vistek.ca www.google-analytics.com *.ksearchnet.com *.klevu.com *.turnto.com js.hs-analytics.net forms.hubspot.com forms.hsforms.com www.paypalobjects.com *.paypal.com
img-src 'self' data: cdnjs.cloudflare.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.gstatic.com
frame-src 'self' *.personalcard.net:* *.google.com:* *.youtube.com:*
"child-src 'self' staticxx.facebook.com facebook.com www.facebook.com accounts.google.com google.com
font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/fonts/slick.ttf cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/fonts/slick.woff cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/fonts/slick.svg cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/fonts/slick.eot use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.woff2 use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.woff use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.ttf use.fontawesome.com/releases/v5.0.8/webfonts/fa-regular-400.woff2 use.fontawesome.com/releases/v5.0.8/webfonts/fa-regular-400.woff use.fontawesome.com/releases/v5.0.8/webfonts/fa-regular-400.ttf use.fontawesome.com/releases/v5.0.8/webfonts/fa-solid-900.woff2 use.fontawesome.com/releases/v5.0.8/webfonts/fa-solid-900.woff use.fontawesome.com/releases/v5.0.8/webfonts/fa-solid-900.ttf
script-src 'self' 'nonce-70c64161-1de4-4bee-9062-1c5bcba2e950' 'unsafe-inline' https://www.google.com/ https://www.google.com/recaptcha/api.js cdn.polyfill.io connect.facebook.net/en_us/sdk.js graph.facebook.com apis.google.com https://www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' blob: cdn.rawgit.com/milligram/milligram/master/dist/milligram.min.css fonts.googleapis.com/css cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick.min.css cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick-theme.min.css fonts.googleapis.com/icon use.fontawesome.com/releases/v5.0.8/css/all.css"
"default-src 'self' *.paud-dikmas.kemdikbud.go.id *.paudni.kemdikbud.go.id *.pauddikmas.org 'unsafe-inline'
script-src 'self' *.paud-dikmas.kemdikbud.go.id *.paudni.kemdikbud.go.id *.pauddikmas.org data: cdn.tinymce.com tinymce.cachefly.net platform.twitter.com www.google-analytics.com connect.facebook.net www.facebook.com ajax.googleapis.com netdna.bootstrapcdn.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com www.youtube.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' cdn.tinymce.com tinymce.cachefly.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com www.youtube.com 'unsafe-inline'
img-src 'self' *.paud-dikmas.kemdikbud.go.id *.paudni.kemdikbud.go.id *.pauddikmas.org www.google-analytics.com badges.instagram.com i.ytimg.com www.facebook.com connect.facebook.com syndication.twitter.com stats.g.doubleclick.net 'unsafe-inline'
font-src 'self' tinymce.cachefly.net cdn.tinymce.com maxcdn.bootstrapcdn.com 'unsafe-inline'
child-src 'self' platform.twitter.com syndication.twitter.com www.youtube.com staticxx.facebook.com www.facebook.com 'unsafe-inline'
frame-src 'self' www.facebook.com staticxx.facebook.com web.facebook.com platform.twitter.com www.youtube.com syndication.twitter.com
connect-src 'self' platform.twitter.com syndication.twitter.com 'unsafe-inline'"
img-src 'self' data: stats.cihar.com hosted.weblate.org www.thepay.cz
"default-src 'self' *.roompact.com:* blob: data:
connect-src 'self' *.roompact.com:* wss://ws.roompact.com:* https://*.wistia.com https://embedwistia-a.akamaihd.net hn.inspectlet.com wss://ws.inspectlet.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *.roompact.com https://www.google-analytics.com https://*.gstatic.com/feedback/ https://ajax.googleapis.com https://rum-static.pingdom.net/prum.min.js https://platform.twitter.com https://cdn.syndication.twimg.com https://syndication.twitter.com https: https://code.jquery.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com https://ajax.googleapis.com https: https://code.jquery.com
font-src data: roompact.com *.roompact.com https://fonts.gstatic.com
frame-src 'self' *.wistia.com www.google.com *.twitter.com
frame-ancestors 'self' *.cienradios.com www.clarin.com *.devcr.com.ar *.cienradios-pre.com.ar prepro.int.clarin.com *.prepro.int.clarin.com viapais.com.ar *.viapais.com.ar
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://apis.google.com https://www.google-analytics.com https://secure.leadforensics.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://cdnjs.cloudflare.com
img-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://stats.g.doubleclick.net https://img.youtube.com/
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://assets.zendesk.com
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com
frame-src https://accounts.google.com https://www.gstatic.com https://www.youtube.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com
frame-src 'self' https: http://*.google.com http://*.facebook.com http://*.twitter.com http://*.youtube.com http://*.sharethis.com http://*.googletagmanager.com http://*.vimeo.com http://*.sharpspring.com http://*.googleadservices.com http://*.doubleclick.net http://*.wistia.com http://*.wistia.net https://*.cloudfront.net
connect-src 'self' https://*.tenor.co https://*.tenor.com https://api.tenor.com https://api.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://pixel.mtrcs.samba.tv
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-ytq5ndfhzgitzmi0zi00mzyxlwi3ogetmjjknmzjmgfjn2y0'
style-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com 'unsafe-inline'
font-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com
img-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://pixel.mtrcs.samba.tv http: https:
media-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com
"frame-ancestors 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp
child-src 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp https://zuora.com https://www.zuora.com https://*.cloudsponge.com https://*.doubleclick.net https://www.surveymonkey.com https://surveymonkey.com https://facebook.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.google.com https://*.evyy.net https://www.ojrq.net https://*.a8.net https://*.emjcd.com https://*.dnb.com https://*.dunsregistered.com https://*.youtube.com
frame-src 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp https://zuora.com https://www.zuora.com https://*.cloudsponge.com https://*.doubleclick.net https://www.surveymonkey.com https://surveymonkey.com https://facebook.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.google.com https://*.evyy.net https://www.ojrq.net https://*.a8.net https://*.emjcd.com https://*.dnb.com https://*.dunsregistered.com https://*.youtube.com
"default-src https: 'unsafe-inline' 'unsafe-eval' data:
"frame-src 'self' *.facebook.com *.twitter.com https://www.youtube.com http://www.youtube.com https://bid.g.doubleclick.net https://*.hotjar.com/ awaps.yandex.ru googleads.g.doubleclick.net www.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com
script-src 'self' 'nonce-33e1f18b443322f13ee57d483fdfc88d9961cdc7ee07343220077e4dcf8c5ac0' 'nonce-e71a17cd60f2574518f8d293057d70b38f6bef4c29c8208993b1ea7cbc4123b8' 'nonce-f99886d22a7db6ea7a0eeeed65e97d77b1448b46edfb6429b4b983de810ed2a9' https://cdn.ravenjs.com cdnjs.cloudflare.com http://connect.facebook.net *.facebook.net http://platform.twitter.com *.twitter.com https://webcdn.streamtest.net http://sp.analytics.yahoo.com/ https://sp.analytics.yahoo.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.yimg.com bat.bing.com *.hotjar.com http://yapi.zoomsupport.com https://yapi.zoomsupport.com https://*.stopad.io *.stopad.io https://www.google-analytics.com www.google-analytics.com https://www.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com www.googleadservices.com https://*.googleapis.com *.googleapis.com https://mc.yandex.ru mc.yandex.ru trk.cetrk.com https://dnn506yrbagrg.cloudfront.net dnn506yrbagrg.cloudfront.net https://*.newrelic.com *.newrelic.com https://s3.amazonaws.com s3.amazonaws.com https://seal.websecurity.norton.com https://gstatic.com *.gstatic.com https://google.com *.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' https://webcdn.streamtest.net https://fonts.googleapis.com fonts.googleapis.com https://fonts.gstatic.com fonts.gstatic.com *.flowplayer.org
font-src 'self' https://fonts.googleapis.com fonts.googleapis.com https://fonts.gstatic.com fonts.gstatic.com
img-src 'self' data: https://secure.gravatar.com https://stopad.io http://stopad.io http://www.streamtest.net/ https://www.google.com https://www.facebook.com bat.bing.com bat.r.msn.com http://yapi.zoomsupport.com https://yapi.zoomsupport.com https://*.stopad.io http://*.stopad.io https://www.google-analytics.com www.google-analytics.com https://www.google.com.ua www.google.com.ua https://mc.yandex.ru mc.yandex.ru trk.cetrk.com https://*.doubleclick.net *.doubleclick.net *.flowplayer.org https://seal.websecurity.norton.com
connect-src 'self' http://graylog.hotjar.com:12080 ws://*.hotjar.com wss://*.hotjar.com *.hotjar.com https://mc.yandex.ru mc.yandex.ru stopad.io *.stopad.io *.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com https://www.google-analytics.com www.google-analytics.com https://*.doubleclick.net
"frame-ancestors 'self' webvisor.com *.webvisor.com yandex.ru *.yandex.ru"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagservices.com googleads.g.doubleclick.net *.doubleclick.net *.google.ru cdn.jsdelivr.net *.top100.ru *.cloudfront.net *.google.com *.rambler.ru yandex.ru *.yandex.ru yastatic.net *.yandex.net yandex.st *.googleapis.com apis.google.com *.gstatic.com gstatic.com *.googlesyndication.com www.googleadservices.com counter.yadro.ru www.liveinternet.ru vk.com *.vk.com *.mail.ru *.twitter.com cdn.syndication.twimg.com *.facebook.net *.jquery.com cackle.me *.cackle.me
style-src 'self' 'unsafe-inline' google.com www.google.com cackle.me *.cackle.me *.yandex.ru fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'  www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com www.webtraxs.com www.youtube.com s.ytimg.com *.taleo.net www.google.com www.gstatic.com
img-src 'self' www.webtraxs.com img.youtube.com ssl.google-analytics.com
frame-src 'self' www.youtube.com *.taleo.net tmx.quotemedia.com web.tmxmoney.com www.google.com www.gstatic.com atsautomation.webdamdb.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' admin.typeform.com embed.typeform.com adservice.google.at adservice.google.ch adservice.google.fr adservice.google.de adservice.google.de adservice.google.com static.hotjar.com script.hotjar.com connect.facebook.net open.mapquestapi.com cdn.syndication.twimg.com platform.twitter.com ajax.cloudflare.com www.gstatic.com www.google.com www.google-analytics.com pagead2.googlesyndication.com
style-src 'self' 'unsafe-inline' ton.twimg.com platform.twitter.com www.google.com fonts.googleapis.com translate.googleapis.com ajax.googleapis.com
img-src 'self' data: https: www.google-analytics.com
connect-src 'self' stats.g.doubleclick.net csi.gstatic.com *.hotjar.com wss://*.hotjar.com www.google-analytics.com pagead2.googlesyndication.com
frame-src 'self' ws-eu.assoc-amazon.com rcm-eu.amazon-adsystem.com minecraftforum.typeform.com googleads.g.doubleclick.net vars.hotjar.com platform.twitter.com syndication.twitter.com www.youtube.com www.google.com www.facebook.net www.facebook.com connect.facebook.net
child-src 'self' googleads.g.doubleclick.net platform.twitter.com syndication.twitter.com vars.hotjar.com www.youtube.com
form-action 'self' discordapp.com verimi.com accounts.google.com connect.facebook.net connect.facebook.com www.facebook.com platform.twitter.com syndication.twitter.com
style-src 'self' 'unsafe-inline' *.dsta.gov.sg www.google.com https://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dsta.gov.sg https://ajax.googleapis.com https://www.google-analytics.com https://static.addtoany.com https://www.adobetag.com https://assets.adobedtm.com https://cse.google.com https://www.google.com
connect-src 'self' *.dsta.gov.sg https://wogadobeanalytics.sc.omtrdc.net https://dpm.demdex.net
font-src 'self' *.dsta.gov.sg https://fonts.googleapis.com https://fonts.gstatic.com
img-src 'self' blob: data: *.dsta.gov.sg https://ssl.gstatic.com https://clients1.google.com/generate_204 https://www.googleapis.com/generate_204 https://www.google.com *.gstatic.com/images https://www.google-analytics.com https://stats.g.doubleclick.net https://omnitureengineering.d1.sc.omtrdc.net https://cm.everesttech.net https://wogadobeanalytics.sc.omtrdc.net https://dpm.demdex.net
child-src 'self' *.dsta.gov.sg https://cse.google.com https://tools.onemap.sg https://static.addtoany.com https://fast.wogaa.demdex.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://mystudentvoices.com:443 https://*.mystudentvoices.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' pacificlight.com.sg maps.gstatic.com maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net *.amazonaws.com data:
"default-src 'unsafe-eval' 'self' *.rijksdienst.nl 'unsafe-inline'
"script-src            'self'            https://maps.googleapis.com            http://maps.googleapis.com            https://www.googletagmanager.com            http://www.googletagmanager.com            https://www.google-analytics.com           http://www.google-analytics.com           https://www.youtube.com            http://www.youtube.com            https://s.ytimg.com            http://s.ytimg.com            'unsafe-inline'
style-src            'self'            https://fonts.googleapis.com            http://fonts.googleapis.com            'unsafe-inline'
"default-src 'self' *.transunion.com *.transunion.hk *.transunion.ph *.akamai.net *.akamaiedge.net *.a-msedge.net *.chinesean.com *.cloudapp.azure.com *.cloudapp.net *.e-msedge.net *.fbcdn.net *.google.com *.google.com.hk *.google.com.ph *.google-analytics.com *.googleapis.com *.googletagmanager.com *.mathtag.com *.msftncsi.com *.optimizely.com *.trustev.com *.yahoodns.net *.addthis.co *.amazon-adsystem.com *.youtube.com *.doubleclick.net *.company-target.com *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net app.trustev.com ads.yahoo.com adserve.atedra.com analytics.twitter.com bat.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com code.jquery.com cloudfront.net fonts.googleapis.com ib.adnxs.com idsync.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com secure.fastclick.net secure.leadback.advertising.com google-analytics.com static.ads-twitter.com us-u.openx.net vjs.zencdn.net googleadservices.com gstatic.com bidswitch.net cspix.media6degrees.com googletagmanager.com
script-src 'self' *.transunion.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.g.3gl.net *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net analytics.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com hello.myfonts.net img03.en25.com m.addthisedge.com vjs.zencdn.com optimizely.s3.amazonaws.com g.3gl.net cdn.ampproject.org b.company-target.com cspix.media6degrees.com img03.en25.com static.ads-twitter.com cdn.mxpnl.com sjs.bizographics.com rum-static.pingdom.net tt.mbww.com seal.entrust.net app.trustev.com pixel.mathtag.com pagead2.googlesyndication.com tagmanager.google.com amplify.outbrain.com o1.qnsr.com connect.facebook.net cas.cluep.com blob: 'unsafe-eval' 'unsafe-inline'
child-src *.transunion.com *.crwdcntrl.net *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com vars.hotjar.com img.mediaplex.com app.optimizely.com players.brightcove.net s.amazon-adsystem.com app.trustev.com pixel.mathtag.com
media-src 'self' *.transunion.com blob: f1.media.brightcove.com
font-src data: 'self' *.transunion.hk *.transunion.ph *.transunion.com fonts.gstatic.com api.company-target.com edge.api.brightcove.com r.3gl.net s7.addthis.com popcornmetricsendpoint.herokuapp.com
"default-src 'self' data: http: https: *.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: *.google-analytics.com  *.facebook.net *.googletagmanager.com *.hs-analytics.net *.licdn.com *.gstatic.com *.googleadservices.com
font-src 'self' data: http: https: fonts.googleapis.com
script-src 'self' *.moonshade.net *.tsviewer.com 'unsafe-eval' 'unsafe-inline'
style-src 'unsafe-inline' * 'self' data:
"frame-ancestors 'self' https://office.galatent.co.uk/ http://testing.galashade.co.uk/ http://svrx.office.galatent.co.uk/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com  https://tagmanager.google.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://s.ytimg.com/yts/jsbin/www-widgetapi-vflj3rsgk/www-widgetapi.js https://www.youtube.com/player_api https://*.facebook.net https://*.facebook.com https://*.hotjar.com   https://www.google.com/ https://www.gstatic.com/ https://ajax.googleapis.com/ https://ssl.google-analytics.com https://maps.google.com https://maps.googleapis.com https://cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' https://s.ytimg.com/yts/jsbin/www-widgetapi-vflqsvpsz/www-widgetapi.js https://tagmanager.google.com https://fonts.googleapis.com/ https://ajax.googleapis.com
img-src 'self' data: https://www.google.ro https://www.google.com https://agentia.gdfsuez.ro/proc/img/get/85f1002bf139bebdb7f0d07b31fa14155aea9dfc_200_200_0.png https://ssl.gstatic.com https://www.gstatic.com  https://www.google-analytics.com  https://*.facebook.net https://*.facebook.com https://*.ytimg.com https://secure.gravatar.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://ajax.googleapis.com https://ssl.google-analytics.com https://*.hotjar.com https://*.doubleclick.net
frame-src 'self' data: https://www.facebook.com https://www.google.com/ https://www.youtube.com https://player.vimeo.com https://*.hotjar.com
child-src 'self' data: https://www.google.com/ https://www.youtube.com https://player.vimeo.com https://*.hotjar.com
connect-src 'self' data: https://*.hotjar.com https://*.hotjar.com:* wss://*.hotjar.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.youtube.com/ https://s.ytimg.com https://maps.googleapis.com https://maps.google.com https://*.liveperson.net https://*.lpsnmedia.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://load.sumome.com https://cdn.optimizely.com https://js.hs-analytics.net https://connect.facebook.net https://js.hsforms.net https://forms.hubspot.com https://js.hs-scripts.com https://communigator.co.uk https://*.communigator.co.uk https://*.gatorleads.co.uk https://t.wowanalytics.co.uk https://sumome-140a.kxcdn.com https://api.bufferapp.com https://graph.facebook.com https://api.facebook.com https://www.linkedin.com https://widgets.pinterest.com https://buttons.reddit.com https://api.hubapi.com https://api.survicate.com https://*.adroll.com https://snap.licdn.com https://*.linkedin.com https://zapier.com https://api.usemessages.com https://www.bizographics.com https://sumo.b-cdn.net https://workbooks.bamboohr.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com ajax.aspnetcdn.com www.googleadservices.com js.agkn.com d.agkn.com www.google-analytics.com www.googletagmanager.com www.google.com c.betrad.com s.pinimg.com
img-src 'self' s3.amazonaws.com ct.pinterest.com pinterest.adsymptotic.com googleads.g.doubleclick.net www.google.com azcdn.discovery.pgsitecore.com stats.g.doubleclick.net tapjoy.go2cloud.org trk.shophermedia.net track.freebies.com l.betrad.com c.betrad.com cdn.discovery.pgsitecore.com www.google-analytics.com
"frame-ancestors https://*.marincounty.org http://*.marinpublic.com https://*.mcera.org https://*.marinmap.org https://*.marinfair.org https://*.marincultural.org"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com *.doubleclick.net www.google-analytics.com ajax.googleapis.com maps.googleapis.com www.googletagmanager.com s7.addthis.com m.addthisedge.com m.addthis.com w.estat.com www.google.com www.gstatic.com
style-src 'self' 'unsafe-inline' code.jquery.com maxcdn.bootstrapcdn.com fonts.googleapis.com www.google.com ajax.googleapis.com
"default-src 'self'  'unsafe-inline'  www.google-analytics.com  https://code.jquery.com  https://disqus.com  https://*.disqus.com *.bootstrapcdn.com https://*.disquscdn.com  https://www.gravatar.com  https:
script-src  'self'  'unsafe-inline'  *.karlaporter.com   *.shanx.com *.zoeasher.com   *.amitavac.com  https://*.googleapis.com https://platform.twitter.com  https://apis.google.com  https://ssl.google-analytics.com   https://connect.facebook.net   https:
img-src  'self'  *.karlaporter.com static.shanxinc.com cache.shanx.com  *.shanx.com   *.amitavac.com   https://ssl.google-analytics.com  https://s-static.ak.facebook.com  *.zoeasher.com https://i.imgur.com https://imgur.com  https:
style-src   'self'  'unsafe-inline' *.shanx.com  *.karlaporter.com   *.amitavac.com *.zoeasher.com   https://*.ionicframework.com  https://fonts.googleapis.com  https:
font-src    'self'  https://*.ionicframework.com https://netdna.bootstrapcdn.com   https://themes.googleusercontent.com  https://fonts.gstatic.com  data:
script-src 'nonce-dgmjsumanpgpbn5t0cftyth4ag8edvcl' archmule.com next.archmule.com archmule.test *.bootstrapcdn.com cdnjs.cloudflare.com connect.facebook.net *.google-analytics.com fonts.googleapis.com *.googletagmanager.com djtflbt20bdde.cloudfront.net code.jquery.com stats.pusher.com platform.twitter.com *.twimg.com www.youtube.com s.ytimg.com
style-src archmule.com next.archmule.com archmule.test 'unsafe-inline' *.bootstrapcdn.com connect.facebook.net fonts.googleapis.com djtflbt20bdde.cloudfront.net platform.twitter.com
form-action archmule.com next.archmule.com archmule.test connect.facebook.net platform.twitter.com syndication.twitter.com
frame-src archmule.com next.archmule.com archmule.test connect.facebook.net staticxx.facebook.com djtflbt20bdde.cloudfront.net assets.braintreegateway.com checkout.paypal.com platform.twitter.com syndication.twitter.com www.youtube.com
"style-src 'self' 'nonce-bbe09212-813f-4985-a515-ee07666be1c5' https://fonts.googleapis.com/icon https://fonts.googleapis.com/css
img-src 'self' https://discordapp.com https://cdn.discordapp.com https://www.google-analytics.com http://placehold.it/250x250 https://upload.wikimedia.org/wikipedia/commons/thumb/0/0c/vector_loading.svg/2000px-vector_loading.svg.png
script-src https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js 'nonce-dc62c571-cf71-4661-b15c-a7920594bb84' https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.6-rc.0/js/select2.min.js https://cdn.jsdelivr.net/npm/marked/marked.min.js https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js https://www.googletagmanager.com/gtag/js https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.google-analytics.com/analytics.js
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.abcstores.com *.googleapis.com *.google-analytics.com *.gstatic.com *.cdninstagram.com *.addthis.com *.addthiscdn.com *.magentocommerce.com *.moogento.com *.amasty.com *.paypalobjects.com *.paradoxlabs.com *.authorize.net *.google.com *.doubleclick.net"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.co.il https://*.yandex.co.il static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.co.il *.yandex.co.il
font-src 'self' https://yastatic.net zen.yandex.co.il static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.co.il https://passport.yandex.co.il wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.co.il *.yandex.co.il
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.co.il https://*.yandex.co.il *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.co.il *.yandex.co.il
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.co.il https://www.yandex.co.il https://pass.yandex.co.il https://mc.yandex.co.il zen.yandex.co.il an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.co.il www.yandex.co.il suggest.yandex.co.il
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.co.il static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
img-src 'self' data: blob: filesystem: https: http: 'unsafe-inline'"
"media-src 'self' *.myeducator.com *.readspeaker.com *.vimeo.com *.vzaar.com *.youtube.com
frame-src 'self' *.readspeaker.com *.stripe.com *.vimeo.com *.youtube.com *.vzaar.com www.google.com wchat.freshchat.com *.webpush.freshchat.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.readspeaker.com wchat.freshchat.com"
script-src 'strict-dynamic' 'nonce-zwuwognjyjetm2uzos00ytllltgwnmutzgy1owmwytexy2qz' 'unsafe-inline' https: http:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.ostrovok.ru ostrovok.ru *.worldota.net *.zenhotels.com zenhotels.com api.payota.net t.skyscnr.com secde.trivago.com unpkg.com www.googletraveladservices.com www.tripadvisor.com www.kayak.com www.clicktripz.com www.youtube.com s3-eu-west-1.amazonaws.com travel.mediaalpha.com notify.bugsnag.com 3kxrt0l29e.execute-api.us-east-1.amazonaws.com *.hotjar.com fonts.gstatic.com *.livetex.ru tagmanager.google.com www.tamgrt.com cdn.branch.io app.link api.branch.io api2.branch.io www.googleadservices.com sslwidget.criteo.com static.criteo.net vk.com connect.facebook.net www.facebook.com top-fwz1.mail.ru www.hometogo.com secure.wego.com static.tacdn.com static.clicktripz.com pixel.sojern.com ads.travelaudience.com tms-st.cdn.ngenix.net hit.acstat.com c.riskified.com beacon.riskified.com cdn.dynamicyield.com cdn.siftscience.com d3c3cq33003psk.cloudfront.net www.awin.com www.google-analytics.com www.googletagmanager.com mc.yandex.ru tag.yieldoptimizer.com a.cdn.intentmedia.net st.dynamicyield.com static.dynamicyield.com *.criteo.com a.intentmedia.net px.dynamicyield.com opentag-stats.qubit.com *.g.doubleclick.net 6ytvy2ekla.execute-api.us-east-1.amazonaws.com fonts.googleapis.com maps.googleapis.com www.google.com www.googletagservices.com adservice.google.com c.triptech.ai s.clickiocdn.com *.googlesyndication.com cdn.ampproject.org clickiocdn.com adservice.google.ru csi.gstatic.com *.braintreegateway.com tag.crsspxl.com aa.agkn.com blip.bizrate.com c1.adform.net ce.lijit.com cm.g.doubleclick.net cms.analytics.yahoo.com d.turn.com dmp.truoptik.com dpm.demdex.net e.dlx.addthis.com ib.adnxs.com idsync.rlcdn.com io.narrative.io match.adsrvr.org partner.mediawallahscript.com pm.w55c.net pxl.connexity.net sync.crwdcntrl.net sync.mathtag.com tags.bluekai.com thrtle.com
frame-src 'self' *.ostrovok.ru *.worldota.net *.zenhotels.com www.youtube.com widgets-2-omni-iframe.livetex.ru tracking.bonusway.com checkout.paypal.com static.criteo.net gum.criteo.com dis.eu.criteo.com www.google.com a.cdn.intentmedia.net www.tamgrt.com bid.g.doubleclick.net clickioadvd.com googleads.g.doubleclick.net www.facebook.com web.facebook.com tpc.googlesyndication.com vars.hotjar.com vk.com staticxx.facebook.com tag.crsspxl.com
\t\t\tscript-src 'self' 'unsafe-inline' 'unsafe-eval' static.zdassets.com assets.zendesk.com ersp.zendesk.com bam.nr-data.net js-agent.newrelic.com ajax.aspnetcdn.com localhost:35729 www.google.com ssl.google-analytics.com js.appcenter.intuit.com ajax.googleapis.com www.gstatic.com/recaptcha/ conv.indeed.com gateway.ibxpays.com sandbox.ibxpays.com
\t\t\tconnect-src 'self' ersp.zendesk.com ekr.zdassets.com sandbox.ibxpays.com gateway.ibxpays.com
\t\t\timg-src 'self' blob: data: www.google.com kaleidablog.files.wordpress.com erspkaleida.files.wordpress.com ssl.google-analytics.com js.appcenter.intuit.com conv.indeed.com ersp.zendesk.com
\t\t\tframe-src 'self' assets.zendesk.com player.vimeo.com www.google.com/recaptcha/ conv.indeed.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com www.google.com ajax.googleapis.com *.createsend1.com use.typekit.net assets.pinterest.com log.pinterest.com public.tockify.com www.googletagmanager.com www.youtube.com
img-src 'self' data: www.google-analytics.com *.doubleclick.net p.typekit.net www.arborday.org assets.pinterest.com www.googletagmanager.com www.gstatic.com
font-src 'self' data: use.typekit.net fonts.gstatic.com
frame-src 'self' www.youtube.com *.createsend1.com tockify.com www.google.com ajax.googleapis.com www.googletagmanager.com gsa://onpageload
"default-src https: 'unsafe-inline' 'unsafe-eval' wss://* 'self'"
script-src * 'unsafe-inline' 'unsafe-eval' https:"
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://ssl.google-analytics.com https://ajax.googleapis.com
"default-src 'self' 'unsafe-inline' https://piwik.bzga.de/ https://service.bzga.de/ https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://c.tile.openstreetmap.org/"
"default-src https: *.atncorp.com atncorp.app *.thor-scope.com
img-src http: https: data: *.atncorp.com *.atncorp.app *.thor-scope.com *.crazyegg.com *.facebook.net *.facebook.com *.googletagmanager.com *.ytimg.com
font-src https: data: *.atncorp.com *.atncorp.app *.thor-scope.com
style-src https 'unsafe-inline' *.atncorp.com *.atncorp.app *.thor-scope.com *.jivosite.com *.bootstrapcdn.com *.googleapis.com www.google.com
connect-src *.atncorp.com *.atncorp.app *.thor-scope.com *.jivosite.com wss://*.jivosite.com *.google-analytics.com *.yandex.ru *.doubleclick.net
script-src 'unsafe-inline' 'unsafe-eval' *.atncorp.com *.atncorp.app *.thor-scope.com *.crazyegg.com *.jivosite.com *.googleapis.com *.googleadservices.com *.vantivprelive.com *.vantivcnp.com *.online-metrix.net *.yandex.ru *.google-analytics.com *.criteo.net *.criteo.com *.facebook.net *.facebook.com *.crazyegg.com *.googletagmanager.com *.zendesk.com *.avmws.com *.gstatic.com *.youtube.com *.ytimg.com www.google.com
script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com https://www.google-analytics.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://eu1.snoobi.com https://dnn506yrbagrg.cloudfront.net https://occhat.elisa.fi wss://occhat.elisa.fi https://static.hotjar.com https://vars.hotjar.com https://script.hotjar.com https://insights.hotjar.com https://in.hotjar.com https://mnater.github.io https://www.youtube.com https://livestream.com https://www.emaileri.fi  https://prh.boost.ai https://vero.boost.ai https://networkmigri.boost.ai data:"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com translate.google.com translate.googleapis.com ajax.googleapis.com code.jquery.com www.googletagmanager.com"
"default-src 'self' *.pusher.com wss://ws-mt1.pusher.com wss://ws.pusherapp.com 209307.selcdn.ru *.voximplant.com *.criteo.net suggestions.dadata.ru dadata.ru rocketbank.ru *.rocketbank.ru *.rocket-cdn.ru mc.yandex.ru api.honeybadger.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net suggestions.dadata.ru *.pusher.com pixel.betweenx.com api-maps.yandex.ru enterprise.api-maps.yandex.ru maps.googleapis.com static.criteo.net *.criteo.net cdn.jsdelivr.net *.googleadservices.com *.youtube.com analytics.twitter.com bn.adblender.ru connect.facebook.net *.g.doubleclick.net mc.yandex.ru s.ytimg.com script.crazyegg.com sslwidget.criteo.com static.ads-twitter.com top-fwz1.mail.ru www.google-analytics.com www.google.com www.google.ru www.googletagmanager.com yandex.st *.rocket-cdn.ru js-agent.newrelic.com bam.nr-data.net vk.com
frame-src rocketbank.ru *.rocketbank.ru 209307.selcdn.ru *.voximplant.com *.fls.doubleclick.net gum.criteo.com staticxx.facebook.com dis.eu.criteo.com www.facebook.com *.googleadservices.com *.youtube.com analytics.twitter.com bn.adblender.ru connect.facebook.net *.g.doubleclick.net mc.yandex.ru s.ytimg.com script.crazyegg.com sslwidget.criteo.com static.ads-twitter.com top-fwz1.mail.ru www.google-analytics.com www.google.com www.google.ru www.googletagmanager.com
style-src 'self' 'unsafe-inline' blob: rocketbank.ru cdn.jsdelivr.net *.rocket-cdn.ru js-agent.newrelic.com suggestions.dadata.ru
font-src https: 'self' *.gstatic.com data:
media-src 'self' *.rocket-cdn.ru *.selcdn.ru *.voximplant.com s3.rocketbank.ru.s3.amazonaws.com http://s3.rocketbank.ru.s3.amazonaws.com
frame-ancestors 'self' rocketbank.ru *.rocketbank.ru webvisor.com *.yandex.net *.mtproxy.yandex.net
"default-src https: data: 'unsafe-eval' 'unsafe-inline' 'self'"
"default-src https: data: 'unsafe-inline' 'unsafe-eval' script-src 'self'"
style-src 'self' 'unsafe-inline' 'unsafe-eval'                                                                     https://www.urbanthreads.com http://www.urbanthreads.com urbanthreads.com                                   https://fonts.googleapis.com http://www.fonts.googleapis.com fonts.googleapis.com *.fonts.googleapis.com
script-src 'self' 'unsafe-eval' 'unsafe-inline'                                                                     https://www.urbanthreads.com http://www.urbanthreads.com urbanthreads.com                                   https://www.google-analytics.com http://www.google-analytics.com google-analytics.com *.google-analytics.com                                   https://ajax.googleapis.com http://www.ajax.googleapis.com ajax.googleapis.com *.ajax.googleapis.com                                   http://www.seal.verisign.com/getseal seal.verisign.com/getseal *.seal.verisign.com/getseal                                   https://www.googleadservices.com/pagead/conversion.js' http://www.googleadservices.com/pagead/conversion.js' www.googleadservices.com/pagead/conversion.js                                   https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ http://googleads.g.doubleclick.net/pagead/viewthroughconversion/ googleads.g.doubleclick.net/pagead/viewthroughconversion/                                   https://www.googletagmanager.com/ http://www.googletagmanager.com/ googletagmanager.com/                                   https://bat.bing.com/bat.js http://bat.bing.com/bat.js bat.bing.com/bat.js                                   https://s.yimg.com/wi/ http://s.yimg.com/wi/ s.yimg.com/wi/                                   https://sp.analytics.yahoo.com/sp.pl http://sp.analytics.yahoo.com/sp.pl sp.analytics.yahoo.com/sp.pl
img-src 'self'                                    https://www.urbanthreads.com http://www.urbanthreads.com urbanthreads.com                                    privacy-policy.truste.com                                    https://www.google-analytics.com http://www.google-analytics.com google-analytics.com *.google-analytics.com                                      https://stats.g.doubleclick.net http://www.stats.g.doubleclick.net stats.g.doubleclick.net *.stats.g.doubleclick.net                                   https://www.google.com http://www.google.com google.com *.google.com                                   https://seal.websecurity.norton.com/getseal https://seal.websecurity.norton.com/getseal seal.websecurity.norton.com/getseal                                   https://www.googletagmanager.com/ http://www.googletagmanager.com/ googletagmanager.com/                                   https://bat.bing.com/action/ http://bat.bing.com/action/ bat.bing.com/action/
script-src 'strict-dynamic' 'nonce-zmfiotc4m2qtzwm1os00ntbkltkxm2itnjqzzwvloti5mmyz' 'unsafe-inline' https: http:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://timeline.com:443 https://*.timeline.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://instagram-engineering.com:443 https://*.instagram-engineering.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.litix.io embedwistia-a.akamaihd.net/ https://*.marketo.net https://*.wistia.com https://1.tl813.com https://a.adroll.com/ https://a.sfdcstatic.com https://analytics.twitter.com https://apis.google.com https://app-sj15.marketo.com https://autocomplete.demandbase.com https://cdn.optimizely.com https://checkout.stripe.com https://connect.facebook.net https://d.adroll.com/ https://demdex.com https://dpm.demdex.net https://fast.wistia.com https://fast.wistia.net/ https://fullstory.com https://googleads.g.doubleclick.net/ https://js.adsrvr.org/ https://js.intercomcdn.com https://m.addthis.com https://m.addthisedge.com https://omtr2.partners.salesforce.com https://platform.twitter.com https://px.ads.linkedin.com/ https://quip-cdn.com https://s.adroll.com/ https://s7.addthis.com https://scripts.demandbase.com https://sdk.snapkit.com https://secure2.sfdcstatic.com https://sjs.bizographics.com https://snap.licdn.com/ https://src.litix.io https://ssl.google-analytics.com https://static.ads-twitter.com https://t.sf14g.com https://tag.demandbase.com/shared/forms.min.js https://tagmanager.google.com https://tracking.g2crowd.com https://vidassets.terminus.services https://widget.intercom.io https://wistia.com https://www-onepick-opensocial.googleusercontent.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com/csp/dtag
"frame-src 'self' www.boutiquekarinarasga.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to
script-src 'self'  https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com
style-src 'self'  https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com
child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com
connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net submit.jotformpro.com
font-src 'self'  https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com use.typekit.net fonts.gstatic.com fonts.googleapis.com
img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io
media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://www.gstatic.com https://ajax.cloudflare.com
"script-src 'self' 'strict-dynamic' https: http: 'nonce-j1whwewig4k2kqfl'
style-src 'self' fonts.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com 'nonce-j1whwewig4k2kqfl'
"default-src 'self' *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.be *.google.com *.gstatic.com ajax.googleapis.com buttons-config.sharethis.com cdnjs.cloudflare.com code.highcharts.com code.jquery.com count-server.sharethis.com d3js.org fonts.googleapis.com img.toolstud.io l.sharethis.com maxcdn.bootstrapcdn.com pagead2.googlesyndication.com platform-api.sharethis.com use.fontawesome.com
script-src 'self' 'unsafe-inline' data: *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.be *.google.com *.gstatic.com ajax.googleapis.com buttons-config.sharethis.com cdnjs.cloudflare.com code.highcharts.com code.jquery.com count-server.sharethis.com d3js.org fonts.googleapis.com img.toolstud.io l.sharethis.com maxcdn.bootstrapcdn.com pagead2.googlesyndication.com platform-api.sharethis.com use.fontawesome.com
style-src 'self' 'unsafe-inline' data: *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.be *.google.com *.gstatic.com ajax.googleapis.com buttons-config.sharethis.com cdnjs.cloudflare.com code.highcharts.com code.jquery.com count-server.sharethis.com d3js.org fonts.googleapis.com img.toolstud.io l.sharethis.com maxcdn.bootstrapcdn.com pagead2.googlesyndication.com platform-api.sharethis.com use.fontawesome.com
img-src 'self' data: *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.be *.google.com *.gstatic.com ajax.googleapis.com buttons-config.sharethis.com cdnjs.cloudflare.com code.highcharts.com code.jquery.com count-server.sharethis.com d3js.org fonts.googleapis.com img.toolstud.io l.sharethis.com maxcdn.bootstrapcdn.com pagead2.googlesyndication.com platform-api.sharethis.com use.fontawesome.com
media-src 'self' data: *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.be *.google.com *.gstatic.com ajax.googleapis.com buttons-config.sharethis.com cdnjs.cloudflare.com code.highcharts.com code.jquery.com count-server.sharethis.com d3js.org fonts.googleapis.com img.toolstud.io l.sharethis.com maxcdn.bootstrapcdn.com pagead2.googlesyndication.com platform-api.sharethis.com use.fontawesome.com
script-src 'self' data: www.google-analytics.com maps.googleapis.com developers.google.com www.google.com www.gstatic.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com
"connect-src 'self' https://disqus.com *.disqus.com *.disquscdn *.addthis.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube-nocookie.com https://data.obud.cz https://www.openstreetmap.org data:
"frame-ancestors 'self' https://www.xtramile.no https://www-xtramile-no.filesusr.com https://new.xtramile.no"
"frame-ancestors 'self' *.prizelogic.com *.facebook.com *.doubleclick.net *.destinilocators.com *.icims.com *.google.com *.nissinfoods.com jumpforce.nissinfoods.com nissinfoods.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.congressweb.com https://cdnjs.cloudflare.com/ajax/libs/ *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://code.jquery.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com
img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com https://archaeology.blob.core.windows.net https://images.saa.org https://documents.saa.org data: blob: *.eloqua.com
font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:
connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com
frame-src 'self' https://www.congressweb.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.erieinsurance.com www.googletagmanager.com www.google-analytics.com maps.googleapis.com www.vimeo.com f.vimeocdn.com www.youtube.com gdata.youtube.com s.ytimg.com/ s7.addthis.com m.addthis.com m.addthisedge.com graph.facebook.com www.linkedin.com widgets.pinterest.com www.googleadservices.com connect.facebook.net cdn.taboola.com assets.pinterest.com tagmanager.google.com www.erienoregrets.com *.erienoregrets.com www.insurancejournal.com amplify.outbrain.com widgets.outbrain.com googleads.g.doubleclick.net *.erieinsurance.com cdn.appdynamics.com/ cdn.appdynamics.com blob: erieindemnitycompany.gcs-web.com cdn.levelaccess.net dcc4iyjchzom0.cloudfront.net api.levelaccess.net
style-src 'self' 'unsafe-inline' http://www.erieinsurance.com cloud.typography.com fonts.googleapis.com https://www.erieinsurance.com tagmanager.google.com www.erienoregrets.com *.erienoregrets.com erieindemnitycompany.gcs-web.com
img-src 'self' http://www.erieinsurance.com www.googletagmanager.com www.google-analytics.com www.google.com *.gstatic.com maps.googleapis.com maps.gstatic.com stats.g.doubleclick.net https://googleads.g.doubleclick.net data: www.addthis.com www.facebook.com trc.taboola.com log.pinterest.com www.erienoregrets.com *.erienoregrets.com www.insurancejournal.com *.outbrain.com erieindemnitycompany.gcs-web.com
media-src 'self' http://www.erieinsurance.com www.youtube.com player.vimeo.com www.erienoregrets.com *.erienoregrets.com erieindemnitycompany.gcs-web.com
frame-src 'self' http://www.erieinsurance.com www.youtube.com player.vimeo.com investor.shareholder.com emails.erieinsurance.com www.boombox.com cdns.snacktools.net s7.addthis.com app.qzzr.com www.qzzr.com www.erienoregrets.com *.erienoregrets.com assets.pinterest.com www.tout.com bid.g.doubleclick.net erieindemnitycompany.gcs-web.com
font-src 'self' http://www.erieinsurance.com fonts.gstatic.com data: www.erienoregrets.com *.erienoregrets.com erieindemnitycompany.gcs-web.com
connect-src 'self' http://www.erieinsurance.com apps.shareholder.com m.addthis.com www.erienoregrets.com *.erienoregrets.com connect.facebook.net cdn.taboola.com www.youtube.com tagmanager.google.com *.erieinsurance.com cdn.appdynamics.com/ cdn.appdynamics.com erieindemnitycompany.gcs-web.com
sandbox allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation
connect-src 'self' https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' *
font-src 'self' data: https://nouw.com https://fonts.gstatic.com 'unsafe-inline' 'unsafe-eval' *
form-action 'self' http://nouw.com *.facebook.com *.facebook.net https://secure.pay-read.se
frame-src 'self' *.youtube.com *.spotify.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval' *
script-src 'self' https://nouw.com https://cdnjs.cloudflare.com *.facebook.com *.facebook.net https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' *"
img-src 'self' csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com data:
script-src 'unsafe-inline' 'unsafe-eval' 'self' ajax.googleapis.com https://maps.googleapis.com https://maps.gstatic.com
script-src 'strict-dynamic' 'nonce-mdlhyzc2nzmtymjinc00mjniltk4njmtn2u2zgi5ntfhnzhh' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.rpdata.com *.mixpanel.com *.liveperson.net *.lpsnmedia.net *.google-analytics.com *.mxpnl.com *.uservoice.com *.scoutanalytics.net *.googleapis.com *.google.com *.rpdata.com *.segment.com *.twitter.com *.appcues.com *.min.js *.appcues.net *.firebaseio.com *.chatlio.com *.hotjar.com *.gstatic.com"
"default-src 'self' *.tradingview.com *.amcharts.com *.amazonaws.com *.sentry.io *.pusher.com *.crisp.com *.googleapis.com *.inexxclubexchange.com *.3xbit.com.br
style-src 'self' 'unsafe-inline' *.amcharts.com *.googleapis.com *.amazonaws.com *.freshdesk.com *.crisp.com *.crisp.chat
connect-src 'self' *.3xbit.com.br *.inexxclubexchange.com sentry.io *.sentry.io *.amazonaws.com *.pusher.com wss://*.crisp.chat wss://*.pusher.com *.crisp.chat
img-src 'self' *.google-analytics.com *.googletagmanager.com *.crisp.com *.crisp.chat *.doubleclick.net data:
font-src 'self' *.crisp.chat *.gstatic.com *.googleapis.com
script-src 'self' 'unsafe-inline' *.ytimg.com *.youtube.com *.cloudfront.net  *.fontawesome.com *.crisp.com *.crisp.chat *.freshdesk.com *.cloudflare.com *.amazonaws.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.google-analytics.com *.sentry.io *.pusher.com
frame-src 'self' *.google.com *.youtube.com *.freshdesk.com *.crisp.com *.tradingview.com
script-src 'self' https: data: 'unsafe-inline' *.typekit.net www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.twitter.com *.twimg.com *.instagram.com maps.gstatic.com maps.googleapis.com *.youtube.com *.vimeo.com static.ctctcdn.com 'nonce-++qxdsckcf/9/hke4zwttg=='
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypal.com  https://www.paypalobjects.com  https://www.googleadservices.com https://www.googletagmanager.com *.doubleclick.net  https://cdn.jsdelivr.net  www.facebook.com  https://embed.tawk.to  https://bam.nr-data.net  https://js-agent.newrelic.com  https://apis.google.com  https://www.gstatic.com https://appcenter.intuit.com https://www.google.com https://www.google-analytics.com https://ajax.googleapis.com  http://local.saasant.com
img-src 'self' *.doubleclick.net https://www.google.com https://www.google.co.in  https://*.tawk.to  ssl.comodo.com  https://appcenter.intuit.com https://www.google-analytics.com https://www.sandbox.paypal.com https://www.paypal.com http://local.saasant.com  https://ssl.gstatic.com  data:
style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net  https://fonts.googleapis.com  https://appcenter.intuit.com http://local.saasant.com
font-src 'self' https://static-v.tawk.to  https://fonts.gstatic.com  data:
frame-src 'self' https://*.facebook.com  https://*.tawk.to  https://mp.liferay.com  https://www.google.com https://youtu.be https://www.youtube.com
connect-src 'self' *.doubleclick.net  wss://*.tawk.to https://*.tawk.to https://ssl.google-analytics.com https://appcenter.intuit.com https://local.saasant.com https://www.google.com https://www.google-analytics.com"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.platform.uc.se *.allabolag.se allabolag.se *.episerver.net *.myfonts.net *.googletagmanager.com *.hotjar.com *.facebook.net *.google-analytics.com *.apsislead.com sjs.bizographics.com *.linkedin.com *.jobylon.com *.youtube.com *.prospecteye.com *.ytimg.com"
script-src 'self' img.onehash.com browser.sentry-cdn.com www.google.com www.gstatic.com *.facebook.net *.cloudflare.com www.google-analytics.com player.twitch.tv *.googleapis.com cvp.twitch.tv www.youtube.com f0a903cc-ef01-4bb4-82d5-d3098aed1fdb.curacao-egaming.com https://widget.userengage.com 'nonce-606f4917-e8a5-43be-abe2-3333dc9252fc'
connect-src 'self' *.mil.ru *.tildacdn.com *.gcdn.co *.mail.ru top100.ru mc.yandex.ru *.anycaster.tv *.vintera.tv *.cdnvideo.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' tildacdn.com *.tildacdn.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mil.ru *.rambler.ru *.yandex.ru *.mail.ru *.google-analytics.com *.google.com top100.ru *.top100.ru *.tvzvezda.ru tvzvezda.ru *.mail.ru tns-counter.ru *.tns-counter.ru *.googletagmanager.com mil.ru *.mil.ru *.xn--90anlfbebar6i.xn--p1ai
style-src 'self' 'unsafe-inline' mil.ru *.mil.ru *.googleapis.com
img-src 'self' mil.ru *.mil.ru doubleclick.net *.doubleclick.net tns-counter.ru *.tns-counter.ru *.google.com google.com data: counter.yadro.ru *.yandex.net *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru
media-src 'self' mil.ru *.mil.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.xn--90anlfbebar6i.xn--p1ai
frame-src 'self' mil.ru *.mil.ru vk.com *.vk.com ok.ru *.ok.ru tvzvezda.ru *.tvzvezda.ru *.yandex.ru *.yandex.net *.youtube.com youtube.com *.youtu.be youtu.be *.google.com *.vintera.tv *.cdnvideo.ru
font-src 'self' fonts.gstatic.com tildacdn.com *.tildacdn.com *.mil.ru *.vintera.tv *.cdnvideo.ru *.mil.ru *.youtube.com *.youtube.com *.youtu.be *.google.com
frame-ancestors 'self' http://mil.ru http://*.mil.ru https://mil.ru https://*.mil.ru https://youtube.com https://*.youtube.com https://youtu.be https://*.youtu.be
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://yazilimportal.com:443 https://*.yazilimportal.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.google-analytics.com/ https://cdn.plaid.com/ data:
frame-src 'self' https://www.google.com/recaptcha/ https://player.vimeo.com/ https://*.privacy.com/ https://*.facebook.com/ https://cdn.plaid.com/
"connect-src 'self' https: https://api.womany.net https://cn-api.womany.net https://en-api.womany.net https://jp-api.womany.net https://member.womany.net https://go.justfont.com"
"default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://steamcommunity-a.akamaihd.net/ https://api.steampowered.com/ https://steamcdn-a.akamaihd.net/steamcommunity/public/assets/ *.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com
connect-src 'self' https://api.steampowered.com/ https://store.steampowered.com/ wss://community.steam-api.com/websocket/ *.google-analytics.com http://127.0.0.1:27060 ws://127.0.0.1:27060
frame-src 'self' steam: https://store.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com
"default-src https://ssl.gstatic.com https://www.gstatic.com https://cdnjs.cloudflare.com tagmanager.google.com  https://ion.fiserv.com https://connect.facebook.net www.youtube.com https://players.brightcove.net https://hls.cf.brightcove.com https://fonts.gstatic.com https://fonts.googleapis.com https://cdn.hypemarks.com www.digitalfileshares.com https://brightcove.hs.llnwd.net www.fiserv.com https://www.fiserv.com https://vjs.zencdn.net https://www.google.ca https://*.addthis.com https://www.google.com https://secure.brightcove.com https://f1.media.brightcove.com data: https://metrics.brightcove.com https://edge.api.brightcove.com blob: https://*.doubleclick.net https://www.google.com https://8174811.fls.doubleclick.net https://www.google-analytics.com https://t.co https://stats.g.doubleclick.net https://vlog.leadformix.com https://www.facebook.com https://secure.adnxs.com https://www.pages05.net https://*.pingdom.net https://*.linkedin.com 'unsafe-inline' 'unsafe-eval'
script-src https://tagmanager.google.com https://ajax.googleapis.com https://8f2a3f802cdf2859af9e-51128641de34f0801c2bd5e1e5f0dc25.ssl.cf1.rackcdn.com https://api.keen.io https://www.fiserv.com https://s.ytimg.com https://www.youtube.com https://www.tintup.com https://*.cloudfront.net www.fiserv.com https://www.googletagmanager.com https://*.addthis.com https://m.addthisedge.com https://www.sc.pages05.net https://www.google-analytics.com https://sjs.bizographics.com https://static.ads-twitter.com https://*.pingdom.net https://snap.licdn.com https://vlog.leadformix.com https://*.facebook.com https://*.twitter.com https://www.google.com https://*.facebook.net https://*.linkedin.com https://*.adnxs.com https://players.brightcove.net https://vjs.zencdn.net https://www.fiserv.com blob: https://www.bizographics.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.scanalert.com *.mcafeesecure.com *.emsinet.com *.emsiqa.com *.emsiuat.com *.emsinet-test.com"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https://fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com
img-src 'self' data: https://www.google-analytics.com https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru *.googlesyndication.com top-fwz1.mail.ru https://adservice.google.by http://googleads.g.doubleclick.net http://pagead https://d31j93rd8oukbv.cloudfront.net https://*.doubleclick.net https://*.youtube.com *.ampproject.org https://*.ampproject.org https://*.ampproject.net https://*.ampproject.org *.ampproject.net https://*.googlesyndication.com https://*.mxpnl.net wp.quttera.com https://*.quttera.com https://*.doubleclick.net socialmart.ru *.socialmart.ru data:
connect-src 'self' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru data: top-fwz1.mail.ru https://mc.yandex.by https://syndication.twitter.com https://report-1.appmetrica.webvisor.com https://mc.yandex.ru https://ymetrica.com https://mc.webvisor.org https://mail.yandex.fr *.google-analytics.com *.googletagservices.com https://counter.yadro.ru https://*.doubleclick.net https://*.gstatic.com *.gstatic.com *.ampproject.org https://*.ampproject.org https://*.ampproject.net *.ampproject.net ff-input.mxpnl.net https://mc.yandex.com.tr https://*.googlesyndication.com api3.adsload.net api.mixpanel.com https://*.google-analytics.com google-analytics.com https://google-analytics.com *.googletagservices.com youtube.com https://youtube.com ytimg.com https://ytimg.com *.yandex.ru https://*.yandex.ru https://*.yandex.ua https://*.yandex.net *.youtube.com https://*.youtube.com *.ytimg.com https://*.ytimg.com
font-src 'self' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru data: netdna.bootstrapcdn.com https://sxt.cdn.skype.com *.socialmart.ru https://mc.yandex.ua https://mc.yandex.com.tr https://mc.yandex.by top-fwz1.mail.ru https://*.googlesyndication.com *.googlesyndication.com *.gstatic.com https://*.gstatic.com
frame-src 'self' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru socialmart.ru pagead https://twitter.com https://platform.twitter.com gsa://onpageload https://*.ampproject.net *.ampproject.net https://*.googlesyndication.com https://*.doubleclick.net *.doubleclick.net *.socialmart.ru *.google.com *.doubleclick.net https://*.google.com yastatic.net https://yastatic.net youtube.com https://youtube.com ytimg.com https://ytimg.com *.yandex.ru https://*.yandex.ru *.youtube-nocookie.com https://*.youtube-nocookie.com *.youtube.com https://*.youtube.com *.ytimg.com https://*.ytimg.com
img-src 'self' http://samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru https://metrika-informer.com https://smartfonoff.mobi 0.gravatar.com https://mc.yandex.ua https://ymetrica.com https://s3.amazonaws.com cdn3.org *.googlezip.net https://mc.webvisor.org cdncash.net https://*.googlesyndication.com *.googletagmanager.com tradeadsexchange.com *.cdncash.net *.twitter.com https://*.grammarly.io https://*.twimg.com https://*.doubleclick.net https://syndication.twitter.com socialmart.ru counter.rambler.ru *.socialmart.ru ps.w.org awsmedia.s3.amazonaws.com https://wordpress.org https://secure.gravatar.com https://quttera.com wp.quttera.com s.w.org https://s.w.org *.noreplied.com *.googlesyndication.com counter.yadro.ru *.worldpressphoto.org top-fwz1.mail.ru kraken.rambler.ru data: *.google-analytics.com https://*.google-analytics.com *.google.com https://*.google.com *.googleapis.com https://*.googleapis.com *.gstatic.com https://*.gstatic.com google-analytics.com https://google-analytics.com yandex.st https://yandex.st yastatic.net https://yastatic.net *.yandex.net https://*.yandex.net *.yandex.ru https://*.yandex.ru *.ytimg.com https://*.ytimg.com
object-src 'self' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru https://*.googlesyndication.com *.googlesyndication.com youtube.com https://youtube.com ytimg.com https://ytimg.com *.youtube.com https://*.youtube.com *.ytimg.com https://*.ytimg.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://smartfonoff.mobi samsung-galaxy-s7.ru https://adservice.google.ge https://adservice.google.co.uk https://mc.yandex.fr https://adservice.google.az https://adservice.google.de https://adservice.google.lt https://mc.yandex.by https://adservice.google.co.kr https://adservice.google.by https://adservice.google.nl https://d31j93rd8oukbv.cloudfront.net https://mc.yandex.ua https://mc.yandex.kz https://adservice.google.com.ua https://adservice.google.ge https://adservice.google.am https://adservice.google.com.tr https://adservice.google.co.il https://adservice.google.ae https://adservice.google.kz https://adservice.google.md https://adservice.google.lv https://adservice.google.pl https://adservice.google.co.jp https://adservice.google.it https://adservice.google.ru https://adservice.google.co.uz https://ymetrica.com https://mc.webvisor.org https://code.jquery.com *.twitter.com https://*.doubleclick.net https://*.ampproject.net *.ampproject.net https://*.ampproject.org *.ampproject.org *.googletagservices.com *.googletagmanager.com *.samsung-galaxy-s7.ru s3.amazonaws.com https://cdn.syndication.twimg.com *.google-analytics.com cdn.jsdelivr.net https://mc.yandex.com.tr https://*.ampproject.org *.ampproject.org *.twitter.com https://*.twitter.com socialmart.ru *.socialmart.ru *.mxpnl.com *.mxpnl.net top-fwz1.mail.ru counter.rambler.ru kraken.rambler.ru googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com *.google-analytics.com https://*.google-analytics.com *.google.com https://*.google.com *.googleapis.com https://*.googleapis.com *.gstatic.com https://*.gstatic.com google-analytics.com https://google-analytics.com yandex.st https://yandex.st yastatic.net https://yastatic.net *.yandex.ru https://*.yandex.ru
style-src 'self' 'unsafe-inline' https://smartfonoff.mobi samsung-galaxy-s7.ru *.samsung-galaxy-s7.ru *.twitter.com https://*.yandex.ua socialmart.ru *.socialmart.ru *.bootstrapcdn.com *.googleapis.com https://*.googleapis.com *.gstatic.com https://*.gstatic.com *.yandex.ru https://*.yandex.ru
"script-src 'self'  'unsafe-eval'  'unsafe-inline' https://az416426.vo.msecnd.net https://www.googletagmanager.com https://connect.facebook.net  https://aturangipr1admin.azurewebsites.net https://aturangipr1bot.azurewebsites.net http://assets.adobedtm.com https://www.gstatic.com https://www.google-analytics.com/  http://www.google-analytics.com/ code.jquery.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://www.google.com/ https://fonts.googleapis.com/ https://googleapis.com/ http://sharebutton.co https://sharebutton.co http://www.sharebutton.co https://www.sharebutton.co https://connect.facebook.net/en_us/fbevents.js https://www.googleadservices.com/pagead/conversion.js https://connect.facebook.net/en_us/fbevents.plugins.identity.js https://script.crazyegg.com/pages/scripts/0053/5576.js https://tags.bkrtx.com/js/bk-coretag.js https://s3.amazonaws.com/trk.cetrk.com/7/t.js https://nedgroupinvestments.nedsecure.co.za:4434/dist/vendor.css https://nedgroupinvestments.nedsecure.co.za:4434/dist/main-client.js https://nedgroupinvestments.nedsecure.co.za:4434/dist/vendor.js"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://fast.fonts.net
child-src https://www.youtube.com/ https://player.vimeo.com/ https://netverify.com https://coinlist.co https://cdn.plaid.com
connect-src wss://websocket.coinlist.co/ 'self' https://*.intercom.io wss://*.intercom.io https://www.google-analytics.com https://api.segment.io https://*.fullstory.com https://api.rollbar.com/api/1/item/ http://api.amplitude.com/ https://api.amplitude.com/ https://vimeo.com https://cdn.plyr.io
img-src 'self' https://s3-us-west-1.amazonaws.com/compliance-ico-af-us-west-1/ https://images-airdrops.coinlist.co https://hcti.io data: https://js.intercomcdn.com https://static.intercomassets.com https://www.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com https://www.gstatic.com https://analytics.twitter.com/i/ https://t.co/i/ https://www.facebook.com/tr/
script-src 'self' https://cdnjs.cloudflare.com 'unsafe-inline' http://cdn.segment.com https://cdn.segment.com https://js.intercomcdn.com https://*.intercom.io 'unsafe-eval' http://d24n15hnbwhuhn.cloudfront.net https://cdn.amplitude.com https://maps.googleapis.com https://www.google-analytics.com/ https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api https://s.ytimg.com https://www.fullstory.com https://bam.nr-data.net https://js-agent.newrelic.com https://netverify.com https://ajax.googleapis.com https://cdn.plaid.com https://connect.facebook.net https://static.ads-twitter.com https://analytics.twitter.com/i/
"frame-ancestors 'self' http://www.weathertechwholesale.com http://www.cabelas.com https://www.cabelas.com http://www.calcarcover.com https://www.calcarcover.com"
"default-src https: data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-eval' data: 'unsafe-inline' googlemaps.github.io maps.googleapis.com vjs.zencdn.net www.google.com www.google-analytics.com www.gstatic.com cdn.ckeditor.com
script-src 'self' 'nonce-278afa9a-8345-4ade-a9e8-e31604b6870b' 'strict-dynamic' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.typekit.com *.addthis.com *.optimizely.com *.hotjar.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.google.com *.googleapis.com *.gstatic.com *.disqus.com disqus.com *.disquscdn.com *.cloudfront.net jvectormap.com *.msf.org *.cloudflare.com *.githubusercontent.com *.rawgit.com *.issuu.com *.cognitoforms.com *.blackbaudhosting.com *.brand-display.com *.adsrvr.org *.bing.com *.msf.org.au *.addthisedge.com
script-src www.domainplanet.at domainplanet.at www.google-analytics.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com http://visit.smartjailmail.com https://visit.smartjailmail.com
img-src 'self' https://ssl.google-analytics.com https://www.gstatic.com https://sjm-photos.s3.amazonaws.com
"script-src 'self' *.sdicamps.com *.heartlandportico.com *.google.com *.googleapis.com *.google-analytics.com *.newrelic.com *.nr-data.net 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.doubleclick.net *.googleadservices.net *.googleadservices.com *.google-analytics.com/ https://www.googletagmanager.com/ https://c.imedia.cz/ https://cdn.asymbo.com/ https://track.adform.net/ https://cdn.branch.io/ https://api.branch.io/ https://connect.facebook.net/ https://app.link/
img-src 'self' *.google.com *.google.cz *.doubleclick.net *.googleadservices.net *.googleadservices.com *.google-analytics.com https://www.facebook.com/ https://c.imedia.cz/ https://cdn.asymbo.com/
child-src 'self' https://connect.facebook.net/ https://track.adform.net/ https://www.facebook.com/ *.doubleclick.net/ https://c.imedia.cz/ https://affiliateclub.go2cloud.org/
script-src 'self' 'unsafe-inline' https://a.mdeo.co https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.krxd.net
script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.google-analytics.com
img-src 'self' 'unsafe-inline' cdnjs.cloudflare.com data: ssl.google-analytics.com
"connect-src 'self' opskins.com wss://opskins.com *.opskins.com *.opskins.media *.maxmind.com *.mmapiws.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com tagmanager.google.com *.googleapis.com *.gstatic.com *.cloudflare.com www.google.com maxcdn.bootstrapcdn.com www.paypalobjects.com api.twitch.tv cdn.datatables.net *.cuptrk.com d10lpsik1i8c69.cloudfront.net djtflbt20bdde.cloudfront.net *.luckyorange.net bat.bing.com googlecommerce.com *.googlecommerce.com platform.twitter.com cdn.syndication.twimg.com connect.facebook.net *.braintreegateway.com *.paypal.com *.ads-twitter.com *.twitter.com *.gleam.io gleam.io *.trustpilot.com cdn.siftscience.com *.baidu.com *.opskins.win *.facebook.com *.yandex.ru opskins.com api.opskins.com *.opskins.com
script-src 'unsafe-inline' 'unsafe-eval' data: 'self' opskins.com wss://opskins.com *.opskins.com *.opskins.media *.maxmind.com *.mmapiws.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com tagmanager.google.com *.googleapis.com *.gstatic.com *.cloudflare.com www.google.com maxcdn.bootstrapcdn.com www.paypalobjects.com api.twitch.tv cdn.datatables.net *.cuptrk.com d10lpsik1i8c69.cloudfront.net djtflbt20bdde.cloudfront.net *.luckyorange.net bat.bing.com googlecommerce.com *.googlecommerce.com platform.twitter.com cdn.syndication.twimg.com connect.facebook.net *.braintreegateway.com *.paypal.com *.ads-twitter.com *.twitter.com *.gleam.io gleam.io *.trustpilot.com cdn.siftscience.com *.baidu.com *.opskins.win *.facebook.com *.yandex.ru opskins.com api.opskins.com *.opskins.com"
script-src 'self' 'nonce-devdocs' https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es https://*.jquery.com
script-src 'self' 'unsafe-inline' https://mec.mall-cockpit.de https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com
style-src  'self' 'unsafe-inline' https://fonts.googleapis.com https://mec.mall-cockpit.de https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com
img-src 'self' data: https://mec.mall-cockpit.de https://www.real.de https://real.de https://shared.real.de https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com
script-src 'strict-dynamic' 'nonce-nmi3ndbmnmetywfjoc00zwzllwizntktogewythhy2uwntmx' 'unsafe-inline' https: http:
"script-src 'self' https://flat.io https://*.flat.io https://*.flat-cdn.com https://*.google-analytics.com https://*.google.com https://connect.facebook.net https://*.youtube.com https://*.ytimg.com https://w.soundcloud.com https://player.vimeo.com https://*.crisp.chat https://*.stripe.com https://*.algolianet.com https://*.algolia.net https://*.iframe.ly 'unsafe-inline' 'unsafe-eval' data: blob:
"default-src 'self' 'unsafe-inline' data: *
font-src 'self' * data: fonts.gstatic.com https://*.cloudfront.net
style-src 'self' https://*.cloudfront.net 'unsafe-inline' blob: *
frame-ancestors https://insight.rapid7.com/ https://us.idr.insight.rapid7.com/ https://eu.insight.rapid7.com/ https://eu.idr.insight.rapid7.com"
base-uri  'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/
child-src 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://edost.ru/ https://edost.ru/ http://*.facebook.com/ https://*.facebook.com/ http://*.google.com/ https://*.google.com/ https://form-test.kupivkredit.ru/ http://*.vk.com/ https://*.vk.com/ https://vk.com/ http://*.yandex.ru/ https://*.yandex.ru/ https://yandex.ru/ http://yastatic.net/ https://yastatic.net/ http://*.youtube.com/ https://*.youtube.com/
connect-src wss://* 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.clients-cdnnow.ru/ https://*.clients-cdnnow.ru/ https://mc.yandex.com.ge/ https://mc.yandex.com.tr/ https://suggestions.dadata.ru/ https://stats.g.doubleclick.net/ http://*.facebook.com/ https://*.facebook.com/ http://*.google-analytics.com/ https://*.google-analytics.com/ https://cdn-ca.jivosite.com/ https://cdn-cis.jivosite.com/ https://cdn-fr.jivosite.com/ https://code.jivosite.com/ https://node173.jivosite.com/ http://*.jquery.com/ https://*.jquery.com/ https://mc.webvisor.org/ http://*.yandex.net/ https://*.yandex.net/ http://*.yandex.ru/ https://*.yandex.ru/ https://mc.yandex.by/ https://mc.yandex.fr/ https://mc.yandex.kz/ https://mc.yandex.ua/ https://mc.yandex.uz/ https://yandex.ru/ https://youtu.be/ http://*.youtube.com/ https://*.youtube.com/
font-src data: 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.clients-cdnnow.ru/ https://*.clients-cdnnow.ru/ https://use.fontawesome.com/ http://*.gstatic.com/ https://*.gstatic.com/
form-action 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.facebook.com/ https://*.facebook.com/ https://form-test.kupivkredit.ru/ http://*.moneta.ru/ https://*.moneta.ru/ https://www.payanyway.ru/ https://paymaster.ru/ https://loans-qa.tcsbank.ru/ https://secure.tcsbank.ru/ https://securepay.tcsbank.ru/ http://*.tinkoff.ru/ https://*.tinkoff.ru/ http://*.yandex.ru/ https://*.yandex.ru/
frame-ancestors 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.facebook.com/ https://*.facebook.com/ http://webvisor.com/
img-src data: 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://s3-eu-west-1.amazonaws.com/ http://*.clients-cdnnow.ru/ https://*.clients-cdnnow.ru/ https://www.google.com.au/ https://www.google.com.ua/ http://dobrovar-shop.ru/ https://stats.g.doubleclick.net/ http://edostimg.ru/ https://edostimg.ru/ http://*.facebook.com/ https://*.facebook.com/ http://*.google.by/ https://*.google.by/ http://*.google.com/ https://*.google.com/ http://*.google.ru/ https://*.google.ru/ https://www.google.be/ https://www.google.de/ https://www.google.ee/ https://www.google.es/ https://www.google.kz/ https://www.google.lv/ http://*.google-analytics.com/ https://*.google-analytics.com/ http://*.googleapis.com/ https://*.googleapis.com/ http://www.gravatar.com/ http://*.gstatic.com/ https://*.gstatic.com/ http://*.jquery.com/ https://*.jquery.com/ https://www.kupivkredit.ru/ http://*.mail.ru/ https://*.mail.ru/ http://*.moneta.ru/ https://*.moneta.ru/ http://*.netpublicator.com/ https://*.netpublicator.com/ http://*.perezvoni.com/ https://*.perezvoni.com/ http://pergo-shop.ru/ https://pergo-shop.ru/ https://www.shop-script.ru/ https://vk.com/ http://www.webasyst.ru/ https://www.webasyst.ru/ https://mc.webvisor.com/ https://mc.webvisor.org/ http://i1.wp.com/ https://i0.wp.com/ http://*.yandex.net/ https://*.yandex.net/ http://*.yandex.ru/ https://*.yandex.ru/ https://mc.yandex.by/ https://mc.yandex.fr/ https://mc.yandex.kz/ https://mc.yandex.ua/ https://yandex.ru/ http://yastatic.net/ https://yastatic.net/ http://s.ytimg.com/
media-src https://cdn-cis.jivosite.com/ https://code.jivosite.com/ http://*.perezvoni.com/ https://*.perezvoni.com/
script-src 'unsafe-inline' 'unsafe-eval' 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.clients-cdnnow.ru/ https://*.clients-cdnnow.ru/ https://user43225.clients-cdnnow.ruhttps/ https://user48309.clients-cdnnow.ruhttps/ https://user57800.clients-cdnnow.ruhttps/ https://user63905.clients-cdnnow.ruhttps/ https://user93798.clients-cdnnow.ruhttps/ http://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ https://mc.yandex.com.ge/ https://mc.yandex.com.tr/ http://edostimg.ru/ https://edostimg.ru/ http://*.facebook.net/ https://*.facebook.net/ http://farmer-academy.shop/ https://use.fontawesome.com/ http://*.google.com/ https://*.google.com/ http://*.google-analytics.com/ https://*.google-analytics.com/ https://www.googleadservices.com/ http://*.googleapis.com/ https://*.googleapis.com/ http://*.gstatic.com/ https://*.gstatic.com/ https://cdn-cis.jivosite.com/ https://code.jivosite.com/ https://telemetry.jivosite.com/ http://*.jquery.com/ https://*.jquery.com/ https://form-test.kupivkredit.ru/ https://www.kupivkredit.ru/ http://*.mail.ru/ https://*.mail.ru/ http://*.perezvoni.com/ https://*.perezvoni.com/ https://kupivkredit-test-fe.tcsbank.ru/ http://vk.com/ https://vk.com/ http://*.yandex.net/ https://*.yandex.net/ http://*.yandex.ru/ https://*.yandex.ru/ http://*.yandex.st/ https://*.yandex.st/ https://mc.yandex.by/ https://mc.yandex.fr/ https://mc.yandex.kz/ https://mc.yandex.ua/ https://mc.yandex.uz/ http://yastatic.net/ https://yastatic.net/ http://*.youtube.com/ https://*.youtube.com/ https://s.ytimg.com/
style-src 'unsafe-inline' 'unsafe-eval' 'self' http://dobrovar-shop.ru/ https://dobrovar-shop.ru/ http://*.dobrovar-shop.ru/ https://*.dobrovar-shop.ru/ http://*.clients-cdnnow.ru/ https://*.clients-cdnnow.ru/ https://user43225.clients-cdnnow.ruhttps/ https://user48309.clients-cdnnow.ruhttps/ https://user57800.clients-cdnnow.ruhttps/ https://user63905.clients-cdnnow.ruhttps/ https://user93798.clients-cdnnow.ruhttps/ https://cdnjs.cloudflare.com/ http://edostimg.ru/ https://edostimg.ru/ https://use.fontawesome.com/ http://*.googleapis.com/ https://*.googleapis.com/ http://*.jquery.com/ https://*.jquery.com/ http://*.perezvoni.com/ https://*.perezvoni.com/
"script-src 'self' 'nonce-db9a4f83-651d-4bfa-9443-c8fb5ff5868d' gearsofwar.com *.gearsofwar.com www.google.com *.googleapis.com  www.google-analytics.com www.googletagmanager.com www.gstatic.com *.msecnd.net *.youtube.com *.ytimg.com cdnjs.cloudflare.com fb.me connect.facebook.net *.facebook.com www.facebook.com platform.twitter.com cdn.syndication.twimg.com uhf.microsoft.com c.s-microsoft.com code.jquery.com maxcdn.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://4ege.ru https://www.googletagservices.com 4oge.ru https://www.googletagservices.co https://adservice.google.ru *.repetit.ru https://adservice.google.com.ua sochinenie11.ru yastatic.net vk.com userapi.com https://cdnjs.cloudflare.com/ https://cdn.mathjax.org https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru yandex.net *.yandex.net
object-src 'self' rian.ru somit.ru videoarhivos.ru *.rian.ru ria.ru https://4ege.ru https://*.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru
style-src 'self' 'unsafe-inline' https://4ege.ru *.repetit.ru https://relap.io *.googleapis.com *.gstatic.com https://fonts.googleapis.com https://yastatic.net/ https://*.gstatic.com google.com *.google.com
img-src * data: https://4ege.ru https://*.2mdn.net *.2mdn.net https://*.doubleclick.net https://*.googleapis.com *.googleapis.com https://*.googlesyndication.com https://*.gstatic.com awaps.yandex.ru *.gstatic.com
frame-src 'self' https://sochinenie11.ru yastatic.net https://yastatic.net http://yandexadexchange.net www.thinglink.com https://www.youtube.com http://www.youtube.com http://conference.dit.mos.ru https://pro.ispringcloud.ru https://*.yandexadexchange.net 93.180.23.59 *.onlinetv.ru *.webcaster.pro *.eagleplatform.com *.vgtrk.com *.1tv.ru https://*.webinar.ru www.slideshare.net yandexadexchange.net ria.ru https://*.vsu.ru *.yandex.ru yandex.ru hse.ru https://vk.com https://*.vk.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com http://*.googleadservices.com https://*.googleadservices.com https://*.googlesyndication.com *.vk.com vk.com
font-src 'self' https://4ege.ru * data: https://*.googleapis.com https://*.gstatic.com *.gstatic.com *.googleapis.com
connect-src 'self' https://pagead2.googlesyndication.com *.repetit.ru https://4ege.ru ria.ru dl.dropboxusercontent.com https://www.youtube.com *.googlevideo.com https://*.gstatic.com google-analytics.com *.google-analytics.com yandex.ru *.yandex.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.amazonaws.com https://*.googleapis.com https://js.stripe.com https://s7.addthis.com https://www.googletagmanager.com https://widget.trustpilot.com https://googleads.g.doubleclick.net https://*.zopim.com/ https://www.gstatic.com https://ekr.zdassets.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://chimpstatic.com https://static.zdassets.com https://www.googleadservices.com https://rum-static.pingdom.net https://www.google-analytics.com https://www.google.com https://cdnjs.cloudflare.com
img-src 'self' data: data: https://*.paypal.com https://*.googleapis.com https://*.google.es https://*.gstatic.com https://fpdbs.paypal.com https://ssl.comodo.com/ https://www.google.com https://www.google.co.uk https://www.google.co.in https://*.zopim.com https://stats.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://*.amazonaws.com https://fonts.googleapis.com https://assets.zendesk.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com
font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://*.zopim.com
frame-src 'self' https://*.freshdesk.com https://js.stripe.com https://www.google.com https://*.doubleclick.net/ https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://widget.trustpilot.com
connect-src https://www.elementman.co.uk https://www.gpsupplies.com wss://*.zopim.com https://gpsupplieshelp.zendesk.com https://rollbar-eu.zendesk.com https://rum-collector-2.pingdom.net https://ekr.zdassets.com"
"script-src 'unsafe-inline' 'unsafe-eval' 'self' ajax.googleapis.com gleamdb.disqus.com c.disquscdn.com disqus.com cdnjs.cloudflare.com
img-src 'unsafe-inline' 'self' data: gleam.io js.out.sh referrer.disqus.com c.disquscdn.com
style-src 'unsafe-inline' 'self' data: maxcdn.bootstrapcdn.com c.disquscdn.com"
script-src https: blob: 'unsafe-eval' 'unsafe-inline'
script-src 'self' 'unsafe-eval' www.google-analytics.com cdn.ravenjs.com cdn.polyfill.io cdn.amplitude.com 'nonce-f4cd1bcf-080c-4575-8571-9a1c3feffb36'
"default-src 'self' *.enerbank.com *.vimeo.com *.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' referral.enerbank.com hirebridge.com js.hsforms.net forms.hsforms.com code.jquery.com jquery.com *.cloudfront.net *.google-analytics.com google-analytics.com js.hs-analytics.net js.hs-scripts.com js.hsleadflows.net
connect-src 'self' referral.enerbank.com rss.hirebridge.com forms.hubspot.com hubspot.com
img-src 'self' *.enerbank.com *.cloudfront.net www.google-analytics.com stats.g.doubleclick.net cloudfront-labs.amazonaws.com track.hubspot.com hubspot.com certify.alexametrics.com alexametrics.com seal-utah.bbb.org ssl.google-analytics.com
style-src 'self' 'unsafe-inline' referral.enerbank.com hirebridge.com maxcdn.bootstrapcdn.com bootstrapcdn.com fonts.googleapis.com googleapis.com code.jquery.com jquery.com ssl.google-analytics.com google-analytics.com
font-src 'self' referral.enerbank.com maxcdn.bootstrapcdn.com bootstrapcdn.com fonts.gstatic.com"
"default-src https: 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com connect.facebook.net google-analytics.com fonts.googleapis.com fonts.gstatic.com facebook.com www.weabenefits.com weabenefits.com"
"frame-src 'self' www.realtoolslojavirtual.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
"default-src 'self' charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com fonts.gstatic.com api.stream24.net hmmh.scnem.com www.w3.org 128.30.52.100
script-src 'self' charts3.equitystory.com www.googletagmanager.com ajax.googleapis.com maps.googleapis.com www.google-analytics.com maps.google.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' charts3.equitystory.com fonts.googleapis.com 'unsafe-inline'
img-src 'self' charts3.equitystory.com maps.gstatic.com maps.googleapis.com maps.google.com khms0.googleapis.com khms1.googleapis.com data: www.w3.org"
"script-src 'self' 'nonce-4b8aeb67-cf6b-4d45-aba5-3ae7673da1a6' gearsofwar.com *.gearsofwar.com www.google.com *.googleapis.com  www.google-analytics.com www.googletagmanager.com www.gstatic.com *.msecnd.net *.youtube.com *.ytimg.com cdnjs.cloudflare.com fb.me connect.facebook.net *.facebook.com www.facebook.com platform.twitter.com cdn.syndication.twimg.com uhf.microsoft.com c.s-microsoft.com code.jquery.com maxcdn.bootstrapcdn.com
"default-src * 'self' https: data: 'unsafe-inline' 'unsafe-eval'
connect-src * 'self' https: data: 'unsafe-inline' 'unsafe-eval'
worker-src * 'self' https: 'unsafe-inline' 'unsafe-eval'
script-src * 'self' https: 'unsafe-inline' 'unsafe-eval'
img-src * 'self' https: http: blob: data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com gcontent.robertsonmarketing.com https:
img-src 'self' optimize.google.com storage.googleapis.com www.google-analytics.com rmcontent.avetti.ca ssl.google-analytics.com *.doubleclick.net www.google.com www.google.ca gcontent.robertsonmarketing.com
style-src  'unsafe-inline' 'unsafe-eval' gcontent.robertsonmarketing.com https:
"default-src https: * 'self' 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.berkeassessment.com https://*.google-analytics.com https://bat.bing.com https://*.zopim.com https://*.googletagmanager.com https://www.fullstory.com https://ct.capterra.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://pi.pardot.com https://snap.licdn.com https://*.ads.linkedin.com https://*.youtube.com https://*.ytimg.com https://*.pingdom.net https://tracking.g2crowd.com
style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com
img-src 'self' data: https://*.google-analytics.com https://bat.bing.com https://*.zopim.com https://*.doubleclick.net https://*.google.com https://*.youtube.com https://*.pingdom.net
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://*.zopim.com
connect-src 'self' https://*.fullstory.com wss://*.zopim.com https://*.doubleclick.net https://*.youtube.com https://*.pingdom.net
child-src 'self' https://go.pardot.com https://*.doubleclick.net https://*.youtube.com
"connect-src 'self' https://cors-anywhere-monzo.herokuapp.com https://internal-api.monzo.com https://api.monzo.com https://api.s101.nonprod-ffs.io https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://app.roadmap.space https://sentry.io
frame-src https://community.monzo.com https://*.twitter.com https://*.facebook.com https://connect.facebook.net https://cdn.roadmap.space https://player.vimeo.com https://www.google.com https://www.youtube.com
img-src 'self' data: https://d33wubrfki0l68.cloudfront.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://*.twitter.com https://*.twimg.com https://i.ytimg.com https://www.gstatic.com/ https://images.ctfassets.net https://monzo-prod-user-images.imgix.net https://monzo-nonprod-user-images.imgix.net 'sha256-j2hqfrdzaagntqnjnsx6tergim4i/c6wkjmnhvinno8=' 'sha256-f7aijx0pf9n4t1s8/b+uf9+g8dy4gaq495+b+m6ezhy='
script-src 'self' https://community.monzo.com https://devslack.monzo.com https://api.greenhouse.io https://cdn.optimizely.com https://cdn.roadmap.space https://platform.twitter.com https://cdn.syndication.twimg.com https://www.google-analytics.com https://static.ads-twitter.com https://connect.facebook.net https://staticxx.facebook.com https://api.greenhouse.io https://cdnjs.cloudflare.com 'sha256-adovwu8qocedumgkmegnrgaw7pepvqd7a8l5q4mmcu0=' 'sha256-vvrbltz7o+qyhc5aajobtzco+dyfvpw4srudoa4cgk4=' 'sha256-390oygqkpmno57xxe9pxxal13/86rknpeyv53uiwzh8=' 'sha256-ng53zouoxn9hab603hyosibfr+qu0dae58rmgb/ebyc=' 'sha256-+9duterivzqcachpvq9/prbfown1d572bcbqlnmzbjc=' 'sha256-pqy83833j5alzozu2w5msx3mkooawn/i0quzmhajnea=' 'sha256-kzrthb9nfvygg+0mxmzt81rsi66inuqjuaydmdkhcf8=' 'sha256-4dum0vjuihfvnug5tzfrvef9y6gyjupz6f6rv4fbzko=' 'sha256-ajrnyn5glkijujb2teq3sb5han5gfchvcxfevgozkse=' 'sha256-4w24rlfiao7ugeyc1ifiymi10ohx7urd55syd1brsgk=' 'sha256-fbq7xxe950dxock40/7zjrs3ps2rdsvgftl6zrhluss=' 'sha256-oaxbhqdajiayeh4jy2sf+ex8pkwhcvfwmv+2r0ilhva=' 'sha256-3csthf2vg6ylpgvbuflpjfiiygim0oks6jk5dgsbcta=' 'sha256-yzvuldu6bd4k+kadp6vjxbr0rspqngie0o4/dytrt9w=' 'sha256-q7waeiqvxbwr+9ll6dugno7et7lweb8qzibkypw65fo=' 'sha256-sz3v5+8sv+pa+fnmsnbgxuiv6o0rqchhcgmnxvmf6sg=' 'sha256-i5s6j8q+kuzdifndjbqctfukyrthz7fp2tfcutu5+0u=' 'sha256-jqikbimqzplgw7/yumcxp+bbg5ghfpxigjthfwioobw=' 'sha256-wtqh1ysjlkygbo0c/liipevvm24cc3batq+ni16i6oc=' 'sha256-ct6umqxequm34hqa6tuwzromjfa9rj4cutztfu1hbja=' 'sha256-mf9z/a4jcfal+vliybsm1gpxja4mmuiwvdflpuk+2re=' 'sha256-skloybuj39cwayhfu/qo/pxopyn9ddczlcdat00e430=' 'sha256-jaxra2pb8xvkk7xwd06cwwtqng08qzmbjvtmwmdaxiy=' 'sha256-aldimhqvcnrphn1xi7orb3dvafd5zwhkrxmpoqjayz0=' 'sha256-aqva0jguwy0ui98pbegspfh2a7ibkicyal3h/nrak98=' 'sha256-yiujdibaczzm950onkrq5m6ghckupmnf6s5swtokep4=' 'sha256-pyo8m04/fryjxdwz6aypqttt/clohm94ldeqznqpu50='
style-src 'self' https://cdnjs.cloudflare.com https://platform.twitter.com https://ton.twimg.com https://fonts.googleapis.com 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' 9905.whitelabel.bevestor.de 9905.tracker.whitelabel.bevestor.de bevestor.de stats.deka.de assets.adobedtm.com dpm.demdex.net deka.demdex.net deka.d3.sc.omtrdc.net cm.everesttech.net www.sparkassen-chat.de data: blob:
img-src 'self' data: blob: https://www.google-analytics.com https://*.g.doubleclick.net https://www.google.com/ads https://a.quora.com/ https://q.quora.com/ https://quora.com/ https://www.facebook.com
script-src 'self' https://www.google-analytics.com https://apis.google.com https://cdn.mxpnl.com https://a.quora.com/ https://q.quora.com/ https://quora.com/ https://ct.capterra.com/ http://ct.capterra.com/ https://connect.facebook.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https https://static.optoma.co https://code.jquery.com https://fast.fonts.net https://www.googletagmanager.com https://*.google.com https://*.pingdom.net https://*.youtube.com https://www.google-analytics.com https://*.ytimg.com https://www.youtube-nocookie.com https://*.googleapis.com https://*.gstatic.com https://*.doubleclick.net https://*.google.co.uk https://*.jsdelivr.net https://*.aspnetcdn.com https://youtube.com https://*.vimeo.com"
connect-src 'self' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercom.io https://*.brand24.pl http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com https://app.userengage.com wss://app.userengage.com http://cdn.heapanalytics.com http://heapanalytics.com https://cdn.heapanalytics.com https://heapanalytics.com https://proxy.synerise.com https://tck.synerise.com wss://messenger.synerise.com"
script-src 'self' 'unsafe-inline' data: https://www.googletagmanager.com
style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com"
frame-ancestors 'self' http://*.naukri.com http://*.naukimg.com https://*.facebook.com https://*.naukri.com https://*.naukimg.com https://*.referralrecruit.com https://*.twitter.com
default-src 'unsafe-eval' 'unsafe-inline' 'self' http://*.naukimg.com http://*.naukri.com https://*.akamaihd.net https://*.doubleclick.net https://*.dropbox.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://*.google-analytics.com https://*.google.co.in https://*.google.co.us https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.gstatic.com https://*.jquery.com https://*.naukimg.com https://*.equest.com https://*.naukri.com https://*.scorecardresearch.com https://*.vizury.com https://*.referralrecruit.com https://*.twitter.com https://*.youtube.com https://*.zedo.com https://*.liveperson.net https://*.lpsnmedia.net https://media.licdn.com https://*.inspectlet.com http://*.inspectlet.com https://*.layer.com https://*.zopim.com https://*.zopim.io wss://*.zopim.com wss://*.layer.com wss://ws.inspectlet.com https://*.linkedin.com data:
"default-src 'self'\t*.sp sp *.softportal.com softportal.com *.softportal.ua\tmaster-push.com s.uuidksinc.net actpx.com actiflex.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st    *.doubleclick.net    https://*.googleapis.com https://*.gstatic.com http://*.googlesyndication.com https://*.googlesyndication.com *.google-analytics.com    https://*.google.com https://*.google.com.ua https://*.google.ru    connect.facebook.net *.facebook.com    stg.odnoklassniki.ru *.ok.ru vkontakte.ru vk.com https://d31qbv1cthcecs.cloudfront.net    adv.otclick-adv.ru static.otclick-adv.ru otclick-adv.ru    files.goodadvert.ru engine.goodadvert.ru engine2.goodadvert.ru udb.goodadvert.ru udb.adgear.ru    js.softprotalfiles.com https://relap.io    *.mediatoday.ru mediatoday.ru    *.castplatform.com platform.twitter.com    www.googletagservices.com partner.googleadservices.com    http://universalsrc.com    http://rtb.com.ru/mediatoday-script    https://js.gleam.io slinks.yadro.ru    https://d31j93rd8oukbv.cloudfront.net/metrika/ https://mc.webvisor.com    s7.addthis.com m.addthisedge.com m.addthis.com api-public.addthis.com www.linkedin.com    js.mamydirect.com    https://cdn.ywxi.net https://www.mcafeesecure.com\tmaster-push.com\tjsc.marketgid.com https://servicer.marketgid.com https://cm.marketgid.com
child-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st yastatic.net *.yandexadexchange.net    *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net    youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru    https://images01.iqoption.com https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com    https://*.googleapis.com https://*.gstatic.com https://gstatic.com cse.google.com    https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com https://www.google.com    https://accounts.google.com *.facebook.com vk.com login.vk.com    *.mediatoday.ru mediatoday.ru    yandexadexchange.net https://gleam.io platform.twitter.com https://syndication.twitter.com    s7.addthis.com https://www.mcafeesecure.com
connect-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua www.phpmyadmin.net    *.mediatoday.ru mediatoday.ru    mc.yandex.ru https://translate.googleapis.com www.google-analytics.com *.googleapis.com    https://mc.webvisor.com    s7.addthis.com m.addthis.com\tmaster-push.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.googleapis.com *.gstatic.com *.yandex.ru stg.odnoklassniki.ru cse.google.com www.google.com    *.mediatoday.ru mediatoday.ru    https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://relap.io data:
font-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.mediatoday.ru mediatoday.ru    *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com    https://*.gstatic.com https://*.yandex.ru data:
img-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.yandex.net *.yandex.ru yandex.ru yandex.st    *.googlesyndication.com *.doubleclick.net *.googleapis.com *.gstatic.com www.google-analytics.com ssl.google-analytics.com    https://*.yandex.net https://*.yandex.ru https://*.googlesyndication.com www.google.com clients1.google.com    https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com    https://apycdn.com https://*.iqoption.com *.facebook.com    c.bigmir.net i.bigmir.net counter.rambler.ru counter.yadro.ru top100-images.rambler.ru partner.iobit-team.ru    www.tns-counter.ru vk.com de.c4.b5.a0.top.list.ru yastatic.net *.cloudfront.net cloudfront-labs.amazonaws.com    static.adtidy.net i.webguard.ru advombat.ru wq3.ru https://ad.admitad.com https://cdn.admitad.com/    *.mediatoday.ru mediatoday.ru    *.castplatform.com syndication.twitter.com    http://otclick-adv.ru http://universalsrc.com    http://rtb.com.ru https://i.ytimg.com    https://js.gleam.io cdn.relap.io https://relap.io https://x.cnt.my amscdn.relap.io    https://mc.webvisor.com https://cdn.ywxi.net  https://www.carambis.ru\thttps://imgg-cdn.marketgid.com c.marketgid.com cm.marketgid.com jsc.marketgid.com servicer.marketgid.com s-img.marketgid.com\timgg-cdn.tovarro.com cm.tovarro.com jsc.tovarro.com servicer.tovarro.com s-img.tovarro.com\tcm.mgid.com jsc.mgid.com servicer.mgid.com s-img.mgid.com\tudata.mixmarket.biz\tdata:
object-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.gstatic.com an.yandex.ru https://*.gstatic.com https://an.yandex.ru    *.mediatoday.ru mediatoday.ru
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://medium.design:443 https://*.medium.design:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost: * https://stats.g.doubleclick.net https://www.google-analytics.com wss://localhost:44399 movinghelp.com movinghelpd.com cdnjs.cloudflare.com https://localhost pwctag.uhaul.com www.googletagmanager.com unpkg.com https://bing.com https://virtualearth.com pwc.uhaul.com maxcdn.bootstrapcdn.com data: media.uhaul.net  http://localhost:* beta.uhaul.com
"default-src * data: filesystem: about: blob: ws: wss:
script-src * data: filesystem: about: blob: ws: wss: 'unsafe-eval' 'unsafe-inline'
style-src * data: filesystem: about: blob: ws: wss: 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d3sbxpiag177w8.cloudfront.net https://playerserver.walkme.com https://js-agent.newrelic.com https://bam.nr-data.net https://d6e36ddde8c0e2a4f2a7-9047f2144bf3a327a20c602d8334c89a.ssl.cf3.rackcdn.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://f754480b912adb0ef3d9-35cf9bca3b3dea17d061fbb9955691d8.ssl.cf3.rackcdn.com
connect-src 'self' https://ec.walkme.com https://bam.nr-data.net wss://www.sympahr.net"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://ajax.googleapis.com https://rum-static.pingdom.net https://fast.wistia.com https://fast.wistia.net https://cdnjs.cloudflare.com
img-src 'self' https://ssl.google-analytics.com https://rum-collector.pingdom.net https://fast.wistia.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.net
script-src 'self' blended-prd-cdn.azureedge.net blended-stg-cdn.azureedge.net www.google-analytics.com apis.google.com www.dropbox.com js.live.net cdnjs.cloudflare.com/ajax/libs/rollbar.js/ 'nonce-hwt0j3x0lmi1jv88yskr'
style-src 'self' 'unsafe-inline' https://vjs.zencdn.net https://wchat.freshchat.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://assetscdn-wchat.freshchat.com https://cdn.plyr.io
"default-src 'self' https://www.grangehotels.com https://www.google-analytics.com https://m.addthis.com
script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com https://secure.comodo.net https://secure.comodo.com https://www.googletagmanager.com https://www.googleadservices.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://platform.instagram.com https://www.google-analytics.com https://ajax.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://*.twimg.com https://*.twitter.com https://static.ads-twitter.com https://www.online-toolbox.com https://*.facebook.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://graph.facebook.com https://www.linkedin.com/countserv/ https://widgets.pinterest.com https://tag.yieldoptimizer.com
style-src 'self' 'unsafe-inline' https://bda.bookatable.com https://fonts.googleapis.com https://platform.twitter.com https://*.twimg.com https://cdnjs.cloudflare.com
img-src 'self' data: https://www.grangehotels.com https://bda.bookatable.com/ https://www.googletagmanager.com https://tracker.marinsm.com/ https://t.co https://*.doubleclick.net https://secure.comodo.net https://secure.comodo.com https://www.google-analytics.com https://www.google.co.uk/ads/ https://www.google.com/ads/ https://www.facebook.com https://*.gstatic.com https://*.googleapis.com https://*.twitter.com https://*.twimg.com https://cdnjs.cloudflare.com https://s7.addthis.com https://i.vimeocdn.com https://cs.yieldoptimizer.com
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://bda.bookatable.com/
child-src 'self' https://bda.bookatable.com https://*.doubleclick.net https://www.googleadservices.com https://tpc.googlesyndication.com https://*.facebook.com https://connect.facebook.net https://player.vimeo.com https://www.youtube.com https://www.google.com https://www.google.co.uk https://secure.comodo.com https://platform.twitter.com https://syndication.twitter.com https://s7.addthis.com
"default-src 'self' *.videoglaz.ru data: ws: https: http: 'unsafe-inline' yandex.ru mc.yandex.ru yastatic.net 'unsafe-eval' *.comagic.ru *.reenter.ru *.mneniya.pro *.gravatar.com *.retailrocket.ru *.retailrocket.net *.wp.com *.google-analytics.com *.googleapis.com reformal.ru *.reformal.ru *.googleadservices.com *.gstatic.com *.callbackhunter.com *.jquery.com *.yadro.ru www.youtube.com *.youtube.com"
"frame-ancestors 'self' *.google.de *.google.ch *.google.at *.google.nl *.google.cz *.google.com *.google.se *.optimizely.com"
"frame-ancestors 'self' https://*.backstreetmerch.com https://*.livenationmerch.com https://www.joestrummer.com https://eustore.rogerwaters.com https://www.trailerparkboysmerch.com https://store.niallhoran.com https://shop.thebodycoach.com https://merchandise.footballmanager.com https://shop.little-mix.com https://shop.shanefilan.com https://merch.bulletformyvalentine.com https://merch.raksu-official.com"
"default-src 'self' 'unsafe-inline' data: *.dat.de *.datgroup.com *.fairgarage.de *.b-ite.com
form-action 'self' *.dat.de *.datgroup.com *.twitter.com *.cleverreach.com http://mailings.dat.de/
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.dat.de *.datgroup.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com *.fairgarage.de *.b-ite.com
style-src 'unsafe-inline' 'self' *.twitter.com *.twimg.com *.fairgarage.de *.dat.de *.datgroup.com
worker-src data: 'self' *.dat.de *.datgroup.com *.twitter.com *.youtube.com *.google.com *.vimeo.com
frame-src data: 'self' *.dat.de *.datgroup.com *.twitter.com *.youtube.com *.youtube-nocookie.com *.google.com *.vimeo.com
img-src 'self' data: *.datgroup.com *.twimg.com *.twitter.com *.fairgarage.de"
script-src 'strict-dynamic' 'nonce-zgu0zdewmwutnzjkni00zmm0lwexnzytotewnznimgvingvh' 'unsafe-inline' https: http:
frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://freesecure.timeanddate.com https://free.timeanddate.com https://www.youtube.com
"connect-src 'self' https://*.blob.core.windows.net https://*.akamaihd.net https://localhost:44301 https://*.azurewebsites.net https://*.zendesk.com https://*.zdassets.com wss://*.zopim.com https://*.wistia.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://localhost:44301 https://*.azurewebsites.net https://*.wistia.com https://*.wistia.net https://*.gstatic.com https://*.jquery.com https://*.cloudflare.com
media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net
img-src 'self' blob: https://*.wistia.com https://localhost:44301 https://localhost:44303 https://*.azurewebsites.net https://*.zopim.com data: https://*.akamaihd.net
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://localhost:44301 https://*.azurewebsites.net https://*.teams.microsoft.com https://*.cloudflare.com https://*.jquery.com https://*.gstatic.com https://*.wistia.com https://*.wistia.net https://src.litix.io/ https://*.zendesk.com https://*.zdassets.com https://*.zopim.com wss://*.zopim.com https://unpkg.com
script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net *.it.nrw
style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net *.it.nrw
worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de
frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de
"script-src 'self' 'unsafe-eval' 'unsafe-inline'  twitch.tv connect.facebook.net cdn.onesignal.com onesignal.com ajax.googleapis.com steampowered.com liveinternet.ru counter.yadro.ru login4pro.com steamcommunity.com player.twitch.tv cdnjs.cloudflare.com rawgit.com cdn.datatables.net *.yandex.ru yandex.ru *.vk.com vk.com *.facebook.com facebook.com *.rawgit.com rawgit.com *.google.com google.com *.gstatic.com gstatic.com zurb.com
frame-src 'self' twitch.tv connect.facebook.net cdn.onesignal.com onesignal.com ajax.googleapis.com steampowered.com liveinternet.ru counter.yadro.ru login4pro.com steamcommunity.com player.twitch.tv cdnjs.cloudflare.com rawgit.com cdn.datatables.net *.yandex.ru yandex.ru *.vk.com vk.com *.facebook.com facebook.com *.rawgit.com rawgit.com *.google.com google.com *.gstatic.com gstatic.com zurb.com
style-src 'self' howdyhealth.org 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com/
img-src 'self' howdyhealth.org 'unsafe-inline' 'unsafe-eval' * data: hash-source
media-src 'self' 'unsafe-inline' 'unsafe-eval' * data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://apis.google.com https://www.googletagmanager.com
font-src 'self' howdyhealth.org https://fonts.gstatic.com/ data:
child-src 'self' 'unsafe-inline' https://player.vimeo.com https://www.youtube.com
frame-src howdyhealth.org https://player.vimeo.com https://www.youtube.com https://www.acyba.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com  *.dhru.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.scp-shop.fr https://www.google-analytics.com https://maps.google.com https://www.google.com https://www.gstatic.com/ https://connect.facebook.net/ https://www.googletagmanager.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com *.mainaccount.com *.google.com *.gstatic.com *.bnymellon.net
img-src 'self' data: *.bnymellon.net *.mainaccount.com *.schwab.com
frame-src 'self' *.mainaccount.com *.google.com *.albridge.com *.bnymellon.net *.cashedge.com *.schwab.com *.idmanagedsolutions.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.newalive.net https://*.google.com https://*.googleadservices.com https://*.google-analytics.com https://*.ajax.googleapis.com https://*.googlesyndication.com https://*.disqus.com https://*.yandex.ru https://*.serviceuptime.com https://*.cloudflare.com https://*.sharethis.com
img-src 'self' https://*.newalive.net https://*.serviceuptime.com https://*.yandex.ru https://*.sharethis.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.newalive.net https://*.google.com https://*.ajax.googleapis.com https://*.googlesyndication.com https://*.sharethis.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ssl.google-analytics.com *.recaptcha.net *.gstatic.cn *.gstatic.com *.google.com recaptcha.net *.google.cn"
"default-src https: wss: about: data: blob: 'unsafe-inline' 'unsafe-eval'"
"connect-src 'self' logx.optimizely.com *.optimizely.com api.segment.io https://*.internal-weedmaps.com https://*.weedmaps.com https://internal-weedmaps.com https://weedmaps.com api.amplitude.com *.google-analytics.com cdn.contentful.com performance.typekit.net *.uptime.com api.honeybadger.io
frame-src 'self' boards.greenhouse.io hire.withgoogle.com www.youtube.com app.optimizely.com a6360251288.cdn.optimizely.com www.google.com https://*.instagram.com https://*.twitter.com https://*.facebook.com
img-src 'self' data: stats.g.doubleclick.net *.google-analytics.com *.weedmaps.com https://wm-platform-users-production.s3-us-west-2.amazonaws.com *.internal-weedmaps.com weedmaps-uploads-production.s3.amazonaws.com p.typekit.net i.ytimg.com api.mapbox.com acuityplatform.com *.ytimg.com *.google.com cdn.optimizely.com pixel-a.basis.net *.twimg.com *.twitter.com images.ctfassets.net
script-src 'self' 'unsafe-eval' *.greenhouse.io *.google-analytics.com d24n15hnbwhuhn.cloudfront.net cdn.segment.com acuityplatform.com use.typekit.net *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com js.honeybadger.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ uptime.com *.instagram.com https://*.twitter.com https://*.twimg.com https://*.facebook.net 'nonce-jrv/szcm4itt9euktgtuvbchj/xkmcnor8umodd+anazbwx8'
style-src 'self' data: 'unsafe-inline' *.twitter.com *.twimg.com
script-src 'self' 'unsafe-inline'  'unsafe-eval' https://*.ndlah5p.com https://h5p.org https://*.ndla.no https://players.brightcove.net http://players.brightcove.net https://players.brightcove.net *.nrk.no http://nrk.no https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://www.youtube.com https://s.ytimg.com https://cdn.auth0.com https://vjs.zencdn.net https://httpsak-a.akamaihd.net *.brightcove.com *.facebook.net *.twitter.com *.twimg.com *.brightcove.net bcove.me bcove.video *.api.brightcove.com *.o.brightcove.com players.brightcove.net hls.ak.o.brightcove.com uds.ak.o.brightcove.com brightcove.vo.llnwd.net *.llnw.net *.llnwd.net *.edgefcs.net *.akafms.net *.edgesuite.net *.akamaihd.net *.analytics.edgekey.net *.deploy.static.akamaitechnologies.com *.cloudfront.net hlstoken-a.akamaihd.net vjs.zencdn.net  *.gallerysites.net ndla.no *.ndla.no ws://*.hotjar.com wss://*.hotjar.com https://*.hotjar.com cdnjs.cloudflare.com https://*.zendesk.com https://static.zdassets.com
frame-src *.nrk.no nrk.no *.vg.no vg.no https://www.tv2skole.no/ https://www.scribd.com/ https://www.youtube.com ndla.no https://*.ndlah5p.com https://h5p.org *.ndla.no *.slideshare.net slideshare.net *.vimeo.com vimeo.com *.ndla.filmiundervisning.no ndla.filmiundervisning.no *.prezi.com prezi.com *.commoncraft.com commoncraft.com *.embed.kahoot.it *.brightcove.net https://*.hotjar.com embed.kahoot.it fast.wistia.com https://khanacademy.org/ *.khanacademy.org/ *.vg.no/ *.facebook.com *.twitter.com e.issuu.com new.livestream.com livestream.com channel9.msdn.com tomknudsen.no www.tomknudsen.no geogebra.org www.geogebra.org ggbm.at www.imdb.com imdb.com miljoatlas.miljodirektoratet.no www.miljostatus.no miljostatus.no phet.colorado.edu lab.concord.org worldbank.org *.worldbank.org
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://tagmanager.google.com *.twitter.com *.twimg.com
font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: cdnjs.cloudflare.com https://*.hotjar.com
img-src 'self' https://*.ndla.no https://www.google-analytics.com https://stats.g.doubleclick.net http://metrics.brightcove.com https://httpsak-a.akamaihd.net https://*.boltdns.net https://www.nrk.no/ https://ssl.gstatic.com https://www.gstatic.com https://*.hotjar.com *.facebook.com *.twitter.com *.twimg.com  data:
media-src 'self' blob: https://*.ndla.no *.brightcove.com brightcove.com
connect-src  'self'  https://*.ndla.no https://logs-01.loggly.com https://edge.api.brightcove.com https://*.brightcove.com https://bcsecure01-a.akamaihd.net https://hlsak-a.akamaihd.net ws://*.hotjar.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.com:* https://www.google-analytics.com https://*.zendesk.com https://ekr.zdassets.com"
default-src 'self' 'unsafe-inline' data: https: wss:
script-src 'self' https://api.instagram.com https://app.intercom.io https://assets.scrivito.com https://beta-api.scrivito.com https://cdn.segment.com https://connect.facebook.net https://js.honeybadger.io https://www.instagram.com https://js.intercomcdn.com https://maps.googleapis.com https://cdn.mxpnl.com https://rum-static.pingdom.net https://widget.intercom.io https://www.google-analytics.com
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net
"default-src 'unsafe-eval' 'unsafe-inline' 'self' https: blob:
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net
img-src 'self' data: https://www.google-analytics.com https://www.facebook.com
"style-src 'unsafe-inline' https://*.flickr.com https://*.staticflickr.com https://*.flickr.net https://s.yimg.com https://*.braintreegateway.com https://*.kaptcha.com https://*.paypal.com https://*.conviva.com http://*.btrll.com http://api.flickr.com https://*.pinterest.com https://connect.facebook.net https://*.facebook.com https://bs.serving-sys.com https://*.adserver.yahoo.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://adserver.adtechus.com https://aka-cdn.adtechus.com https://cdn.siftscience.com
default-src https://*.flickr.com https://*.staticflickr.com https://*.flickr.net https://s.yimg.com https://*.braintreegateway.com https://*.kaptcha.com https://*.paypal.com https://*.conviva.com http://*.btrll.com http://api.flickr.com https://*.pinterest.com https://connect.facebook.net https://*.facebook.com https://bs.serving-sys.com https://*.adserver.yahoo.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://adserver.adtechus.com https://aka-cdn.adtechus.com https://cdn.siftscience.com
img-src data: blob: https://*.flickr.com https://*.flickr.net http://*.flickr.net https://*.staticflickr.com http://*.staticflickr.com https://*.yimg.com https://*.yahoo.com https://*.cedexis.com https://*.cedexis-test.com https://*.cedexis-radar.net https://sb.scorecardresearch.com https://image.maps.api.here.com https://*.paypal.com https://*.pinterest.com http://*.static-alpha.flickr.com https://geo-um.btrll.com https://connect.facebook.net https://*.facebook.com https://bs.serving-sys.com https://*.adserver.yahoo.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://secure.footprint.net https://creativecommons.org https://aka-cdn.adtechus.com https://hexagon-analytics.com
media-src https://*.flickr.com https://*.flickr.net http://*.flickr.net https://*.staticflickr.com https://s.yimg.com https://*.yahoo.com http://*.static-alpha.flickr.com
script-src 'unsafe-inline' 'unsafe-eval' 'nonce-bb36bf19cd5fcb9dc9ff7418865d56a0' https://*.flickr.com http://*.flickr.net https://*.flickr.net https://s.yimg.com https://*.analytics.yahoo.com https://yep.video.yahoo.com https://video.media.yql.yahoo.com https://*.yahooapis.com https://*.braintreegateway.com https://*.paypalobjects.com https://*.cedexis.com https://*.cedexis-radar.net https://*.cedexis-test.com https://connect.facebook.net https://*.facebook.com https://bs.serving-sys.com https://*.adserver.yahoo.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://cdn.siftscience.com
connect-src https://*.flickr.com https://*.flickr.net http://*.flickr.net https://*.staticflickr.com https://s.yimg.com https://geo.query.yahoo.com https://*.yahooapis.com https://*.conviva.com http://api.flickr.com https://*.pinterest.com http://*.yahoo.com https://*.cedexis.com https://*.cedexis-radar.net https://*.cedexis-test.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://cdn.siftscience.com
"script-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' static2.mybonuscenter.com static4.mybonuscenter.com static6.mybonuscenter.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com www.googleadservices.com bat.bing.com s.yimg.com sp.analytics.yahoo.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://itnext.io:443 https://*.itnext.io:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src 'self' 'unsafe-inline' wss://*.signalwire.com https://cdn.signalwire.com https://signalwire.s3-us-west-2.amazonaws.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://app.termly.io
frame-src 'self' https://www.youtube.com https://youtube.com https://cdn.signalwire.com https://www.google.com https://www.gstatic.com https://app.termly.io
child-src 'self' 'unsafe-inline' https://cdn.signalwire.com blob:
style-src 'self' 'unsafe-inline' https://cdn.signalwire.com https://fonts.gstatic.com https://fonts.googleapis.com
worker-src 'self' 'unsafe-inline' https://cdn.signalwire.com blob:
script-src 'self' 'unsafe-inline' https://cdn.signalwire.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://app.termly.io
font-src 'self' 'unsafe-inline' https://cdn.signalwire.com https://fonts.gstatic.com https://fonts.googleapis.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://magenta.as:443 https://*.magenta.as:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' https: data: blob: https://cmx.im
media-src 'self' https: data: https://cmx.im
connect-src 'self' blob: https://cmx.im wss://cmx.im
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.googleadservices.com *.clickdimensions.com *.facebook.net *.tctm.co cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.google.com *.bootstrapcdn.com *.fontawesome.com *.gstatic.com"
script-src 'nonce-c2a3583525dfd7a579857b3427d0a9d6' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
script-src 'self' www.warime.com 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' blob: *.yourdog.co.uk *.wgp-cdn.co.uk *.cloudflare.com https://api.raygun.io https://apikeys.civiccomputing.com https://clapi.civiccomputing.com
style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com/  https://cdnjs.cloudflare.com/ajax/
script-src 'self' 'unsafe-inline'  http://40.83.252.160/ https://ajax.googleapis.com/   https://s7.addthis.com/js/300/ https://connect.facebook.net/ https://platform.twitter.com/ https://www.google-analytics.com https://cdnjs.cloudflare.com/ajax/
img-src 'self' data: http://anglobal.com/cms/ https://anglobal.com/cms/ http://40.83.252.160
"frame-src tags.tiqcdn.com survey.hlb.com.my www.hlb.com.my www.facebook.com *.vivocha.com *.youtube.com *.facebook.com staticxx.facebook.com www.googletagmanager.com gateway.hlb.com.my www.ecloan.com.my aem-preprod.hlb.com.my aem-preprod.hlisb.com.my www.hlisb.com.my https://www.google.com www.google.com optimize.google.com"
frame-src self teknokompi.com zonafile.co *.zero-two.cc *.zonawibu.me *.linuxsec.org *.youtube.com *.twitter.com *.wp.com *.facebook.com *.doubleclick.net *.mp4upload.com mp4upload.com *.streamango.com streamango.com *.openload.co openload.co *.vidstreaming.io vidstreaming.io *.blogger.com vk.com *.vk.com"
"script-src 'self' https://www.google.com https://ssl.google-analytics.com http://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' https://*.google-analytics.com https://*.pointspot.com https://*.cloudfront.net https://*.intelispend-staging.com https://intelispend-staging.com https://*.intelispend.com https://www.1.awardhq.com
font-src 'self' https://*.intelispend.com https://cdnjs.cloudflare.com https://fonts.gstatic.com
script-src https: https://www.google.com/recaptcha www.recaptcha.net 'unsafe-eval' 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net komsa.com
style-src 'self' https://hello.myfonts.net komsa.com 'unsafe-inline'
img-src 'self' *.google.com *.google.de *.google-analytics.com *.doubleclick.net
child-src https://www.youtube.com https://youtu.be https://www.dailymotion.com https://vimeo.com https://*.youku.com https://vine.co https://www.instagram.com
"default-src https://*.swansdoor.org https://swansdoor.org 'unsafe-inline' 'unsafe-eval'
"frame-ancestors http://www.vistaprint.com https://www.vistaprint.com http://vistaprint.com https://vistaprint.com https://www.optimizelyedit.com https://app.optimizely.com http://app.optimizely.com http://script.crazyegg.com https://script.crazyegg.com script.crazyegg.com http://www.radins.com http://fr.igraal.com http://cmsauth.vistaprint.prod https://secure.vistaprint.com https://*.hatchery.vistaprint.com https://*.mobile.vpsvc.com
"frame-src 'self' www.umatelier.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
script-src 'self' 'unsafe-eval' www.google-analytics.com cdn.ravenjs.com cdn.polyfill.io cdn.amplitude.com 'nonce-ff54be59-6842-4a54-a530-2f8866fb641c'
"frame-ancestors 'self' metrika.yandex.ru mc.yandex.ru http://webvisor.com
frame-src https: blob: mc.yandex.ru jivosite.com
img-src 'self' data: *.doubleclick.net *.google.com *.google-analytics.com *.facebook.com *.gstatic.com *.googleapis.com http://img.constantcontact.com *.addthis.com *.staticflickr.com flickrembed.com placehold.it
style-src 'self' 'unsafe-inline' *.gstatic.com *.flowplayer.org *.googleapis.com flickrembed.com *.bootstrapcdn.com *.ionicframework.com
frame-src 'self' *.addthis.com *.google.com *.shift4test.com *.youtube.com *.cellmaps.com *.i4go.com *.twitter.com *.linkedin.com *.facebook.com *.woobox.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.gstatic.com *.facebook.com *.facebook.net *.addthis.com *.addthisedge.com *.i4go.com *.googleapis.com *.ctctcdn.com flickrembed.com *.jquery.com *.simpli.fi *.linkedin.com *.twitter.com *.woobox.com *.polyfill.io
frame-ancestors 'self' *.muntzav.com *.gosoundcheck.com *.ocontoelectric.com *.essoconto.com *.pcncell.net *.c-us-4wireless.com *.c-tcomputers.com *.trophiesandtreasures.com *.doorcountycoop.com *.jtcrivitz.com *.wittenbergnet.net *.lakewoodcellular.com *.northerndoorcommunications.com *.totally-cellular.com *.arlenstvandappliance.com *.happymac.org *.getmobilelink.com *.i4go
"script-src 'self' 'unsafe-inline' www.google-analytics.com www.google.com maps.googleapis.com code.jquery.com jquery.com cdn.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com www.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com data: storage.googleapis.com https://cdnjs.cloudflare.com https://d2wy8f7a9ursnm.cloudfront.net https://ajax.googleapis.com https://www.google-analytics.com
img-src * 'unsafe-inline' 'unsafe-eval' data: blob:
style-src 'self' highlightjs.org https://netdna.bootstrapcdn.com 'unsafe-inline' *.blockmodo.com blockmodo.com *.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://assets.zendesk.com
font-src 'self' *.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com
"child-src 'self' blob: https://*.tagcommander.com *.tagcommander.com *.overkiz.com *.somfy.com *.somfysystems.pl e.issuu.com projects.perfoweb.fr www.tahomalink.com www.tahomalink.com boutique.somfy.fr www.youtube.com iadvize.com lc.iadvize.com www.googletagmanager.com static.addtoany.com client.alwaysupport.com *.doubleclick.net static.olark.com 212.203.79.55 somfykorea.linux.gabiauser.com shop.somfy.de shop.somfy.es shop.somfy.it easyshop.somfypro.fr tv.connexoon.de tvaktion.connexoon.de tv-at.connexoon.de *.addthis.com *.disqus.com disqus.com www.google.com webdev.abastra.com kartor.eniro.se http://kartor.eniro.se www.somfy-smart.de api.soundcloud.com w.soundcloud.com www.lespetitespierres.org https://giphy.com/upload https://hearthis.at/ https://soundcloud.com/ https://www.youtube.com/ https://www.lespetitespierres.org/ *.rlets.com https://giphy.com/ https://www.franceinter.fr/ *.zohopublic.com *.smartrecruiters.com https://subscriptions.smartrecruiters.com/ marketing.net.elogia.net www.facebook.com https://www.facebook.com https://www.youtube-nocookie.com/ www.123formbuilder.com player.ina.fr"
script-src 'self' 'nonce-d80c8002-f25a-4056-ace0-b06d97a2d7e5' 'unsafe-eval' apis.google.com www.google-analytics.com assets.adobedtm.com cdn.jsdelivr.net play.vidyard.com pixel.quantserve.com edge.quantserve.com secure.quantserve.com rules.quantcount.com cdn.ravenjs.com use.typekit.net v2.zopim.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bytwork.com bytwork.com *.google.de *.yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru yastatic.net *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com gstatic.com *.googlesyndication.com  https://*.googleapis.com https://*.gstatic.com https://gstatic.com *.googletagservices.com https://*.googlesyndication.com *.cryptocompare.com *.twitter.com *.tradingview.com *.coingecko.com *.twimg.com *.coinlib.io vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru *.adservice.google.ru https://adservice.google.ru https://*.adservice.google.ru
frame-src 'self' *.bytwork.com bytwork.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.google.com *.google.ru *.tradingview.com *.coinlib.io *.twitter.com *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com www.google.com youtube.ru youtube.com *.youtube.ru *.youtube.com *.doubleclick.net https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru
child-src 'self' *.ecoproductsstore.com *.ecoproducts.com brandfolder.com s7.addthis.com ads.p.veruta.com t.p.mybuys.com www.youtube.com https://www.youtube.com/ *.google.com find.storesnear.me"
child-src 'self' https://*.strategyzer.com https://accounts.google.com https://apis.google.com https://e.issuu.com https://js.driftt.com https://platform.twitter.com https://platform.linkedin.com https://player.vimeo.com https://syndication.twitter.com https://web.facebook.com https://widget.uservoice.com https://www.facebook.com https://www.googletagmanager.com https://www.slideshare.net https://www.youtube.com https://strategyzer.thoughtindustries.com https://strategyzerprod.thoughtindustries.com
connect-src assets.strategyzer.com.s3.us-east-1.amazonaws.com 'self' ws: wss: https://*.pusher.com https://*.strategyzer.com https://api-iam.intercom.io https://api-ping.intercom.io https://api.honeybadger.io https://api.intercom.io https://app.getsentry.com https://js.intercomcdn.com https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io https://performance.typekit.net https://platform.twitter.com https://stats.g.doubleclick.net https://syndication.twitter.com https://trc.kissmetrics.com https://trk.kissmetrics.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com
font-src 'self' data: https://*.strategyzer.com https://fonts.typekit.net https://js.intercomcdn.com https://public.slidesharecdn.com https://use.typekit.net
form-action 'self' https://www.facebook.com https://syndication.twitter.com https://platform.strategyzer.com
img-src 'self' data: https: https://*.strategyzer.com https://bam.nr-data.net https://dev.visualwebsiteoptimizer.com https://downloads.intercomcdn.com https://gifs.intercomcdn.com https://js.intercomcdn.com https://p.typekit.net https://static.intercomassets.com https://static.licdn.com https://stats.g.doubleclick.net https://syndication.twitter.com https://trc.kissmetrics.com https://uploads.intercomusercontent.com https://www.facebook.com https://www.google-analytics.com https://www.google.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.strategyzer.com https://apis.google.com/js/platform.js https://doug1izaerwt3.cloudfront.net/d750a6b3d5caf6f17a613ab3c7cd89578e7c7da8.1.js https://i.kissmetrics.com/i.js https://js.honeybadger.io/v0.4/honeybadger.min.js https://platform.linkedin.com/in.js https://use.typekit.net/scu6kxz.js https://widget.uservoice.com/wdffycygafsdjwfbtxu8w.js https://www.youtube.com/iframe_api https://js.intercomcdn.com/shim.0a7132dd.js https://js.intercomcdn.com/frame.92c89987.js https://js.recurly.com/v3/recurly.js https://api.recurly.com https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io https://cdnjs.cloudflare.com/ajax/libs/authy-form-helpers/2.3/form.authy.min.js
style-src 'self' 'unsafe-inline' https://*.strategyzer.com https://dev.visualwebsiteoptimizer.com https://use.typekit.net https://cdnjs.cloudflare.com/ajax/libs/authy-form-helpers/2.3/form.authy.min.css
"default-src 'self' https://*.paypal.com https://*.paypalcorp.com https://*.paypalobjects.com 'unsafe-inline'
script-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://*.paypalobjects.com https://*.paypal.com https://*.doubleclick.net https://*.google-analytics.com
script-src 'self' 'nonce-010969f9-9614-4995-8aaa-760539eb4e76' 'unsafe-inline' https://www.google.com/ https://www.google.com/recaptcha/api.js cdn.polyfill.io connect.facebook.net/en_us/sdk.js graph.facebook.com apis.google.com https://www.google-analytics.com/analytics.js
"frame-src 'self' https://www.google.com https://staticxx.facebook.com https://www.youtube.com https://www.facebook.com http://erp.vkursi.pro https://wdtsearch2.azurewebsites.net https://erp-vkursi.azurewebsites.net https://tascombank.ua https://24b.tascombank.ua https://tas24b.ua https://ovsb.ics.gov.ua"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' www.synomia-autocompletion.com s7.addthis.com m.addthis.com api.dmcdn.net"
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://r.turn.com https://fomo.com https://*.jotfor.ms https://*.jotform.co https://*.fomo.com https://*.keen.io https://*.yandex.ru https://*.nr-data.net https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.cloudfront.net https://*.fullstory.com https://*.newrelic.com https://*.alphatec.net https://googleads.g.doubleclick.net https://*.rentalcover.com https://*.usefomo.com https://www.googletagmanager.com https://www.googleadservices.com https://komito.net https://*.brightwrite.com https://bat.bing.com https://ajax.googleapis.com https://*.zopim.com https://*.trustpilot.com https://linksynergy.com https://track.linksynergy.com https://intljs.rmtag.com https://*.xpay.xcover.com
connect-src 'self' https://*.fullstory.com https://*.segment.io https://*.alphatec.net https://stats.usefomo.com wss://*.zopim.com https://*.google-analytics.com https://*.yandex.ru https://*.trustpilot.com https://*.brightwrite.com https://sentry.io https://*.xpay.xcover.com
frame-src 'self' https://*.vimeo.com https://*.g.doubleclick.net https://*.trustpilot.com
"frame-ancestors *.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.naturbruk.nu *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.naturbruk.nu *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.insipio.com *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com"
style-src 'self' use.fontawesome.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://platform-lookaside.fbsbx.com https://graph.facebook.com https://lookaside.facebook.com https://d-ipv6.mmapiws.com https://device.maxmind.com http://fonts.gstatic.com https://vamoapp.s3.amazonaws.com https://www.facebook.com http://csi.gstatic.com http://staticxx.facebook.com https://facebook.net http://google.com http://www.google-analytics.com http://maps.googleapis.com http://maps.google.com http://maps.gstatic.com http://connect.facebook.net https://paguemob.s3.amazonaws.com http://fonts.googleapis.com https://web.facebook.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://staticxx.facebook.com https://csi.gstatic.com https://scontent.xx.fbcdn.net
"connect-src https://suggestions.dadata.ru https://*.sberbank-partner.ru http://rosreestr.ru https://*.domclick.ru https://domclick.ru https://www.google-analytics.com https://mc.yandex.ru https://js-agent.newrelic.com wss://domclick.ru wss://*.domclick.ru https://bam.nr-data.net https://geocode-maps.yandex.ru https://api-maps.yandex.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://3dsec.sberbank.ru https://securepayments.sberbank.ru ws://parline.lc wss://sberbank-partner.ru wss://*.sberbank-partner.ru wss://*.sberbank-partner.ru:8000 'self'
style-src http://localhost:3000 https://dadata.ru https://*.cloudflare.com https://*.sberbank-partner.ru https://*.domclick.ru https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdn.qa-dc.ru 'unsafe-inline' 'self'
font-src https://*.cloudflare.com https://*.sberbank-partner.ru https://*.domclick.ru https://domclick.ru https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com 'self' data:
img-src https://*.domclick.ru https://domclick.ru https://*.sberbank-partner.ru https://*.disk.yandex.ru https://mc.yandex.ru https://api-maps.yandex.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://service.nalog.ru/ 'self' data: blob: self
script-src http://localhost:3000 https://dadata.ru https://*.sberbank-partner.ru https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://mc.yandex.ru http://mc.yandex.ru https://www.google-analytics.com https://js-agent.newrelic.com https://bam.nr-data.net https://geocode-maps.yandex.ru https://api-maps.yandex.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://quest.domclick.ru https://qa-quest.domclick.ru https://stage-quest.domclick.ru https://cdn.qa-dc.ru https://cdn.domclick.ru https://*.domclick.ru https://domclick.ru 'unsafe-inline' 'unsafe-eval' 'self'
child-src https://*.sberbank-partner.ru https://*.youtube.com https://*.domclick.ru https://domclick.ru https://mc.yandex.ru 'self'
default-src https://*.sberbank-partner.ru https://*.domclick.ru https://domclick.ru https://mc.yandex.ru https://api-maps.yandex.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru 'self'
"script-src 'self' *.googleanalytics.com *.google-analytics.com ajax.googleapis.com *.gstatic.com 'sha256-efyobz16xz1yrel8kea1yqiefekz4pt/lwtmrganvb4='
img-src 'self' data: *.googleusercontent.com *.gstatic.com www.google-analytics.com
default-src 'unsafe-inline' 'unsafe-eval' 'self' maxcdn.bootstrapcdn.com ajax.googleapis.com www.sc.pages02.net www.pages02.net www.google.com www.gstatic.com code.jquery.com cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com
"font-src 'self' https://avinetworks.com:443 https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://cdn.livechatinc.com https://themes.googleusercontent.com
"default-src 'self' dc.services.visualstudio.com ipinfo.io www.google.com *.youtube.com *.firebaseio.com *.synergyworldwide.com *.googleapis.com *.typekit.net *.raygun.io wss://*.firebaseio.com *.firebaseapp.com freegeoip.net *.google.com player.vimeo.com edge.addthis.com
style-src 'self' 'unsafe-inline' fonts.gstatic.com *.googleapis.com *.fontawesome.com *.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' az416426.vo.msecnd.net www.google.com www.google-analytics.com *.googleapis.com use.typekit.net *.bootstrapcdn.com cdnjs.cloudflare.com cdn.raygun.io *.firebaseio.com *.vimeo.com  apis.google.com  www.gstatic.com npg.tgcorp.com pg.mcash.co.kr m.addthis.com www.googletagmanager.com openapi.map.naver.com
font-src 'self' fonts.gstatic.com use.fontawesome.com *.typekit.net *.bootstrapcdn.com"
font-src 'self' 'unsafe-inline' https://*.googleapis.com https://fonts.gstatic.com
script-src https://*.alexametrics.com https://googleads.g.doubleclick.net http://*.googleadservices.com http://*.facebook.com http://*.linkedin.com http://*.addthisedge.com 'self' 'unsafe-inline' http://*.addthis.com https://*.addthis.com https://*.ampproject.org https://*.facebook.net https://*.googletagmanager.com https://*.google-analytics.com  'unsafe-eval' https://kendo.cdn.telerik.com
img-src http://*.amazonaws.com 'self' https://*.alexametrics.com http://*.googletagmanager.com 'unsafe-inline' data: https://*.catch.vn https://*.catch.com.vn https://*.facebook.com https://*.google.com.vn https://*.google-analytics.com https://stats.g.doubleclick.net https://*.google.com
script-src: 'self' www.google-analytics.com translate.google.com ajax.googleapis.com
"frame-ancestors 'self' *.chemistwarehouse.com.au *.epharmacy.com.au *.mychemist.com.au htmlbuilder.com.au *.htmlbuilder.com.au *.chemistwarehouse.hk *.houseofwellness.com.au"
"default-src 'self' www.24xxx.me 24xxx.me *.24xxx.me http://img.24xxx.me megabc.info mega-bc.info https://fex.net *.fex.net https://n161adserv.com http://mpay3.info http://redirect.mpay69.info http://mpay69.com http://mpay69.biz redirect.mpay69.net redirect.mpay69.org redirect.mpay69.info test.test-mp.info 69v.club *.xcvgdf.party *.vids69.com http://cdn0.vids69.com http://cdn1.vids69.com http://cdn2.vids69.com http://cdn3.vids69.com http://cdn4.vids69.com http://cdn5.vids69.com http://cdn6.vids69.com http://cdn7.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com https://yandex.ru yandex.st *.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' http://www.24xxx.me http://24xxx.me data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net www.tns-counter.ru *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
script-src data: https: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://google.com https://apis.google.com https://ajax.googleapis.com https://api.tiles.mapbox.com https://www.google-analytics.com https://oss.maxcdn.com https://cdn.socket.io https://*.stripe.com https://stripe.github.io https://cdnjs.cloudflare.com https://translate.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleadservices.com https://maxcdn.bootstrapcdn.com https://blog.numundo.org https://d37gvrvc0wt4s1.cloudfront.net https://connect.facebook.net https://cdn.mxpnl.com https://disqus.com https://numundo.disqus.com https://*.disquscdn.com https://*.leaddyno.com https://*.intercom.io https://*.intercomcdn.com https://*.datatables.net https://unpkg.com https://*.unpkg.com https://cdn.datatables.net https://*.sentry-cdn.com blob: data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com https://*.stripe.com https://stripe.github.io https://cdnjs.cloudflare.com/ https://*.numundo.org https://*.disquscdn.com https://cdn.datatables.net
font-src data: 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://themes.googleusercontent.com https://*.intercomcdn.com https://*.numundo.org
img-src 'self' data: blob: https://i.ytimg.com https://gravatar.com https://avatars.githubusercontent.com https://*.twimg.com https://*.twitter.com https://*.4sqi.net https://*.media.tumblr.com https://graph.facebook.com https://*.facebook.com https://*.fbcdn.net https://*.fbsbx.com https://fbcdn-profile-a.akamaihd.net https://github.global.ssl.fastly.net https://chart.googleapis.com https://google.com https://www.google.com https://*.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.googleapis.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.pt https://google.pt https://numundo.org https://*.numundo.org https://*.tiles.mapbox.com https://*.tile.osm.org https://numundo-dev.imgix.net https://numundo.imgix.net https://blog.numundo.org https://www.facebook.com https://stats.g.doubleclick.net https://*.disqus.com https://*.disquscdn.com https://*.mxpnl.com https://*.stripe.com https://*.intercomcdn.com https://*.intercomassets.com https://*.imgix.net https://medium.com https://*.medium.com https://www.coinpayments.net
connect-src 'self' ws://localhost:5000 ws://localhost:3000 ws://ec2-52-5-60-124.compute-1.amazonaws.com:3000 ws://numundo.org/3000 ws://127.0.0.1:35729/livereload a.tiles.mapbox.com api.github.com https://pnm-development.s3.amazonaws.com https://pnm-development.s3.sa-east-1.amazonaws.com https://pnm-production.s3.amazonaws.com https://pnm-production.s3.us-west-2.amazonaws.com s3.amazonaws.com *.numundo.org *.googleapis.com *.google-analytics.com https://maps.googleapis.com *.mxpnl.com *.mixpanel.com stripe.github.io https://*.numundo.org *.services.disqus.com *.stripe.com wss://*.intercom.io https://*.intercom.io https://*.imgix.net https://api.rss2json.com https://sentry.io
frame-src 'self' https://player.vimeo.com https://www.youtube.com/ https://www.youtube.com/embed/ https://*.stripe.com https://google.com https://www.google.com https://stripe.github.io https://*.ak.facebook.com https://*.facebook.com https://disqus.com
"default-src *.bundeswahlleiter.de https: 'unsafe-eval' https: 'unsafe-inline'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.facebook.net
style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com
child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de
font-src 'self' data: fonts.gstatic.com cdn.alltherooms.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com https://www.googletagmanager.com https://s3-eu-west-1.amazonaws.com/share.typeform.com/embed.js https://www.googleadservices.com https://maps.gstatic.com stats.g.doubleclick.net https://stats.g.doubleclick.net https://cdn.logrocket.io d8myem934l1zi.cloudfront.net disutgh7q0ncc.cloudfront.net beacon.errorception.com connect.facebook.net cdn.alltherooms.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com/css cdn.alltherooms.com
connect-src 'self' data: telemetry.alltherooms.com cdn.alltherooms.com sockets.alltherooms.com ws://sockets.alltherooms.com wss://sockets.alltherooms.com https://stats.g.doubleclick.net https://*.logrocket.io https://www.google-analytics.com https://d8myem934l1zi.cloudfront.net https://wootric-eligibility.herokuapp.com https://disutgh7q0ncc.cloudfront.net https://production.wootric.com https://api.mapbox.com https://*.tiles.mapbox.com https://events.mapbox.com https://api.tomtom.com p.errorception.com"
script-src 'self' 'unsafe-inline' static.flatfy.com ajax.googleapis.com *.google-analytics.com *.g.doubleclick.net www.google.com/ads/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/
style-src 'self' 'unsafe-inline' static.flatfy.com ajax.googleapis.com fonts.googleapis.com *.gstatic.com
"tni.mil.id *.youtube.com *.jquery.com *.datatables.net *.googleapis.com *.lightwidget.com *.google.com *.gstatic.com lightwidget.com youtube.com img.youtube.com facebook.com *.facebook.com
script-src  'self' https://*.googleapis.com https://*.gstatic.com https://*.list-manage.com https://*.amazonaws.com https://*.mailchimp.com https://*.facebook.net https://*.facebook.com pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
style-src  'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com
img-src  'self' data: https://*.googleapis.com https://*.gstatic.com www.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net *.ggpht.com
"frame-ancestors 'self' https://my.stcu.org https://spokanestaging.orb.alkamitech.com https://developer.dev.alkamitech.com"
"child-src 'self' *.pardot.com *.doubleclick.net *.vimeo.com collector.fraudmap.net"
"base-uri 'self' https://zonky.cz https://www.zonky.cz https://optimize.google.com
connect-src 'self' https://zonky.cz https://googleads.g.doubleclick.net https://*.trackjs.com https://*.facebook.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://*.hotjar.com wss://*.hotjar.com https://*.force.com
font-src 'self' https://zonky.cz https://fonts.gstatic.com https://js.intercomcdn.com https://www.planetazonky.cz https://www.zia2019.cz https://static.hotjar.com https://optimize.google.com data:
frame-src 'self' https://stags.bluekai.com https://staticxx.facebook.com https://*.doubleclick.net https://vars.hotjar.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://c.imedia.cz https://www.facebook.com https://connect.facebook.net https://c1613.affilbox.cz https://*.hit.gemius.pl https://optimize.google.com https://datastudio.google.com https://player.vimeo.com https://*.salesforce.com https://*.force.com
img-src 'self' https://*.zonky.cz https://zonky.cz https://zonky-times-prod-a.s3.amazonaws.com https://*.ads.linkedin.com https://secure.adnxs.com https://img.youtube.com https://*.youtube.com https://www.google.com https://www.google.cz https://*.trackjs.com https://c.imedia.cz https://*.facebook.com https://*.google-analytics.com https://*.gstatic.com https://www.googleadservices.com https://*.doubleclick.net https://*.adform.net https://d9hhrg4mnvzow.cloudfront.net https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://insights.hotjar.com https://static.hotjar.com https://lh3.googleusercontent.com lh3.googleusercontent.com https://optimize.google.com data:
script-src 'self' https://www.google-analytics.com https://secure.adnxs.com https://*.ads.linkedin.com https://snap.licdn.com https://sjs.bizographics.com https://*.trackjs.com https://c1613.affilbox.cz https://*.nr-data.net https://*.newrelic.com https://tags.bkrtx.com https://*.bluekai.com https://bluekai.com https://eu.prgmt.com https://spir.hit.gemius.pl https://platform.twitter.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/ https://*.google-analytics.com https://*.gstatic.com https://*.googlesyndication.com https://track.adform.net https://connect.facebook.net https://*.youtube.com https://*.ytimg.com https://www.googleadservices.com https://adservice.google.com https://adservice.google.cz https://googleads.g.doubleclick.net https://c.imedia.cz https://c1819.affilbox.cz https://ajax.googleapis.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.getsmartlook.com ws://*.getsmartlook.com https://static.hotjar.com https://script.hotjar.com https://dnn506yrbagrg.cloudfront.net https://builder-assets.unbounce.com https://d2xxq4ijfwetlm.cloudfront.net https://login.dognet.sk https://optimize.google.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://*.myfonts.net https://tagmanager.google.com https://fonts.googleapis.com https://builder-assets.unbounce.com https://optimize.google.com https://*.salesforce.com https://*.force.com 'unsafe-inline'
style-src 'self' 'unsafe-inline' https://cloud.typography.com https://www.appleone.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://cdn.datatables.net https://hello.myfonts.net https://pro.fontawesome.com https://cdn.jsdelivr.net https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com https://www.youtube.com https://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://munchkin.marketo.net https://www.youtube.com https://s.ytimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://code.jquery.com https://cdn.datatables.net https://connect.facebook.net https://ajax.googleapis.com https://www.dropbox.com https://apis.google.com https://unpkg.com https://maps.googleapis.com https://www.googleapis.com
img-src 'self' https://stats.g.doubleclick.net https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.facebook.com https://cdn.datatables.net https://track.ziprecruiter.com https://www.youtube.com https://maps.gstatic.com https://maps.googleapis.com data:
font-src 'self' https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://pro.fontawesome.com https://fonts.gstatic.com data:
connect-src 'self' https://815-tmy-864.mktoresp.com https://www.facebook.com https://www.youtube.com https://www.googleapis.com
frame-src 'self' https://appleone.com https://www.sertifi.com/allin1/ https://sandbox.sertifi.net/allin1/ https://wotcintgsvc.maxinc.com https://s7.addthis.com https://www.youtube.com https://ain1.sharepoint.com https://accounts.google.com/ https://docs.google.com/
connect-src 'self' https://cdn.jwplayer.com https://assets-jpcust.jwpsrv.com https://jwpsrv-vh.akamaihd.net https://content.jwplatform.com https://www.googleapis.com https://*.jwpsrv.com wss://*.hotjar.com https://in.hotjar.com
font-src 'self' data: https://maxcdn.bootstrapcdn.com https://code.ionicframework.com https://fonts.gstatic.com
img-src 'self' data: http://placehold.it https://d37bawo1ufa1bl.cloudfront.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jwplayer.com https://assets-jpcust.jwpsrv.com http://jwpltx.com https://hartjewonenprod.blob.core.windows.net/
media-src 'self' https://cdn.jwplayer.com https://assets-jpcust.jwpsrv.com https://jwpsrv-vh.akamaihd.net https://content.jwplatform.com https://*.jwpsrv.com wss://*.hotjar.com https://in.hotjar.com blob:
script-src 'self' https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.google-analytics.com https://www.googletagmanager.com https://www.googleapis.com https://static.hotjar.com https://script.hotjar.com https://content.jwplatform.com http://www.gstatic.com https://www.gstatic.com http://ssl.p.jwpcdn.com blob: 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://maxcdn.bootstrapcdn.com https://code.ionicframework.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://hartjewonenprod.blob.core.windows.net/ 'unsafe-inline'
connect-src 'self' https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploadsintercomusercontent.coms-websocket-b.intercom.io https://cdn.jsdelivr.net
font-src 'self' fonts.gstatic.com https://js.intercomcdn.com data:
script-src 'self' www.google-analytics.com js.recurly.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js https://cdn.jsdelivr.net/npm/d3@3.5.17/d3.min.js https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.js 'unsafe-inline' 'sha256-lwqs1p92ys+ym1qyqatk6gefegjdlpxguefu6t72sgw=' 'sha256-1gcjkqmf3vdbhqtk/gcajkmg/ujnnomsjobgfusd8gu=' 'sha256-dcokebrosmwcisx1qqc5mqvzvtuyp7rxg1gdcn4i4ls='
style-src 'self' fonts.googleapis.com https://unpkg.com/swagger-ui-dist@3.10.0/swagger-ui.css https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.css 'unsafe-inline'"
script-src 'self' 'unsafe-eval' ci-mpsnare.iovation.com mpsnare.iesnare.com ci-first.iovation.com first.iovation.com www.google.com www.gstatic.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://hackernoon.com:443 https://*.hackernoon.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' https://*.googleapis.com https://maps.gstatic.com 'unsafe-eval'"
"'self' http://trupanion.lookbookhq.com https://trupanion.lookbookhq.com http://explore.trupanion.com https://explore.trupanion.com"
"default-src 'self' 'self' *.kpn.com *.onkpn.com *.gripstatic.com *.grip-on-it.com *.gstatic.com *.google.com data: *.mopinion.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval' *.kpn.com *.gripstatic.com ajax.googleapis.com assets.adobedtm.com *.google.com *.gstatic.com *.twitter.com *.twimg.com *.mopinion.com
style-src 'self' 'unsafe-inline' 'self' 'unsafe-inline' *.gripstatic.com fonts.googleapis.com *.twitter.com *.twimg.com *.mopinion.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://movietime.guru:443 https://*.movietime.guru:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
frame-src 'self' *.doubleclick.net *.facebook.com *.wistia.net *.wistia.com https://pixel.kiosk.tm pixel.sitescout.com https://player.vimeo.com https://videopress.com
img-src * 'self' data: 'self' 'unsafe-inline' https:
frame-ancestors 'self' x-frame-options: allow-from https://*.asiaplus.co.th http://*.asiaplus.co.th"
font-src 'self' https://*.googleapis.com https://fonts.gstatic.com data:
"default-src 'self' data: *.issuu.com *.quantserve.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' *.buybox.click *.doubleclick.net *.issuu.com data: ssl.google-analytics.com developers.google.com *.googleapis.com *.cloudfront.net www.opineo.pl *.edrone.me browser-update.org js-agent.newrelic.com *.google-analytics.com www.googleadservices.com bam.nr-data.net ssl.ceneo.pl *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'
frame-src 'self' data: *.google.pl e.issuu.com www.opineo.pl www.youtube.com ssl.ceneo.pl www.googleadservices.com googleads.g.doubleclick.net www.google.com www.google.pl 'unsafe-inline' 'unsafe-eval'
object-src 'self' data: e.issuu.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' data: *.buybox.click *.issuu.com *.edrone.me 'unsafe-inline' 'unsafe-eval'
style-src 'self' data: fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: *.google.pl *.doubleclick.net ssl.google-analytics.com *.google.com *.isu.pub *.googleapis.com *.gstatic.com *.opineo.pl *.google-analytics.com http://*.wydawnictworebel.pl http://wydawnictwo.rebel.pl ssl.ceneo.pl http://analytics.ceneo.pl"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.edmed24.com *.google-analytics.com *.hotjar.com *.matomo.cloud ajax.cloudflare.com ajax.googleapis.com *.googletagmanager.com connect.facebook.net staticxx.facebook.com cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.edmed24.com
img-src 'self' data: *.edmed24.com *.customer-support24.com *.google-analytics.com *.matomo.cloud www.google.de www.google.com www.google.it www.google.fr *.google.co.uk www.google.no www.google.nl www.google.es
font-src 'self' data: *.edmed24.com *.googleapis.com *.gstatic.com *.googleusercontent.com
frame-src 'self' *.edmed24.com *.hotjar.com staticxx.facebook.com www.facebook.com
"frame-ancestors https://baselang.com https://*.clickfunnels.com https://*.baselang.com https://shortcuttoconversational.com"
connect-src 'self' data: *.issuu.com *.buybox.click *.edrone.me 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: *.google-analytics.com *.doubleclick.net *.ytimg.com
"script-src 'unsafe-eval' 'unsafe-inline' https://secure.gravatar.com https://cdn.polyfill.io https://djtflbt20bdde.cloudfront.net https://www.ioaging.org https://ioaging.org https://instituteonaging.formstack.com https://www.googletagmanager.com https://static.formstack.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bat.bing.com https://connect.facebook.net https://www.google.com https://image2.pubmatic.com https://sync.ad-stir.com https://optimize.google.com https://www.blog.ioaging.org/ https://blog.ioaging.org/ https://booking.agepath.com https://ep.chatpath.com https://cdn.mxpnl.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.zorgdomein.com https://www.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://www.googletagsmanager.com sjs.bizographics.com static.ads-twitter.com *.linkedin.com
style-src 'self' 'unsafe-inline' *.zorgdomein.com https://fonts.googleapis.com
img-src 'self' data: blob: *.zorgdomein.com *.zorgdomein.nl https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.google-analytics.com/* http://www.gravatar.com t.co
font-src 'self' *.zorgdomein.com *.zorgdomein.nl https://fonts.googleapis.com https://fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.google-analytics.com *.pinterest.com *.googleadservices.com *.facebook.com *.facebook.net *.myfonts.net *.addthis.com *.googleapis.com *.googletagmanager.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.powr.io https://*.pinterest.com https://cdn.lightwidget.com js.hs-scripts.com https://unpkg.com https://www.google.com *.google.com *.google-analytics.com http://js.hs-analytics.net https://maps.googleapis.com https://cdn.firebase.com https://cdnjs.cloudflare.com https://d2zah9y47r7bi2.cloudfront.net https://*.firebaseio.com https://*.vo.msecnd.net https://browser-update.org https://api.instagram.com http://fast.fonts.net https://fast.fonts.net http://browser-update.org http://cdn.datatables.net http://cdn.heapanalytics.com https://ajax.googleapis.com https://www.googletagmanager.com https://use.typekit.net https://chat.milittisales.com https://crm.imaxcorp.com *.list-manage.com https://ct.capterra.com http://lightwidget.com https://cdn.jsdelivr.net http://www.googleadservices.com https://www.googleadservices.com https://www.gstatic.com https://chimpstatic.com https://*.facebook.net/ https://cdn.segment.com http://cdn.segment.com https://api.segment.io https://s.yimg.com http://sp.analytics.yahoo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.google-analytics.com *.joleado.com cdnjs.cloudflare.com *.cloudfront.net facebook.com connect.facebook.net *.googletagmanager.com static.criteo.net *.criteo.com *.doubleclick.net *.gstatic.com *.googleadservices.com *.doubleclick.net *.addthis.com *.getclicky.com *.tctm.co connect.shoprentone.com connect.shopaplusrentals.com connect.shopezrentals.com verify.authorize.net imageryadv.actonservice.com *.boldchat.com aa.agkn.com *.tiqcdn.com cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' *.google.com googletagmanager.com tagmanager.google.com *.googleapis.com *.joleado.com
frame-src 'self' *.google.com *.criteo.com *.joleado.com *.facebook.com *.shoprentone.com *.doubleclick.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.youtube.com
img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.gstatic.com t.co *.contentful.com *.ctfassets.net *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io *.prismic.io *.prismic-io.s3.amazonaws.com
font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io
script-src 'self' cdn.polyfill.io *.google-analytics.com *.googleapis.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io *.prismic.io 'sha256-0bwkgjxcjy4cvhubjkluedp1lojnc5zldkuqftuktum=' 'sha256-r0kk6vehfbhc2xeuby6gm7/rqoadzpkmbxmswor952g=' 'sha256-7jkemgknzqenszthy6o71kmdy2oge1zmevviukd/dl4=' 'sha256-+/nklwv7sjjtyusgnj0nh7cwawutp98j4udfgdypmru=' 'sha256-/kwcqajyex68fuxbdls8ezb6lj3sgonsnoqzljxxspe=' 'sha256-xt0uapyon0ce/mhllnlnl+5/z7i3z0is1e3xuwdgvyg=' 'sha256-pbaxdbt0w139l7bvwdnvg8rq9cz2njldqwqadhnapzs='
style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io blob:
media-src 'self' *.contentful.com *.ctfassets.net *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io *.prismic-io.s3.amazonaws.com *.prismic.io blob:
frame-src vimeo.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.prismic.io"
frame-src 'self' https://www.google.com https://calendar.google.com https://accounts.google.com https://www.youtube.com
"default-src 'self' www.pornosector.info pornosector.info http://img.pornosector.info http://ssl.p.jwpcdn.com http://jwpltx.com http://tools.bongacams.com http://i.bongacams.com http://mpay3.info http://redirect.mpay69.info http://mpay69.com http://mpay69.biz redirect.mpay69.net redirect.mpay69.org  redirect.mpay69.info test.test-mp.info *.xcvgdf.party http://cdn0.vids69.com http://cdn1.vids69.com http://cdn2.vids69.com http://cdn3.vids69.com http://cdn4.vids69.com http://cdn5.vids69.com http://cdn6.vids69.com http://cdn7.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com https://yandex.ru yandex.st *.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' http://www.pornosector.info http://pornosector.info data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net www.tns-counter.ru *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
script-src https: 'report-sample' 'unsafe-inline' 'unsafe-eval' data: https://*.custhelp.com https://*.ioam.de
style-src 'self' 'unsafe-inline' https://www.parship.com https://www.sovendus.com https://*.custhelp.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://partnerboerse.parship.de https://translate.googleapis.com
connect-src 'self' https://*.pndsn.com https://www.google-analytics.com/ https://*.facebook.com https://*.ioam.de https://*.sovendus.com https://*.taboola.com https://translate.googleapis.com https://*.doubleclick.net
form-action 5help.squarespace.com support.squarespace.com squarespace.zendesk.com circleforum.squarespace.com
"default-src 'self' zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com *.twimg.com *.coinbase.com zeit.co *.zeit.co *.zeit.sh *.stripe.com *.twitter.com localhost:*
script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'
style-src https: data: 'self' 'unsafe-inline'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: localhost *.blob.core.windows.net *.municipalconnect.ca *.rpta.io *.ilookabout.com *.mpac.ca *.googleapis.com *.gstatic.com *.ggpht.com *.google-analytics.com *.cloudflare.com *.rpta.local *.amazonaws.com *.mpaclabs.ca *.mpacp.ca *.datafix.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' heptagrama.com www.googletagservices.com www.googletagmanager.com www.google-analytics.com www.openstreetmap.org integracion.alignetsac.com www.youtube.com
style-src 'self' 'unsafe-inline' integracion.alignetsac.com fonts.googleapis.com ajax.googleapis.com
img-src 'self' data: heptagrama.com google-analytics.com
frame-src 'self' www.openstreetmap.org integracion.alignetsac.com www.google.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.wessling-group.com maps.googleapis.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.doubleclick.net
style-src 'self' 'unsafe-inline' *.wessling-group.com *.googleapis.com *.bootstrapcdn.com
img-src 'self' analizealimentare.ro *.wessling-group.com data: maps.googleapis.com *.doubleclick.net *.google-analytics.com *.gstatic.com
"frame-ancestors *.yandex.ru *.yastatic.net https://webvisor.com http://webvisor.com
"default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'"
img-src 'self' https://api.paydirekt.de 'unsafe-inline' data: https://t.paydirekt.de
"frame-src 'self' https://*.recruitastudent.nl https://*.seniorstaffing.nl https://*.hotjar.com https://*.basecode.nl https://basecode.nl https://*.fleximaal.nl https://fleximaal.nl https://*.fleximaal.com https://fleximaal.com https://*.vimeo.com https://*.google.com https://*.youtube.com http://*.basesupport.nl https://*.basesupport.nl https://*.hotjar.com https://vars.hotjar.com/"
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net
img-src 'self' image.tmdb.org www.google-analytics.com images.weserv.nl cdnjs.cloudflare.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net ssl.p.jwpcdn.com ajax.cloudflare.com cdn.onesignal.com *.gstatic.com www.google.com www.googletagmanager.com www.google-analytics.com onesignal.com blob:
connect-src 'self' https://*.minemeldinger.no https://apigw.telenor.no wss://tops.telenor.no https://*.giphy.com https://capture.trackjs.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.minemeldinger.no https://tags.tiqcdn.com https://dpm.demdex.net https://telenor.demdex.net https://sstatistikk.telenor.no https://www.google-analytics.com
img-src 'self' data: blob: https://*.giphy.com https://usage.trackjs.com https://www.google-analytics.com
"script-src 'nonce-d6qt+jh534' 'strict-dynamic' 'unsafe-inline' https: http:
connect-src 'self' wss://www.bilaxy.com wss://bilaxy.com wss://m.bilaxy.com wss://www.bilaxy.io wss://bilaxy.io wss://m.bilaxy.io https://discovery.amp.cloudflare.com https://bilaxy.zendesk.com/ https://ekr.zdassets.com/
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com amp.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com cdn.polyfill.io amp.cloudflare.com discovery.amp.cloudflare.com static.zdassets.com ekr.zdassets.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://ayearofai.com:443 https://*.ayearofai.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' data: https://stats.g.doubleclick.net/ https://csi.gstatic.com/ https://youtu.be https://www.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com/ https://www.google-analytics.com/
script-src 'self' 'nonce-08163ac96a117d906a0f96eaf99fa8c6' https://maps.googleapis.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/
"script-src 'nonce-9wwyilehaw' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: http:
img-src 'self' data: blob: https://www.google-analytics.com
script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://www.gstatic.com cdn.mxpnl.com https://cdnjs.cloudflare.com https://api.tiles.mapbox.com
style-src 'self' 'unsafe-inline' https://www.gstatic.com https://api.tiles.mapbox.com
connect-src 'self' https://www.google-analytics.com https://api.rollbar.com https://api.mixpanel.com https://api.mapbox.com https://*.tiles.mapbox.com
"script-src 'unsafe-inline' 'unsafe-eval' newslab.su www.newslab.su www.youtube.com s.ytimg.com maps.google.com maps.googleapis.com pagead2.googlesyndication.com adservice.google.com adservice.google.ru cdn.ampproject.org code.jquery.com vk.com api-maps.yandex.ru www.instagram.com platform.instagram.com relap.io top-fwz1.mail.ru mediator.imgsmail.ru collector.mediator.media static.criteo.net cas.criteo.com ad.mail.ru ajax.googleapis.com newslab.ru www.newslab.ru s.newslab.ru cdnjs.cloudflare.com jsn.24smi.net js-agent.newrelic.com bam.nr-data.net cdn.onthe.io tt.onthe.io www.googletagmanager.com an.yandex.ru yastatic.net www.google-analytics.com mc.yandex.ru radario.ru
style-src 'self' 'unsafe-inline' s.newslab.ru fonts.googleapis.com ajax.googleapis.com relap.io
"default-src 'self' data: blob: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
font-src 'self' data: blob: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
img-src 'self' data: blob: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
frame-src op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com images.ctfassets.net *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net server.seadform.net *.googleapis.com *.gstatic.com *.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com *.hotjar.com wss://*.hotjar.com *.krxd.net *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.google.com *.google.fi *.youtube.com *.metsaforest.com my.matterport.com *.arcgis.com dojotoolkit.org https://tunnistaudu.op.fi https://rekisteroidy.op.fi
frame-ancestors localhost:* *.metsaforest.com http://*.op-palvelut.net https://*.op-palvelut.net http://10.130.107.62 https://10.130.107.62 https://10.248.226.98 https://tunnistaudu.op.fi https://rekisteroidy.op.fi
script-src https: 'self' *.wellsfargo.com:23000 'unsafe-inline' 'unsafe-eval'
connect-src 'self' ws://mediathekviewweb.de https://apasfiis.sf.apa.at https://varorfvod.sf.apa.at https://hdvodsrforigin-f.akamaihd.net http://hdvodsrforigin-f.akamaihd.net
"frame-ancestors 'self' https://www.facebook.com/ https://m.facebook.com https://facebook.com"
img-src 'self' data: http: https: disqus.com *.disqus.com *.disquscdn.com *.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: disqus.com *.disqus.com *.disquscdn.com *.google-analytics.com *.jsdelivr.net *.gstatic.com
style-src 'self' 'unsafe-inline' https: disqus.com *.disqus.com *.disquscdn.com
frame-src 'self' https: disqus.com *.disqus.com *.disquscdn.com
connect-src 'self' https: disqus.com *.disqus.com *.disquscdn.com
"frame-ancestors https://*.petsafe.net https://*.petsafe.com https://*.sportdog.com https://radiosystemscorporation.my.salesforce.com https://radiosystemscorporation.lightning.force.com 'self'
"frame-ancestors https://www.icicibank.com https://rmwb.icicibank.com https://ipfms.icicibank.com https://imbuat.icicibank.com"
"default-src 'self' 'unsafe-inline' *.cloudfront.net *.doubleclick.net *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.facebook.com *.facebook.net *.bizrate.com *.bizrateinsights.com *.shopzilla.com
connect-src 'self' https: ws: *.addthis.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.facebook.com *.linkedin.com *.google.com *.spyber.com *.googleapis.com *.addthis.com *.pinterest.com *.addthisedge.com *.apis.google.com *.googlesyndication.com
script-src 'self' 'unsafe-inline' 'sha256-aakcthmnt7imeiclhokfld1kt+p6zlvjp4wb15p7bli=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' jkhad.com trustjs.net d.tds.adlabs.ru udata.mixmarket.biz t01.rbnt.org retarget.ssl-services.com udsp-eu.exe.bid tex.trafex.net ad.dumedia.ru dsp.dskrt.net bodaybo.net luxup.ru adlmerge.com www.google-analytics.com *.google.com www.gstatic.com ajax.googleapis.com *.adskeeper.co.uk jfduv7.com www.youtube.com *.cloudflare.com blob: data:
frame-src 'self' jfduv7.com *.google.com www.youtube.com www.youtube-nocookie.com smilered.com blob:
font-src 'self' fonts.googleapis.com fonts.gstatic.com cdn.adskeeper.co.uk
connect-src 'self' www.google-analytics.com trustjs.net blob:"
"frame-ancestors 'self' *.zoovalley.at *.zoovalley.com.au *.zoovalley.be *.zoovalley.ca *.zoovalley.ch *.zoovalley.cn *.zoovalley.de *.zoovalley.de.com *.zoovalley.dk *.zoovalley.es *.zoovalley.fi *.zoovalley.fr *.zoovalley.co.uk *.zoovalley.gr *.zoovalley.it *.zoovalley.jp *.zoovalley.lu *.zoovalley.nl *.zoovalley.pt *.zoovalley.ru *.zoovalley.se *.zoovalley.com"
"script-src 'unsafe-inline' 'unsafe-eval' https: http:
"default-src 'self' stats.addtoany.com static.addtoany.com maps.googleapis.com www.google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com video.zidivo.com my.zidivo.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' static.addtoany.com maps.googleapis.com www.google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com my.zidivo.com ajax.googleapis.com blob:
style-src 'self' data: 'unsafe-inline' fonts.googleapis.com my.zidivo.com
img-src 'self' data: maps.googleapis.com www.google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com video.zidivo.com
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com my.zidivo.com
media-src 'self' maps.googleapis.com google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.commaps.googleapis.com www.google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com video.zidivo.com blob:
child-src 'self' static.addtoany.com maps.googleapis.com google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com
frame-src 'self' static.addtoany.com maps.googleapis.com google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.commaps.googleapis.com www.google-analytics.com trafficwatchni.com trafficwatchni.net trafficwatchni.org trafficwatchni.org.uk twni.azurewebsites.net twni-staging.azurewebsites.net my.planetstream.net twni.blob.core.windows.net maps.gstatic.com
worker-src 'self' my.zidivo.com trafficwatchni.com trafficwatchni.co.uk trafficwatchni.org.uk blob:
"default-src https: data: 'unsafe-inline' 'unsafe-eval' media-src 'self' blob:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.planetvampire.com s0.wp.com stats.wp.com s.w.org *.googleapis.com *.googleanalytics.com secure.gravatar.com discordapp.com code.jquery.com *.twitter.com *.twimg.com *.chatango.com
script-src 'unsafe-inline' 'unsafe-eval' *.planetvampire.com s0.wp.com stats.wp.com s.w.org *.googleapis.com *.googleanalytics.com secure.gravatar.com discordapp.com code.jquery.com *.twitter.com *.twimg.com *.chatango.com
script-src 'self' 'nonce-fc2a3bcb-b944-4fbc-892b-4400ecf4735f' 'unsafe-eval' apis.google.com www.google-analytics.com assets.adobedtm.com cdn.jsdelivr.net play.vidyard.com pixel.quantserve.com edge.quantserve.com secure.quantserve.com rules.quantcount.com cdn.ravenjs.com use.typekit.net v2.zopim.com"
font-src 'self' data: fonts.gstatic.com localhost:8888
connect-src 'self' analytics.monkeytracker.cz localhost:8888 *.google.com *.googleapis.com www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.imedia.cz *.googleadservices.com googleads.g.doubleclick.net track.adform.net https://im9.cz
frame-src 'self' www.youtube.com *.iplatba.cz localhost:8888 *.imedia.cz
child-src 'self' www.youtube.com *.iplatba.cz localhost:8888 *.imedia.cz
img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie https://iplatba.cz localhost:8888 *.imedia.cz *.heureka.cz
style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com localhost:8888
"frame-ancestors 'self' https://auth.flock.com https://auth.flock-staging.com https://web.flock.com https://web.flock-staging.com https://updates.flock.co file://* chrome-extension://eaelpbcbablcdbbocfbfnedfmgjaoicj chrome-extension://jaafanpjodcobojibapcmbdcphbafnfc chrome-extension://enfaahabcinohafeakbliimmoholjeip"
"default-src 'self' 'unsafe-inline' http: https: data:
"default-src 'self' *.u-textil.ru u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com *.yandex.net http://clck.yandex.ru https://yandex.ru https://mc.yandex.ru https://vk.com vk.com https://login.vk.com m.vk.com *.gstatic.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://yastatic.net yastatic.net www.youtube.com https://www.youtube.com
connect-src 'self' *.u-textil.ru u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com *.yandex.net http://clck.yandex.ru https://mc.yandex.ru http://mc.yandex.ru https://yandex.ru https://www.addthis.com https://www.s7.addthis.com www.google-analytics.com api-maps.yandex.ru yandex.st https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://yandex.st https://vk.com vk.com https://login.vk.com https://informer.yandex.ru https://www.google-analytics.com https://my.net2pay.ru
script-src 'self' *.u-textil.ru u-textil.ru https://u-textil.ru https://www.u-textil.ru *.yandex.net *.jivosite.com *.cloudflare.com *.sendpulse.com http://clck.yandex.ru *.googleapis.com http://www.searchanise.com http://static.searchanise.com http://www.googletagmanager.com api-maps.yandex.ru *.google.com st.top100.ru mc.yandex.ru top-fwz1.mail.ru www.google-analytics.com vk.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://www.addthis.com https://www.s7.addthis.com https://site.yandex.net https://api.vk.com https://informer.yandex.ru https://ajax.googleapis.com https://www.google-analytics.com https://mc.yandex.ru http://top-fwz1.mail.ru https://top-fwz1.mail.ru https://st.top100.ru https://vk.com https://api-maps.yandex.ru 'unsafe-eval' 'unsafe-inline' vk.com yandex.st https://yandex.st maps.google.com https://yandex.ru https://vk.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://yastatic.net https://www.google-analytics.com
style-src 'self'  http://u-textil.ru http://www.u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com www.google.com static.searchanise.com http://clck.yandex.ru *.u-textil.ru u-textil.ru https://u-textil.ru *.jivosite.com *.googleapis.com https://www.addthis.com https://www.s7.addthis.com https://code.jquery.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://yastatic.net yandex.st  https://yandex.st https://my.net2pay.ru 'unsafe-inline' https://yandex.ru
img-src 'self' u-textil.ru *.u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com *.yandex.net https://www.addthis.com https://www.s7.addthis.com http://clck.yandex.ru http://img.yandex.ru http://orthovitex.com *.googleapis.com *.gstatic.com counter.yadro.ru top-fwz1.mail.ru counter.rambler.ru yastatic.net www.tns-counter.ru maps.google.com https://site.yandex.net https://yandex.ru https://informer.yandex.ru https://api-maps.yandex.ru https://stats.g.doubleclick.net https://www.google.com https://mc.yandex.ru http://top-fwz1.mail.ru http://yastatic.net https://yastatic.net https://top-fwz1.mail.ru https://www.google.ru https://vk.com vk.com https://www.google-analytics.com www.google-analytics.com vec04.maps.yandex.net vec03.maps.yandex.net vec02.maps.yandex.net vec01.maps.yandex.net https://vec04.maps.yandex.net https://vec03.maps.yandex.net https://vec02.maps.yandex.net https://vec01.maps.yandex.net https://clck.yandex.ru http://www.fbnp.ru data: 'self' *.u-textil.ru u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com http://clck.yandex.ru vk.com https://yandex.ru https://mc.yandex.ru https://www.addthis.com https://www.s7.addthis.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net *.yandex.net
frame-src 'self' u-textil.ru *.u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com *.yandex.net https://www.addthis.com https://www.s7.addthis.com www.youtube.com mailto m.vk.com vk.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru https://www.youtube.com https://vk.com https://login.vk.com
child-src 'self' *.u-textil.ru u-textil.ru https://u-textil.ru https://www.u-textil.ru *.jivosite.com *.cloudflare.com *.sendpulse.com *.yandex.net https://www.addthis.com https://www.s7.addthis.com yastatic.net www.youtube.com mailto m.vk.com vk.com https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://yastatic.net https://yastatic.net https://www.youtube.com https://vk.com https://login.vk.com
"default-src 'self' https://www.google-analytics.com https://www.facebook.com www.googleadservices.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://tags.tiqcdn.com https://cdn-akamai.mookie1.com https://ajax.googleapis.com https://www.googleadservices.com https://www.google.co.in https://www.google.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.google-analytics.com http://www.googleadservices.com/pagead/conversion.js https://www.googletagmanager.com
connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.co.in https://www.google.com https://www.googletagmanager.com https://www.facebook.com
style-src 'self' http://code.jquery.com www.paramountisuzu.com 'unsafe-inline' https://fonts.googleapis.com
font-src 'self' www.paramountisuzu.com https://fonts.googleapis.com https://fonts.gstatic.com
"default-src 'self' uzitecne.fg.cz tagmanager.google.com www.google-analytics.com
font-src 'self' fonts.gstatic.com *.typekit.net *.typekit.com uzitecne.fg.cz data: *.bootstrapcdn.com
connect-src 'self' analytics.monkeytracker.cz uzitecne.fg.cz *.typekit.net *.zeerat.com fullstory.com wss://collector.zeerat.com https://rs.fullstory.com/rec/page *.doubleclick.net *.google-analytics.com *.sociablekit.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' uzitecne.fg.cz *.google.com maps.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz maps.google.com *.googleapis.com *.typekit.net *.typekit.com *.facebook.net *.twimg.com *.geoplugin.net *.zeerat.com *.fullstory.com fullstory.com *.rs.fullstory.com *.sociablekit.com unpkg.com *.unpkg.com *.licdn.com *.linkedin.com
form-action 'self' uzitecne.fg.cz *.facebook.com *.facebook.net
frame-src 'self' *.youtube.com *.facebook.com *.facebook.net uzitecne.fg.cz www.googletagmanager.com *.sociablekit.com
child-src 'self' *.youtube.com *.facebook.com *.facebook.net uzitecne.fg.cz www.googletagmanager.com *.sociablekit.com
img-src 'self' data: *.gstatic.com uzitecne.fg.cz *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.gstatic.com *.googleapis.com *.typekit.net *.typekit.com *.facebook.com *.facebook.net *.twimg.com www.google.com *.google.cz *.youtube.com *.fg.cz *.google.ie *.sociablekit.com *.fbcdn.net
style-src 'self' 'unsafe-inline' uzitecne.fg.cz fonts.googleapis.com analytics.monkeytracker.cz *.typekit.net *.typekit.com tagmanager.google.com *.sociablekit.com *.bootstrapcdn.com
font-src https: data: https://fonts.gstatic.com https://fonts.googleapis.com/ 'unsafe-inline' 'unsafe-eval'"
img-src 'self' data: https://dc.ads.linkedin.com/ https://www.google.com/ https://www.facebook.com/ https://bat.bing.com/action/ https://track.hubspot.com/ https://cloud.apizee.com/ https://www.google-analytics.com/ https://t.co/i/ https://www.google.fr/ https://stats.g.doubleclick.net/ https://info.digitaleo.fr/hs-fs/hubfs/
script-src 'self' https://www.google-analytics.com https://www.googleadservices.com/ https://www.googletagmanager.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.salesforceliveagent.com 'unsafe-eval' https://www.glancecdn.net https://s3.amazonaws.com/glancecdn/ blob: https://dev.visualwebsiteoptimizer.com munchkin.marketo.net https://*.twitter.com 'unsafe-inline' https://*.facebook.net https://*.twimg.com browser-update.org *.idtdna.com
font-src 'self' *.idtdna.com https://fonts.gstatic.com data:
style-src 'self' https://fonts.googleapis.com 'unsafe-inline' https://platform.twitter.com https://*.twimg.com
frame-src 'self' https://www.youtube.com https://*.twitter.com https://*.facebook.com https://blast.ncbi.nlm.nih.gov/ https://idtdna.qualtrics.com https://www.google.com https://www.google.ca https://googleads.g.doubleclick.net https://bid.g.doubleclick.net www.ncbi.nlm.nih.gov
img-src 'self' sfvideo.blob.core.windows.net *.idtdna.com www.googletagmanager.com www.google.com www.google.ca www.google.com.br www.google.com.mx www.google.co.uk www.google.hn www.google.com.pr www.google.cl www.google.com.co www.google.com.tr www.google.se www.google.it www.google.ie www.google.co.za www.google.ch stats.g.doubleclick.net googleads.g.doubleclick.net www.google-analytics.com browser-update.org https://dev.visualwebsiteoptimizer.com https://syndication.twitter.com https://platform.twitter.com https://*.twimg.com data: https://www.facebook.com
connect-src 'self' *.mktoresp.com https://*.smartystreets.com https://stats.g.doubleclick.net https://www.google-analytics.com https://outlook.office.com https://www.glance.net/ https://*.idtdna.com http://*.idtdna.com
"style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.gstatic.com https://fonts.googleapis.com https://cdn.datatables.net
"default-src 'unsafe-inline' https://fonts.googleapis.com https://moventum.com.pl https://*.youtube.com http://axa.test.emex.pl https://www-tra.axadirect.pl https://www.facebook.com https://*.googleusercontent.com https://www.google.pl https://axadirect.pl https://*.axadirect.pl https://*.axaubezpieczenia.pl https://*.googleapis.com https://*.gstatic.com https://axadirect.pl https://*.axadirect.pl https://pagead2.googlesyndication.com https://ls.hit.gemius.pl https://*.google.com https://www.google-analytics.com https://*.gemius.pl https://*.facebook.com https://www.axaonline.pl https://*.axa.pl https://axa.pl https://df.axa.pl https://*.doubleclick.net https://script.crazyegg.com https://app3.salesmanago.pl https://nan.netmng.com https://pl-axa.netmng.com https://pl-axa.qa.netmng.com  https://client2.inteliwise.com https://s3-eu-west-1.amazonaws.com https://*.amazonaws.com https://pixel.mathtag.com https://u3s.mathtag.com https://dms.netmng.com
script-src * 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://axadirect.pl https://*.axadirect.pl https://pagead2.googlesyndication.com https://ls.hit.gemius.pl https://www.google-analytics.com https://*.gemius.pl https://*.facebook.com https://www.axaonline.pl https://*.axa.pl https://axa.pl https://df.axa.pl https://*.doubleclick.net https://script.crazyegg.com https://app3.salesmanago.pl https://nan.netmng.com https://pl-axa.netmng.com https://pl-axa.qa.netmng.com  https://client2.inteliwise.com https://s3-eu-west-1.amazonaws.com https://pixel.mathtag.com https://u3s.mathtag.com https://dms.netmng.com
style-src 'unsafe-inline' https://fonts.googleapis.com https://*.google.com https://ls.hit.gemius.pl https://www.google-analytics.com https://*.gemius.pl https://*.facebook.com https://www.axaonline.pl https://*.axa.pl https://axa.pl https://df.axa.pl https://*.doubleclick.net https://script.crazyegg.com https://app3.salesmanago.pl https://nan.netmng.com https://pl-axa.netmng.com https://pl-axa.qa.netmng.com  https://client2.inteliwise.com https://s3-eu-west-1.amazonaws.com https://pixel.mathtag.com https://u3s.mathtag.com https://dms.netmng.com
img-src 'self' https://moventum.com.pl https://*.youtube.com http://axa.test.emex.pl https://www-tra.axadirect.pl https://www.facebook.com https://*.googleusercontent.com https://www.google.pl https://axadirect.pl https://*.axadirect.pl https://*.axaubezpieczenia.pl https://*.googleapis.com https://*.gstatic.com https://axadirect.pl https://*.axadirect.pl https://pagead2.googlesyndication.com https://ls.hit.gemius.pl https://*.google.com https://www.google-analytics.com https://*.gemius.pl https://*.facebook.com https://www.axaonline.pl https://*.axa.pl https://axa.pl https://df.axa.pl https://*.doubleclick.net https://script.crazyegg.com https://app3.salesmanago.pl https://nan.netmng.com https://pl-axa.netmng.com https://pl-axa.qa.netmng.com  https://client2.inteliwise.com https://s3-eu-west-1.amazonaws.com https://*.amazonaws.com https://pixel.mathtag.com https://u3s.mathtag.com https://dms.netmng.com https://axa.pl data:"
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.cloudflare.com *.rawgit.com *.jquery.com *.facebook.net *.facebook.com *.hubspot.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hscta.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.addtoany.com *.doubleclick.net *.fontawesome.com *.formstack.com *.google.com
img-src 'self' *.mednax.com *.hubspot.com *.facebook.com *.google-analytics.com *.gravatar.com *.doubleclick.net *.gstatic.com *.googleapis.com *.fbcdn.net data:
frame-src sway.com *.soundcloud.com *.gcs-web.com *.vimeo.com *.addtoany.com *.google.com *.facebook.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.addtoany.com *.fontawesome.com *.formstack.com
font-src 'self' *.gstatic.com *.fontawesome.com *.google.com data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' blob: data: https://dy3txbp01j6tt.cloudfront.net https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://dy3txbp01j6tt.cloudfront.net https://fonts.googleapis.com https://assets.zendesk.com
frame-src * https://dy3txbp01j6tt.cloudfront.net https://assets.zendesk.com https://farmer.gov.in http://farmer.gov.in  https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com 'self' https://www.pmfby.gov.in"
frame-ancestors 'self' https://market.opstechnology.com/ https://demomarket.opstechnology.com/ https://preview.opstechnology.com/  http://www.mypartinfo.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://4oge.ru 4ege.ru https://adservice.google.ru yastatic.net vk.com userapi.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru yandex.net *.yandex.net
object-src 'self' 4ege.ru rian.ru videoarhivos.ru *.rian.ru ria.ru hi-edu.tv mylect.ru https://4oge.ru https://*.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru
style-src 'self' 'unsafe-inline' https://4oge.ru *.googleapis.com *.gstatic.com https://fonts.googleapis.com https://*.gstatic.com google.com *.google.com
img-src * data: https://4oge.ru https://*.2mdn.net *.2mdn.net https://*.doubleclick.net https://*.googleapis.com *.googleapis.com https://*.googlesyndication.com https://*.gstatic.com awaps.yandex.ru *.gstatic.com
frame-src 'self' https://yastatic.net http://yandexadexchange.net http://www.youtube.com ria.ru www.math.vsu.ru *.yandex.ru yandex.ru hse.ru https://vk.com https://*.vk.com https://www.youtube.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com http://*.googleadservices.com https://*.googleadservices.com https://*.googlesyndication.com *.vk.com vk.com
font-src 'self' data: https://4oge.ru * https://*.googleapis.com https://*.gstatic.com *.gstatic.com *.googleapis.com
connect-src 'self' https://pagead2.googlesyndication.com https://4oge.ru ria.ru dl.dropboxusercontent.com https://www.youtube.com *.googlevideo.com https://*.gstatic.com google-analytics.com *.google-analytics.com yandex.ru *.yandex.ru
img-src 'self' https://siwecos.de https://webstats.eco.de data:
script-src 'self' 'sha256-gdawd7jo073hejcl6adkng1dwlyfctlsuyzyfugqz0k=' 'sha256-h/slwjgg7d4n8wn+bn6p3fcwkxjq4zn5hanhuk8zeig=' https://webstats.eco.de
"default-src 'self' 'unsafe-inline' *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de *.talent-im-einsatz.de zoll.de sg.geodatenzentrum.de *.openstreetmap.de
img-src 'self' *.zoll.de zoll.de *.itzbund.de sg.geodatenzentrum.de *.openstreetmap.de data:
script-src 'self' 'unsafe-inline' *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de zoll.de sg.geodatenzentrum.de *.openstreetmap.de"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thespruce.com *.qa.aws.thespruce.com atlas.thespruce.com atlas.local.thespruce.com"
style-src 'self' blob: https://*.roomiapp.com 'unsafe-inline' https://*.appboycdn.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://roomifonts.s3-us-west-2.amazonaws.com http://maxcdn.bootstrapcdn.com
font-src 'self' blob: data: https://*.roomiapp.com https://*.intercomcdn.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://themes.googleusercontent.com https://roomifonts.s3-us-west-2.amazonaws.com http://maxcdn.bootstrapcdn.com
worker-src 'self' https://*.roomiapp.com blob: https://share.intercom.io https://intercom-sheets.com https://*.youtube.com https://player.vimeo.com https://fast.wistia.net
media-src 'self' blob: https://*.youtube.com https://*.facebook.com https://*.satismeter.com https://js.intercomcdn.com
frame-src 'self' blob: https://*.facebook.com https://*.youtube.com https://*.greenhouse.io https://*.satismeter.com https://*.stripe.com https://connect.facebook.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.botsfordiscord.com www.googletagmanager.com tagmanager.google.com *.jquery.com www.google.com www.google-analytics.com *.cloudflare.com carbonads.com *.carbonads.com *.carbonads.net carbonads.net *.fontawesome.com fontawesome.com dmca.com *.dmca.com *.googlesyndication.com *.google.com *.facebook.com *.facebook.net *.onesignal.com onesignal.com *.googletagservices.com googletagservices.com *.googlesyndication.com googlesyndication.com"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.liveabout.com *.qa.aws.liveabout.com atlas.liveabout.com atlas.local.liveabout.com"
"default-src * data: blob: gap: 'unsafe-inline' 'unsafe-eval' ws: wss:
"default-src https: 'unsafe-eval' 'unsafe-inline' 'self' data: http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com
font-src 'unsafe-eval' 'unsafe-inline' 'self' https://cloud.webtype.com https://fonts.gstatic.com data: http://*.hotjar.com https://*.hotjar.com
script-src https: 'self' http://*.hotjar.com https://*.hotjar.com 'unsafe-eval' 'unsafe-inline'
"default-src 'self' www.kotapay.com www.intercepteft.com www.interceptcorporation.com demo.kotapay.com demo.intercepteft.com kotapay.com intercepteft.com interceptcorporation.com static.kotapay.com static.intercepteft.com static.interceptcorporation.com www.youtube.com
style-src 'self' 'unsafe-inline' www.kotapay.com www.intercepteft.com www.interceptcorporation.com demo.kotapay.com demo.intercepteft.com kotapay.com intercepteft.com interceptcorporation.com static.kotapay.com static.intercepteft.com static.interceptcorporation.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.kotapay.com www.intercepteft.com www.interceptcorporation.com  demo.kotapay.com demo.intercepteft.com kotapay.com intercepteft.com interceptcorporation.com www.google-analytics.com static.kotapay.com static.intercepteft.com static.interceptcorporation.com
img-src 'self' data: www.kotapay.com www.intercepteft.com www.interceptcorporation.com demo.kotapay.com demo.intercepteft.com  kotapay.com intercepteft.com interceptcorporation.com www.google-analytics.com static.kotapay.com static.intercepteft.com static.interceptcorporation.com
script-src 'self' https://stackpath.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com https://d2oh4tlt9mrke9.cloudfront.net https://ws.sessioncam.com
img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net blob: data:
connect-src 'self' https://www.google-analytics.com https://api.ipify.org https://yip01778.live.dynatrace.com https://ws.sessioncam.com
"default-src 'self' *.youtube.com *.hodlhodl.com *.googleapis.com *.gstatic.com *.google-analytics.com *.amazonaws.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hodlhodl.com *.google-analytics.com *.google.com *.gstatic.com *.googleapis.com
frame-src 'self' 'unsafe-inline' *.google.com *.gstatic.com *.googleapis.com *.youtube.com
style-src 'self' 'unsafe-inline' *.google.com *.gstatic.com *.googleapis.com
img-src 'self' data: lpcdn.lpsnmedia.net maps.googleapis.com maps.gstatic.com optimize.google.com stats.g.doubleclick.net t.co www.facebook.com www.google-analytics.com www.googletagmanager.com 'unsafe-inline'
script-src 'self' accdn.lpsnmedia.net analytics.twitter.com connect.facebook.net lpcdn.lpsnmedia.net lptag.liveperson.net lo.v.liveperson.net maps.googleapis.com optimize.google.com static.ads-twitter.com stats.g.doubleclick.net www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'
frame-src 'self' connect.facebook.net lpcdn.lpsnmedia.net optimize.google.com server.lon.liveperson.net www.facebook.com www.google.com www.youtube.com
child-src 'self' connect.facebook.net lpcdn.lpsnmedia.net optimize.google.com server.lon.liveperson.net www.facebook.com www.google.com www.youtube.com
style-src 'self' fonts.googleapis.com optimize.google.com 'unsafe-inline'
"default-src 'self' https: data: wss://*.zopim.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com  *.syndication.twimg.com *.surveygizmo.com *.createsend1.com *.gstatic.com niagararegion.createsend.com *.googleapis.com *.google-analytics.com *.google.com *.siteimprove.com translate.googleapis.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com accounts.google.com maps.googleapis.com content.googleapis.com www.google-analytics.com adimg.daumcdn.net connect.facebook.net roi.emforce.co.kr aigkorea.tt.omtrdc.net assets.adobedtm.com cdn-aitg.widerplanet.com t.buzzad.io js.adsrvr.org insight.adsrvr.org www.googletagmanager.com www.googleadservices.com tagmanager.google.com googleads.g.doubleclick.net stats.g.doubleclick.net bid.g.doubleclick.net www.facebook.com *.gstatic.com www.google.com www.google.co.kr fonts.googleapis.com www.google.co.il wat.ad.daum.net"
"script-src 'strict-dynamic' 'nonce-9485d8c4527a43bb6f17f21daa21207af76f290e' 'unsafe-eval' 'unsafe-inline' http: https:
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com securesurf.biz:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
"frame-ancestors http://www.vistaprint.co.nz https://www.vistaprint.co.nz http://vistaprint.co.nz https://vistaprint.co.nz
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wordpress.org/ http://getoptim.com/ https://getoptim.com/ http://*.getoptim.com/ https://*.getoptim.com/ https://code.afsanalytics.com/ http://block.s2normal.com/ https://block.s2normal.com/ http://*.googletagmanager.com/ https://*.googletagmanager.com/ http://*.googlesyndication.com/ https://*.googlesyndication.com/ https://accounts.google.com/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ http://google.com/ http://*.google.com/ http://www.google-analytics.com/ https://google.com/ https://*.google.com/ https://www.google.ru/ https://www.google.com.ua/ https://www.google.by/ https://www.google.kz/ http://yandex.ru/ http://yandex.ua/ http://yandex.by/ http://yandex.kz/ http://*.yandex.ru/ https://*.yandex.ru/ http://*.yandex.ua/ https://*.yandex.ua/ http://*.yandex.kz/ https://*.yandex.kz/ http://*.yandex.by/ https://*.yandex.by/ http://go.mail.ru/ http://*.googleapis.com/ https://*.googleapis.com/ https://plus.google.com/ http://userapi.com/ http://fonts.gstatic.com/ http://www.facebook.com/ http://graph.facebook.com/ https://*.facebook.com/ http://connect.mail.ru/ https://connect.mail.ru/ http://urls.api.twitter.com/ http://vk.com/ https://vk.com/ https://*.vk.com/ http://luxup.ru/ http://*.luxup.ru/ http://*.adlabs.ru/ http://*.adriver.ru/ http://trafmag.com/ http://*.trafmag.com/ https://*.trafmag.com/ https://cdn.api.twitter.com/ http://connect.ok.ru/ http://www.w3.org/ https://www.w3.org/ https://wordpress.org/ http://*.socialmart.ru/ https://*.socialmart.ru/ http://cdn.mxpnl.com/ http://cdnjs.cloudflare.com/
frame-src 'self' http://*.getoptim.com/ https://*.getoptim.com/ https://www.youtube.com/
"default-src 'self' https://maps.lightstoneproperty.co.za http://maps.lightstoneproperty.co.za http://*.tt.omtrdc.net http://dpm.demdex.net https://maps.googleapis.com http://fast.standardbank.demdex.net http://accstandardbank.d1.sc.omtrdc.net https://bid.g.doubleclick.net/xbbe/pixel http://8448999.fls.doubleclick.net https://cdn.krxd.net https://bs.serving-sys.com/serving https://secure-ds.serving-sys.com https://standardbank.demdex.net https://www.youtube.com/ https://*.map2.ssl.hwcdn.net
img-src 'self' data: http://accstandardbank.d1.sc.omtrdc.net https://www.google.com https://www.google.co.za http://cm.everesttech.net https://beacon.krxd.net https://jslog.krxd.net https://standardbank.demdex.net https://dpm.demdex.net http://*.tt.omtrdc.net https://*.map2.ssl.hwcdn.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://assets.adobedtm.com https://secure-ds.serving-sys.com http://cdn.krxd.net http://www.googleadservices.com http://www.googletagmanager.com https://consumer.krxd.net https://googleads.g.doubleclick.net https://beacon.krxd.net https://tribeca.vidavee.com http://*.tt.omtrdc.net https://*.map2.ssl.hwcdn.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com c.disquscdn.com
script-src 'self' 'unsafe-inline' fathom.christophberger.com disqus.com *.disqus.com *.mailerlite.com c.disquscdn.com matomo.christophberger.com
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com:*  *.bootstrapcdn.com:*  *.gstatic.com:* http://*:*
style-src 'self' 'unsafe-inline' *.google.com:*  *.bootstrapcdn.com:*
img-src data: blob: 'self' *.google.com:*  *.bootstrapcdn.com:* http://*:*
child-src 'self' *.google.com:*  *.bootstrapcdn.com:*   *.gstatic.com:*
frame-src 'self' *.google.com:*  *.bootstrapcdn.com:*   *.gstatic.com:*
frame-ancestors 'self' *.google.com:*  *.bootstrapcdn.com:*  *.gstatic.com:*
"default-src 'self' https://lookback.io https://*.lookback.io blob: http://*.stripe.com https://*.stripe.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://*.accountdock.com https://fonts.gstatic.com http://42matters.com https://42matters.com https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com
script-src 'self' 'unsafe-inline' https://lookback.io https://*.lookback.io blob: http://checkout.stripe.com https://checkout.stripe.com http://*.stripe.com https://*.stripe.com http://*.accountdock.com https://*.accountdock.com http://*.airtable.com https://*.airtable.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://widget.intercom.io http://cdn.mxpnl.com https://cdn.mxpnl.com http://platform.twitter.com https://platform.twitter.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com http://42matters.com https://42matters.com 'unsafe-eval' http://cloudfront.loggly.com https://cloudfront.loggly.com https://dna8twue3dlxq.cloudfront.net https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com http://cdn.segment.com https://cdn.segment.com
connect-src * 'self' ws: wss: https://lookback.io https://*.lookback.io blob: http://*.stripe.com https://*.stripe.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://*.accountdock.com https://fonts.gstatic.com http://42matters.com https://42matters.com https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com
img-src data: 'self' https://lookback.io https://*.lookback.io blob: http://*.stripe.com https://*.stripe.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://images.intercom.io https://downloads.intercomcdn.com https://*.accountdock.com http://www.google-analytics.com https://www.google-analytics.com https://pbs.twimg.com https://fonts.gstatic.com https://*.gravatar.com https://gravatar.com https://*.wp.com https://platform.slack-edge.com http://placekitten.com http://placehold.it https://placeholdit.imgix.net https://api.qrserver.com https://developer.android.com https://*.ggpht.com http://*.googleusercontent.com https://*.googleusercontent.com http://42matters.com https://42matters.com https://unicorns-cdn.global.ssl.fastly.net http://logs-01.loggly.com https://logs-01.loggly.com https://dna8twue3dlxq.cloudfront.net https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com https://d183seq046c5ro.cloudfront.net https://s3-eu-west-1.amazonaws.com
style-src 'self' 'unsafe-inline' https://lookback.io https://*.lookback.io blob: http://*.stripe.com https://*.stripe.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://*.accountdock.com https://fonts.googleapis.com https://fonts.gstatic.com http://42matters.com https://42matters.com https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com
frame-src 'self' https://lookback.io https://*.lookback.io blob: http://*.stripe.com https://*.stripe.com https://airtable.com https://static.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://js.intercomcdn.com https://*.accountdock.com http://platform.twitter.com https://platform.twitter.com https://fonts.gstatic.com http://*.youtube.com https://*.youtube.com https://vine.co http://42matters.com https://42matters.com https://lookback-production.s3-accelerate.amazonaws.com https://d3hrs3zjzbrdq6.cloudfront.net https://resources.lookback.io https://deungs2vexe3s.cloudfront.net https://lookback-public.s3-eu-west-1.amazonaws.com https://lookback-public.s3.amazonaws.com
img-src  'self' data: https://customer.cludo.com https://api.cludo.com https://api-us1.cludo.com
script-src  'self' 'unsafe-inline' 'unsafe-eval' https://customer.cludo.com https://api.cludo.com https://api-us1.cludo.com
style-src  'self' 'unsafe-inline' https://customer.cludo.com https://api.cludo.com https://api-us1.cludo.com
connect-src 'self' https://customer.cludo.com https://api.cludo.com https://api-us1.cludo.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://platform.twitter.com https://www.googletagmanager.com http://cdnjs.cloudflare.com https://www.google-analytics.com http://static.hotjar.com https://script.hotjar.com https://maps.googleapis.com https://tagmanager.google.com https://in.hotjar.com https://connect.facebook.net https://be-myway.netmng.com http://ajax.googleapis.com https://stats.g.doubleclick.net https://www.google.com/ https://www.gstatic.com/ data:
style-src 'self' 'unsafe-inline' *.deerfield.aim.local:* *.aimspecialtyhealth.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.deerfield.aim.local:* *.aimspecialtyhealth.com www.recaptcha.net recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
frame-src 'self' 'unsafe-inline' *.deerfield.aim.local:* *.aimspecialtyhealth.com www.recaptcha.net recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/"
frame-src 'self' *.gust.edu.kw goo.gl www.google.com
"script-src 'self' https://www.gstatic.com/charts/ https://www.googletagmanager.com https://www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' https: http:
"script-src 'self' blob: 'unsafe-inline' https://*.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.googleapis.com https://fonts.gstatic.com https://cdn.ravenjs.com https://*.sentry.io https://sentry.io https://*.freshchat.com https://*.rtschannel.com wss://*.freshchat.com wss://*.rtschannel.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io wss://*.intercomcdn.com https://*.firebaseio.com https://*.firebaseio.com wss://*.firebaseio.com https://*.facebook.net
connect-src 'self' blob: https://*.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.googleapis.com https://fonts.gstatic.com https://cdn.ravenjs.com https://*.sentry.io https://sentry.io https://*.freshchat.com https://*.rtschannel.com wss://*.freshchat.com wss://*.rtschannel.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io wss://*.intercomcdn.com https://*.firebaseio.com https://*.firebaseio.com wss://*.firebaseio.com https://*.facebook.net https://*.cryptology.com https://api.coinmarketcap.com
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.i-alarmsysteme.de https://www.youtube.com https://www.jablonet.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://www.googletagmanager.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.sc.pages02.net https://www.google.com  http://addshoppers.s3.amazonaws.com  http://connect.facebook.net  https://www.gstatic.com http://www.rtb123.com http://pixel.quantserve.com http://*.shop.pe http://shop.pe https://googleads.g.doubleclick.net https://code.jquery.com    http://tt.mbww.com https://staticxx.facebook.com https://secure.quantserve.com https://tag.bounceexchange.com https://insight.adsrvr.org https://api.bounceexchange.com https://*.cloudfront.net https://*.scdn2.secure.raxcdn.com *.bounceexchange.com http://api.bounceexchange.com https://cdn.optimizely.com/ www.youtube.com s.ytimg.com static.getchute.com qicm.americanexpress.com ci-mpsnare.iovation.com mpsnare.iesnare.com secure.cmax.americanexpress.com https://connect.facebook.net https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://tagmanager.google.com optimizely.s3.amazonaws.com app.optimizely.com cdn3.optimizely.com  *.rtb123.com  *.s3.amazonaws.com https://tt.mbww.com/  https://shop.pe https://m.addthisedge.com https://m.addthis.com https://*.s3.amazonaws.com https://www.googleadservices.com/ https://www.google-analytics.com https://s3.amazonaws.com https://beacon.sojern.com https://*.micpn.com *.bing.com https://tracker.marinsm.com https://cdn.onesignal.com http://cdnjs.cloudflare.com/ *.googleadservices.com/ beacon.sojern.com cdn.onesignal.com *.mathtag.com rules.quantcount.com https://ak1s.abmr.net https://maps.googleapis.com/ https://sc-static.net/ https://translate.google.com/ https://translate.googleapis.com/ https://s.pinimg.com/ https://resources.xg4ken.com/ https://services.xg4ken.com/ *.addthis.com  https://home-c11.incontact.com/incontact/chatclient/js/embed.min.js https://js.adsrvr.org/ https://cdn.quantummetric.com/ https://seaworld-app.quantummetric.com https://members.cj.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com http://*.shop.pe http://addshoppers.s3.amazonaws.com https://*.scdn2.secure.raxcdn.com https://*.cloudfront.net https://*.secure.raxcdn.com https://qicm.americanexpress.com https://secure.cmax.americanexpress.com maxcdn.bootstrapcdn.com tagmanager.google.com  *.s3.amazonaws.com https://s3.amazonaws.com https://addstrap-ui.addshoppers.com https://translate.googleapis.com https://members.cj.com
font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com *.shop.pe  *.scdn2.secure.raxcdn.com https://*.buschgardens.com  https://buschgardens.com *.seaworld.com *.sesameplace.com https://www.sesameplace.com *.cloudfront.net *.secure.raxcdn.com https://www.aexp-static.com https://seaworld.scdn3.secure.raxcdn.com https://maxcdn.bootstrapcdn.com s3.amazonaws.com http://maxcdn.bootstrapcdn.com https://members.cj.com
frame-src 'self' http://s7.addthis.com https://*.fls.doubleclick.net/ http://*.fls.doubleclick.net/ http://*.facebook.com/ https://bid.g.doubleclick.net/  https://www.youtube.com https://www.seaworldlibrary.com https://docs.google.com https://*.seaworld.com/ https://commerce.4adventure.com https://*.seaworldparks.com https://*.watercountry.com https://*.commerce.4adventure.com https://*.adventureisland.com https://*.aquaticabyseaworld.com https://*.sesameplace.com http://6258894.fls.doubleclick.net http://6258894.fls.doubleclick.net http://4174228.fls.doubleclick.net https://4174228.fls.doubleclick.net https://www.googletagmanager.com https://staticxx.facebook.com https://s7.addthis.com https://insight.adsrvr.org https://assets.bounceexchange.com/ https://*.cdn.optimizely.com/ https://www.pages02.net/ https://tt.mbww.com/ https://secure.buschgardens.com https://maps.google.com https://www.google.com/ https://secure.aquatica.com https://*.americanexpress.com/ https://*.bounceexchange.com http://contentz.mkt922.com/ https://pixel.mathtag.com/ https://edge.addthis.com/ https://www.chargerback.com https://*.widencdn.net/ https://*.seaworldlibrary.com https://www.surveygizmo.com/ https://tr.snapchat.com/ https://qa-secure.buschgardens.com https://home-c11.incontact.com/ https://members.cj.com https://survey.seaworldentertainment.com/
connect-src 'self' http://m.addthis.com https://staticxx.facebook.com https://s7.addthis.com https://insight.adsrvr.org https://*.scdn2.secure.raxcdn.com https://logx.optimizely.com https://*.secure.raxcdn.com *.s3.amazonaws.com cache.getchute.com https://online.americanexpress.com https://tapi.optimizely.com https://shopper.shop.pe https://shop.pe  https://rtb123.com https://api.getchute.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.as-labs.addshoppers.com/ https://as-labs.addshoppers.com https://s3.amazonaws.com https://www.google.com https://events.bouncex.net https://onesignal.com https://*.optimizely.com https://onesignal.com https://errors.client.optimizely.com https://translate.googleapis.com https://ct.pinterest.com/ https://seaworld-app.quantummetric.com/
media-src 'self' https://scontent.cdninstagram.com https://*.as-labs.addshoppers.com/  *.s3.amazonaws.com/ https://s3.amazonaws.com/images/backgroundimage.jpeg  s3.amazonaws.com/ https://seaworld.scdn3.secure.raxcdn.com/  https://stage-media.scdn6.secure.raxcdn.com/
font-src 'self'  *.thehartford.com  *.hfdstatic.com fonts.gstatic.com
frame-src  *.thehartford.com www.youtube.com pub.s1.exacttarget.com *.fls.doubleclick.net bid.g.doubleclick.net hosted.where2getit.com nebula-cdn.kampyle.com 4198899.fls.doubleclick.net 8941796.fls.doubleclick.net uk132.infusionsoft.com datacloud.tealiumiq.com connect.facebook.net
connect-src *.thehartford.com rules.atgsvcs.com www.google-analytics.com stats.g.doubleclick.net img.c3tag.com www.googletagmanager.com ui.powerreviews.com ampcid.google.com s.srvsynd.com readservices-b2c.powerreviews.com ct.pinterest.com api.genesyscloud.com 530-ct.c3tag.com my.tealiumiq.com display.powerreviews.com
img-src 'self' data: *.thehartford.com  *.hfdstatic.com  http://image.insurance.thehartford.com ct.pinterest.com pinterest.adsymptotic.com uconnect.tealiumiq.com da.usaa.com uk132.infusionsoft.com hits.convergetrack.com pixel.quantserve.com t.powerreviews.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.facebook.com secure.adnxs.com login.dotomi.com nebula-cdn.kampyle.com udc-neb.kampyle.com www.googletagmanager.com sp.analytics.yahoo.com bat.bing.com googleads.g.doubleclick.net my.tealiumiq.com analytics.convertlanguage.com
style-src 'self'  *.thehartford.com  *.hfdstatic.com ui.powerreviews.com fonts.googleapis.com thehartford-consumer--tst.widget.custhelp.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.thehartford.com *.hfdstatic.com vsvipmw01.rightnowtech.com thehartford-consumer.widget.custhelp.com rules.atgsvcs.com display.powerreviews.com www.linkedin.com s.pinimg.com ni.thehartford.com uconnect.tealiumiq.com my.tealiumiq.com datacloud.tealiumiq.com googleads.g.doubleclick.net secure.quantserve.com ds-aksb-a.akamaihd.net secure.adnxs.com insight.adsrvr.org data.adxcel-ec2.com aa.agkn.com aa.agkn.com sp.analytics.yahoo.com static.atgsvcs.com beacon.krxd.net bat.bing.com sjs.bizographics.com 530 ct.c3tag.com assets.contently.com track.contently.com hits.convergetrack.com thehartford-consumer--tst1.custhelp.com thehartford-consumer--tst1.widget.custhelp.com s.delvenetworks.com login.dotomi.com 2576829.fls.doubleclick.net 4198899.fls.doubleclick.net 4980559.fls.doubleclick.net 8941796.fls.doubleclick.net pubads.g.doubleclick.net stats.g.doubleclick.net as00.estara.com conv-tm.everesttech.net www.facebook.com connect.facebook.net adservice.google.com www.google.com www.googleadservices.com www.google-analytics.com  www.googletagmanager.com mpsnare.iesnare.com uk132.infusionsoft.com solutions.invocacdn.com nebula-cdn.kampyle.com secure.leadforensics.com video.limelight.com www.limelight.com px.ads.linkedin.com www.livelook.com service.maxymiser.net cdn.mouseflow.com mpp.mxptint.net onlinebusinessservicsc60333118us1.cobrowse.oraclecloud.com public.cobrowse.oraclecloud.com pixelg.adswizz.com readservices-b2c.powerreviews.com t.powerreviews.com ui.powerreviews.com pixel.quantserve.com www.rackcdn.com bcvipmw11.rightnowtech.com www.rnengage.com s.srvsynd.com trc.taboola.com tags.tiqcdn.com www.youtube.com i.ytimg.com i9.ytimg.com s.ytimg.com adadvisor.net cdn.ampproject.org fontawesome.io rules.quantcount.com analytics.convertlanguage.com"
"child-src 'self' *.ecentry.io *.pipz.io *.onesignal.com *.os.tc www.youtube.com player.vimeo.com www.google.com disqus.com www.facebook.com staticxx.facebook.com *.google.com content.googleapis.com app.livestorm.co *.blueticket.com.br *.spotify.com *.hotjar.com *.maxmilhas.com.br
script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.youtube.com *.ytimg.com"
img-src data: https://www.googletagmanager.com https://px.moatads.com/ https://d.agkn.com/ https://aa.agkn.com https://static.agkn.com https://pantene.com https://www.pantene.com https://cdn.pricespider.com/  https://cdn1.pricespider.com/ https://pantene-assets-prod.azureedge.net https://pantene-nonprod.azureedge.net https://l.betrad.com https://betrad.com https://c.betrad.com/ https://www.google.com/ https://stats.g.doubleclick.net https://tiles.mapbox.com/ https://b.tiles.mapbox.com/ https://a.tiles.mapbox.com https://api.mapbox.com/ https://cdn.pricespider.com https://embeddedcloud.pricespider.com/ https://pantenenonprod.z20.web.core.windows.net/ https://pantene-nonprod.azurewebsites.net/ https://panteneprod.blob.core.windows.net/ https://pantenenonprod.blob.core.windows.net https://images.ctfassets.net/ https://cdn.contentful.com https://azcdn.odyssey.pgsitecore.com https://14daychallengeassetsprod.azureedge.net https://www.google-analytics.com
"default-src http: https: 'unsafe-inline' 'unsafe-eval' data: blob:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: mindbox.ru *.mindbox.ru dodopizza.com *.dodopizza.com dodopizza.ru *.dodopizza.ru dodopizza.io *.dodopizza.io dodopizza.kz *.dodopizza.kz dodopizza.by *.dodopizza.by dodopizza.uz *.dodopizza.uz dodopizza.cn *.dodopizza.cn dodopizza.ro *.dodopizza.ro dodopizza.ee *.dodopizza.ee dodopizza.lt *.dodopizza.lt dodopizza.kg *.dodopizza.kg dodopizza.si *.dodopizza.si dodopizza.co.uk *.dodopizza.co.uk facebook.com *.facebook.com facebook.net *.facebook.net google.com *.google.com google.ru *.google.ru googleapis.com *.googleapis.com googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com gstatic.com *.gstatic.com g.doubleclick.net *.g.doubleclick.net msecnd.net *.msecnd.net yandex.ru *.yandex.ru ivideon.com *.ivideon.com extcam.com *.extcam.com windows.net *.windows.net visualstudio.com *.visualstudio.com dodois.com *.dodois.com dodopizzaru-a.akamaihd.net dodopizza-a.akamaihd.net dodopizzadev-a.akamaihd.net vk.com *.vk.com top-fwz1.mail.ru ad.mail.ru sniperlog.ru *.sniperlog.ru adsniper.ru *.adsniper.ru bumlam.com *.bumlam.com api.useinsider.com *.api.useinsider.com doubleclick.net *.doubleclick.net api.sociaplus.com *.api.sociaplus.com"
"style-src 'self' 'unsafe-inline' http://yerimpost.com/wp-content/themes/fox/css/ http://s.gravatar.com/css/hovercard.css?ver=2018janaa http://s.gravatar.com/css/services.css?ver=2018janaa https://platform.twitter.com/css/timeline.2244cdc1aa6afd59d64cc31948a29dca.light.ltr.css https://fonts.googleapis.com/css"
"default-src 'self' https: blob: https://*.olark.com
connect-src 'self' https://pubassets.global.ssl.fastly.net https://*.olark.com https://*.trackjs.com export.highcharts.com https://www.google-analytics.com
script-src 'self' https://*.olark.com https://*.trackjs.com https://cdn.polyfill.io https://pubassets.global.ssl.fastly.net https://www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' https://*.olark.com https://pubassets.global.ssl.fastly.net
media-src https: *.wistia.com *.wistia.net embedwistia-a.akamaihd.net/ *.litix.io data: blob:
img-src https://d26y28lt6cxszo.cloudfront.net https://d2jg2sg1gvdls8.cloudfront.net https://chart.googleapis.com 'self'"
"frame-ancestors 'self' https://metrika.yandex.ru https://www.google.com http://webvisor.com https://analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com http://awards.ratingruneta.ru"
connect-src * wss://* api.braintreegateway.com client-analytics.braintreegateway.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' s.grokimg.net fs.grokimg.net googleads.g.doubleclick.net grokker-static.freetls.fastly.net *.jwpcdn.com www.gstatic.com s.yimg.com sp.analytics.yahoo.com js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com www.youtube.com s.ytimg.com loader.getbee.io https://js.hscta.net cta-service-cms2.hubspot.com www.wufoo.com tagmanager.google.com connect.facebook.net *.h-cdn.com https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io app-rsrc.getbee.io stats.g.doubleclick.net connect.facebook.com www.googleadservices.com www.googletagmanager.com platform.twitter.com
img-src 'self' p.grokimg.net fp.grokimg.net grokker-pictures.freetls.fastly.net s.grokimg.net fs.grokimg.net grokker-static.freetls.fastly.net cms.grokimg.net www.facebook.com s3.amazonaws.com jwpltx.com s.amazon-adsystem.com sp.analytics.yahoo.com googleads.g.doubleclick.net trk.kissmetrics.com www.google.com data: stats.g.doubleclick.net no-cache.hubspot.com https://shareasale.com grokker-webvtt.freetls.fastly.net assets.braintreegateway.com checkout.paypal.com graph.facebook.com scontent.xx.fbcdn.net https://*.zopim.com https://*.zopim.io
font-src 'self' s.grokimg.net fs.grokimg.net grokker-static.freetls.fastly.net ssl.p.jwpcdn.com https://*.zopim.com https://*.zopim.io data:
media-src hls.grokimg.net fhls.grokimg.net grokker-hls.freetls.fastly.net hls-free.grokimg.net fhls-free.grokimg.net grokker-free-hls.freetls.fastly.net webvtt.grokimg.net fwebvtt.grokimg.net grokker-webvtt.freetls.fastly.net blob: https://*.zopim.com https://*.zopim.io
style-src 'self' 'unsafe-inline' s.grokimg.net fs.grokimg.net grokker-static.freetls.fastly.net tagmanager.google.com
frame-src *.facebook.com www.youtube.com app.getbee.io grokker.wufoo.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob:
child-src *.facebook.com www.youtube.com app.getbee.io grokker.wufoo.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob:
object-src 'self' s.grokimg.net fs.grokimg.net grokker-static.freetls.fastly.net p.grokimg.net fp.grokimg.net grokker-pictures.freetls.fastly.net hls.grokimg.net fhls.grokimg.net grokker-hls.freetls.fastly.net hls-free.grokimg.net fhls-free.grokimg.net grokker-free-hls.freetls.fastly.net webvtt.grokimg.net fwebvtt.grokimg.net grokker-webvtt.freetls.fastly.net"
"default-src https: data: 'unsafe-inline' 'unsafe-eval"
"default-src 'self' *.google.com https://twitter.com *.twitter.com *.twimg.com *.youtube.com *.facebook.com *.redditmedia.com *.reddit.com *.embedly.com *.embed.ly *.vimeo.com *.instagram.com *.soundcloud.com https://gfycat.com *.dailymotion.com https://coub.com *.deviantart.com *.twitch.tv
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com https://mtgjson.com *.google.com *.google-analytics.com *.googletagmanager.com *.twitter.com *.twimg.com *.redditmedia.com *.embedly.com *.embed.ly *.instagram.com *.facebook.com *.facebook.net *.ttvnw.net *.twitch.tv *.krxd.net *.quantserve.com
style-src 'self' 'unsafe-inline' *.google.com https://fonts.google.com *.googleapis.com *.twitter.com *.embedly.com *.embed.ly
font-src 'self' https://fonts.gstatic.com https://fonts.google.com *.googleapis.com
form-action 'self' *.twitter.com *.google.com *.vk.com *.facebook.com
img-src 'self' data: https://old.framatube.org https://framasoft.org https://stats.framasoft.org https://framaclic.org
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://framasoft.org
img-src 'self' sealserver.trustwave.com smarticon.geotrust.com chart.googleapis.com www.shift4.com
script-src smarticon.geotrust.com 'unsafe-inline' 'unsafe-eval' 'self'
frame-src 'self' blob: ms-word: ms-excel: ms-powerpoint: help.landax.no www.youtube.com/embed/ player.vimeo.com/video/ https://www.yammer.com/ https://persona.yammer.com/ https://www.google.com/recaptcha/ www.google.com/calendar/hosted/ google.com/calendar/hosted/ calendar.google.com https://kundeportal.landax.no/ https://internkundeportal.landax.no/
script-src 'unsafe-inline' 'unsafe-eval' 'self' about: *.newrelic.com www.google-analytics.com google-analytics.com *.googleapis.com maps.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.nr-data.net *.assets-yammer.com
connect-src 'self' 'unsafe-inline' www.google-analytics.com google-analytics.com *.nr-data.net *.newrelic.com
form-action 'self' no.landax.landaxapp://openidredirect *.facebook.com https://*.landax.no
script-src 'self' * 'unsafe-inline' 'unsafe-eval' *
"frame-src 'self' bulavka.by *.youtube.com *.google.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com www.gstatic.com data:
img-src 'self' steamcdn-a.akamaihd.net steamcommunity-a.akamaihd.net www.google.com www.google-analytics.com stats.g.doubleclick.net"
connect-src 'self' api.trustedshops.com www-staging.schutzklick.de www.schutzklick.de
frame-src 'self' *.facebook.com *.twitter.com *.google.com www.googlecommerce.com
img-src 'self' data: *.facebook.com www.paypal.com widgets.trustedshops.com img.billiger.de img.idealo.com www.haendlerbund.de *.google-analytics.com www.google.com www.googlecommerce.com *.gstatic.com stats.g.doubleclick.net
script-src *.facebook.com *.google.com www.googlecommerce.com www.gstatic.com *.google-analytics.com *.newrelic.com bam.nr-data.net widgets.trustedshops.com www.schutzklick.de 'self' 'unsafe-inline' 'unsafe-eval'
script-src 'unsafe-eval' 'self' www.gstatic.com www.google.com www.google-analytics.com ajax.googleapis.com *.eyfpc.com *.brightcove.net *.brightcove.com vjs.zencdn.net *.akamaihd.net js-agent.newrelic.com bam.nr-data.net calcs.eyfinancialplanner.com 'unsafe-inline'
connect-src 'self' api.on24.com *.akamaihd.net *.brightcove.com *.brightcove.net
img-src 'self' * *.akamaihd.net *.eyfpc.com *.brightcove.net brightcove04.o.brightcove.com metrics.brightcove.com *.brightcove.com www.google-analytics.com www.google.com
frame-src 'self' www.google.com *.brightcove.com *.brightcove.net *.eyfinancialplanner.com
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' wss://chat.polbox.tv:8001 https://cdn.polbox.tv https://bat.bing.com https://www.youtube.com wss://*.hotjar.com https://mc.yandex.ru https://static.xx.fbcdn.net https://*.polbox.tv https://cdn.ampproject.org https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://*.consensu.org https://*.sharethis.com https://*.google.com https://*.facebook.com https://*.facebook.net https://*.facebookmarketingdevelopers.com https://*.hotjar.com https://*.esputnik.com https://esputnik.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-analytics.net https://*.googleapis.com https://*.gstatic.com https://*.hubspot.com https://*.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com maps.google.com maps.googleapis.com
connect-src 'self' steemit.com api.steemit.com dist.one wss://rpc.dist.one api.blocktrades.us https://steemitimages.com https://translate.googleapis.com
script-src 'self' www.google-analytics.com pagead2.googlesyndication.com adservice.google.com connect.facebook.net
script-src 'self' *.googleapis.com *.google-analytics.com *.zopim.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net *.cloudflare.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' *.zopim.com *.zdassets.com phillipchatbot3.zendesk.com wss:
frame-src 'self' https://www.youtube-nocookie.com https://player.vimeo.com https://*.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net https://s.ytimg.com
font-src  'self' data: fonts.gstatic.com *.zopim.com
connect-src  'self' analytics.monkeytracker.cz ws://*.zopim.com wss://*.zopim.com app.mluvii.com wss://app.mluvii.com  https://www.facebook.com
script-src  'self' 'unsafe-inline' 'unsafe-eval' maps.google.com *.googleapis.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com www.googleadservices.com analytics.monkeytracker.cz www.google.com *.zopim.com pt app.mluvii.com connect.facebook.net https://www.facebook.com
frame-src  'self' www.youtube.com www.patro.cz 3dsecure.gpwebpay.com app.mluvii.com samoobsluha.tescomobile.cz
child-src  'self' www.youtube.com www.patro.cz 3dsecure.gpwebpay.com app.mluvii.com samoobsluha.tescomobile.cz
frame-ancestors  'self' www.patro.cz 3dsecure.gpwebpay.com app.mluvii.com
img-src  'self' data: *.google.cz *.google.com *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.zopim.io *.zopim.com app.mluvii.com www.facebook.com *.placeholder.com
style-src  'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com analytics.monkeytracker.cz app.mluvii.com
"script-src 'self' 'unsafe-inline' script.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/ maps.googleapis.com 'unsafe-eval' translate.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com platform.instagram.com/en_us/embeds.js www.instagram.com/embed.js platform.twitter.com/widgets.js platform.twitter.com/js/ cdn.syndication.twimg.com/tweets.json connect.facebook.net www.facebook.com 'sha256-mnyiwrivzdv4crjparu0pw6f3lmnpqf08t9f7+ducz8=' 'sha256-fiadhpxewyqdiemxxifqtfiep1hzgqytjwlz7jvg0i0=' 'nonce-yzvhndi2otgtotbkzc00nzq5ltk0mzmtngfhngiwzjg2nzrh'
img-src 'self' trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/c s3.amazonaws.com/trk.cetrk.com/s gtrk.s3.amazonaws.com s3-eu-west-1.amazonaws.com/congestion-cameras images.ctfassets.net images.contentful.com translate.google.com translate.googleapis.com www.google.com *.googleapis.com *.ggpht.com *.gstatic.com www.google-analytics.com stats.g.doubleclick.net syndication.twitter.com/i/jot syndication.twitter.com/i/jot/syndication pbs.twimg.com/media/ pbs.twimg.com/profile_images/ abs.twimg.com/emoji/ platform.twitter.com/css/ congestion-cameras.s3.amazonaws.com data: https://www.facebook.com/tr/ https://d20vwa69zln1wj.cloudfront.net s3-eu-west-1.amazonaws.com
script-src 'unsafe-inline' 'unsafe-eval' https://cdn.useproof.com https://airswap.io https://*.airswap.io https://api.mixpanel.com https://*.googletagmanager.com https://ethgasstation.info https://*.google-analytics.com https://widget.intercom.io https://*.sendwyre.com https://js.intercomcdn.com
style-src 'self' 'unsafe-inline' data: https://airswap.io https://*.airswap.io https://fonts.googleapis.com blob: https://widget.intercom.io
img-src 'self' data: *.mijnio.nl *.ons-notificaties.nl iome.s3.amazonaws.com iome-staging.s3.amazonaws.com iome-development-stage.s3.amazonaws.com *.carenzorgt.nl caren.s3.amazonaws.com d1yim1i5ghw5xv.cloudfront.net *.ioservice.net cloud.githubusercontent.com kamino.ons.io kamino-staging.ons.io kamino-development.ons.io herald-development.s3.amazonaws.com herald-staging.s3.amazonaws.com herald-production.s3.amazonaws.com
default-src * data: 'unsafe-eval' 'unsafe-inline'"
"default-src 'self' ooyta.com e.ooyta.com www.google.com google.com www.google.com.af www.google-analytics.com https://stats.g.doubleclick.net s.ooyta.com m.ooyta.com
font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ooyta.com e.ooyta.com s.ooyta.com google.com
script-src 'self' 'unsafe-inline' e.ooyta.com ooyta.com s.ooyta.com https://www.google-analytics.com/analytics.js ajax.cloudflare.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ooyta.com e.ooyta.com s.ooyta.com ajax.cloudflare.com"
"default-src * 'self' 'unsafe-inline' blob:
img-src 'self' data: banners.mctools.org minotar.net www.google-analytics.com
script-src 'self' stackpath.bootstrapcdn.com code.jquery.com www.google-analytics.com
"default-src * blob: data: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: *"
"default-src 'unsafe-inline' data: 'self' *.googleapis.com *.fontawesome.com *.jquery.com *.bootstrapcdn.com *.cloudflare.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com
img-src 'self' maps.googleapis.com maps.gstatic.com csi.gstatic.com data:
"script-src 'self' https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://use.typekit.net https://ajax.googleapis.com https://code.jquery.com https://rootbank.disqus.com https://disqus.com https://c.disquscdn.com https://root.us15.list-manage.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net *.cloudflare.com https://stackpath.bootstrapcdn.com 'unsafe-inline'
font-src 'self' https://maxcdn.bootstrapcdn.com https://js.intercomcdn.com data: https://use.typekit.net https://fonts.gstatic.com https://fonts.googleapis.com"
"default-src 'self' *.sharethis.com wordpress.com *.bootstrapcdn.com *.adroll.com *.searchiq.co *.disqus.com *.wp.com *.gstatic.com *.useproof.com *.facebook.com *.hotjar.com vendorlist.consensu.org l.sharethis.com c.sharethis.mgr.consensu.org *.hotjar.com *.oemkiosks.com oemkiosks.com *.tawk.to *.cloudflare.com *.licdn.com *.leadboxer.com *.addthis.com oemkiosks-59hvecv.netdna-ssl.com *.google-analytics.com wss://*.tawk.to wss://*.hotjar.com  wootric-eligibility.herokuapp.com *.herokuapp.com *.cloudfront.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.youtube.com *.disqus.com *.searchiq.co *.google.com *.disquscdn.com *.wp.com *.gravatar.com disqus.com *.bing.com *.doubleclick.net pixel-geo.prfct.co *.useproof.com m.addthisedge.com *.linkedin.com lead.watch c.sharethis.mgr.consensu.org oemkiosks-59hvecv.netdna-ssl.com *.facebook.com *.tawk.to *.pinterest.com *.licdn.com *.adroll.com *.lead.watch *.marinsm.com *.facebook.net *.sharethis.com *.addthis.com *.albacross.com *.leadboxer.com *.hotjar.com *.googleadservices.com *.cloudflare.com *.google-analytics.com wss://*.tawk.to https://cjshare.com *.cjshare.com *.cleverjump.org *.jsdelivr.net https://sharebutton.net *.sharebutton.net *.wootric.com cdn.wootric.com *.searchiq.co *.oemkiosks.com oemkiosks.com
style-src 'self' 'unsafe-inline' *.gravatar.com *.searchiq.co *.disquscdn.com *.rawgit.com *.bootstrapcdn.com *.googleapis.com *.jsdelivr.net oemkiosks-59hvecv.netdna-ssl.com *.oemkiosks.com oemkiosks.com
frame-src *.oemkiosks.com oemkiosks.com *.facebook.com *.google.com c.sharethis.mgr.consensu.org t.sharethis.com s7.addthis.com vars.hotjar.com static-v.tawk.to va.tawk.to disqus.com *.youtube.com *.vimeo.com"
"frame-ancestors 'self' https://*.trackrec.com https://projectmapper.com http://test.projectmapper.com https://dsspatial.jacobs.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://projectmapper-skm.netdna-ssl.com https://projectmapper-basemaps-skm.netdna-ssl.com https://projectmapper-light-skm.netdna-ssl.com https://projectmappertest-skm.netdna-ssl.com https://ssl.google-analytics.com
img-src 'self' data: https://*.trackrec.com https://projectmapper.com https://projectmapper-skm.netdna-ssl.com https://projectmapper-basemaps-skm.netdna-ssl.com https://projectmapper-light-skm.netdna-ssl.com https://projectmappertest-skm.netdna-ssl.com https://api.themapcloud.com https://tile.publicsectormapping.gov.scot https://ssl.google-analytics.com https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://tile.openweathermap.org https://chart.googleapis.com https://nls-0.tileserver.com
style-src 'unsafe-inline' 'self' projectmapper-skm.netdna-ssl.com projectmapper-basemaps-skm.netdna-ssl.com projectmapper-light-skm.netdna-ssl.com projectmappertest-skm.netdna-ssl.com data:
"default-src 'self' chat.oikeus.fi 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.twitter.com *.twimg.com *.ytimg.com 'unsafe-inline' data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.syndication.twimg.com *.twitter.com *.facebook.net
style-src 'self' *.facebook.net *.twimg.com *.twitter.com 'unsafe-inline'
script-src https: http://localhost *.google-analytics.com 'unsafe-inline' 'unsafe-eval'
style-src https: http://localhost 'unsafe-inline' data:
img-src https: http://localhost *.google-analytics.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.linux-audit.com https://cdn.ampproject.org https://www.google-analytics.com ssl.google-analytics.com
img-src 'self' data: cisofy.com https://assets.linux-audit.com https://cdn.linux-audit.com https://*.cloudfront.net https://stats.g.doubleclick.net *.gravatar.com https://www.google-analytics.com ssl.google-analytics.com
style-src 'self' 'unsafe-inline' https://assets.linux-audit.com fonts.googleapis.com
font-src 'self' data: *.cloudfront.net https://assets.linux-audit.com fonts.gstatic.com s1.wp.com
\timg-src 'self' data: *.facebook.com img.youtube.com s2.dmcdn.net i.vimeocdn.com www.google-analytics.com *.twimg.com *.twitter.com
\tstyle-src 'self' 'unsafe-inline' platform.twitter.com *.twimg.com
\tscript-src 'self' 'unsafe-inline' 'unsafe-eval' widget.immodvisor.local widget.immodvisor.com www.google.com connect.facebook.net www.google-analytics.com platform.twitter.com cdn.syndication.twimg.com
\tframe-src 'self' widget.immodvisor.local widget.immodvisor.com www.google.com guestapp.me www.facebook.com web.facebook.com staticxx.facebook.com syndication.twitter.com platform.twitter.com www.youtube.com www.dailymotion.com player.vimeo.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://casino-docs.v1t.eu https://*.google-analytics.com http://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://secure.payu.com https://c.imedia.cz https://*.bitrix24.com https://bitrix.info https://cdn.rawgit.com https://www.youtube.com https://*.ytimg.com
img-src 'self' data: https://*.google-analytics.com http://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://secure.payu.com https://c.imedia.cz https://developers.google.com https://www.youtube.com https://*.ytimg.com
style-src 'self' 'unsafe-inline' https://secure.payu.com https://*.googleapis.com http://*.googleapis.com
font-src 'self' data: https://*.googleapis.com https://fonts.gstatic.com http://fonts.gstatic.com
frame-src 'self' https://c.imedia.cz/ https://www.youtube.com https://casino-docs.v1t.eu
"frame-ancestors 'self' https://*.facebook.com https://*.ups.com, frame-ancestors 'self' https://*.facebook.com https://*.ups.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com ssl.google-analytics.com twitterjs.googlecode.com connect.facebook.net platform.twitter.com apis.google.com adtrack.voicestar.com w.sharethis.com dev.visualwebsiteoptimizer.com dnn506yrbagrg.cloudfront.net fast.wistia.com
frame-src 'self' platform.twitter.com apis.google.com staticxx.facebook.com accounts.google.com www.facebook.com syndication.twitter.com fast.wistia.com
connect-src 'self' fg8vvsvnieiv3ej16jby.litix.io distillery.wistia.com embedwistia-a.akamaihd.net pipedream.wistia.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'      *.google.com *.google-analytics.com https://www.newyorkcommercialbank.com *.googleapis.com *.timevaluecalculators.com https://onlinebanking.newyorkcommercialbank.com/ *.onlinebanktours.com/
style-src 'self' 'unsafe-inline' *.timevaluecalculators.com *.googleapis.com/ *.onlinebanktours.com/
frame-src https://www.youtube.com https://changelly.com https://dexplorer.arknet.cloud https://www.gstatic.com https://www.google.com https://w2.countingdownto.com/ https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https://fonts.gstatic.com https://postimage.org https://www.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://postimage.org https://ajax.googleapis.com https://vimeo.com
"script-src 'self' 'unsafe-inline' *.first-world.info 'unsafe-eval'"
"frame-ancestors *.constantcontact.com www.redmangomarketing.com www.ezymarketing.com www.igvinc.com www.etouchmarketing.net"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.competitionsuite.com https://cdnjs.cloudflare.com https://sentry.io https://cdn.ravenjs.com https://js.stripe.com https://checkout.stripe.com rum-static.pingdom.net rum-collector.pingdom.net https://cdn.firebase.com https://www.gstatic.com https://*.firebaseio.com https://kendo.cdn.telerik.com https://ajax.googleapis.com www.google-analytics.com ssl.google-analytics.com ajax.cloudflare.com cdn.pubnub.com https://ajax.cloudflare.com https://d3js.org sdk.amazonaws.com
img-src 'self' data: blob: https://cdn.competitionsuite.com https://competitionsuite.com https://cdn.competitionsuite.io https://cdn.competitionsuite.com https://vault.compsuite.io https://rum-collector.pingdom.net https://competitionsuite.blob.core.windows.net https://s3.amazonaws.com http://rum-collector.pingdom.net www.google-analytics.com ssl.google-analytics.com http://kendo.cdn.telerik.com https://*.stripe.com
frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://player.vimeo.com *.firebaseio.com
connect-src 'self' https://cdn.competitionsuite.com files.competitionsuite.com https://socket.competitionsuite.com https://sentry.io wss://socket.competitionsuite.com wss://*.firebaseio.com https://s3.amazonaws.com rum-collector-2.pingdom.net *.stripe.com *.vimeo.com *.pndsn.com cs-video.s3.amazonaws.com cognito-identity.us-east-1.amazonaws.com www.google-analytics.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://towardsdatascience.com:443 https://*.towardsdatascience.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.instagram.com *.pinimg.com *.adnxs.com *.linkedin.com *.licdn.com *.ytimg.com *.twitter.com *.agkn.com *.bizographics.com *.youtube.com *.c3tag.com *.maxymiser.net *.limelight.com *.delvenetworks.com *.atgsvcs.com cdn.ampproject.org *.tiqcdn.com *.rightnowtech.com *.hfdstatic.com *.google-analytics.com *.googleadservices.com *.thehartford.com *.doubleclick.net *.google.com *.custhelp.com *.virtualearth.net *.estara.com *.linksynergy.com *.rnengage.com *.mediaalpha.com *.bazaarvoice.com *.bwserver.net *.rackcdn.com *.steelhousemedia.com *.facebook.com *.facebook.net *.quantserve.com adadvisor.net *.axf8.net *.bing.com *.yimg.com *.bankrateinsurance.com *.analytics.yahoo.com *.rubiconproject.com *.agkn.com *.akamaihd.net *.livelook.com fontawesome.io *.myfonts.com *.oraclecloud.com *.thehartford.com *.powerreviews.com *.iesnare.com *.mouseflow.com *.kampyle.com *.quantcount.com *.invocacdn.com *.srvsynd.com *.infusionsoft.com *.leadforensics.com *.googletagmanager.com"
"img-src 'self' https://www.2fr3.com https://s3.amazonaws.com https://s3-eu-west-1.amazonaws.com https://www.google-analytics.com"
"default-src blob: ef.gy 'self' 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com cdn.mathjax.org apis.google.com code.jquery.com *.google.com *.gstatic.com
frame-src 'self' dee.pe www.youtube.com *.google.com jsfiddle.net
img-src 'self' 'unsafe-inline' ssl.gstatic.com code.jquery.com data:
font-src 'self' 'unsafe-inline' cdn.mathjax.org data: about:
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com code.jquery.com"
script-src 'self' 'unsafe-inline' *.googleanalytics.com *.google-analytics.com *.googletagmanager.com *.google.com *.youtube.com *.ytimg.com static.doubleclick.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com
img-src 'self' 'unsafe-inline' data: ctia.wpengine.com ctia-wp.herokuapp.com ctia.staging.wpengine.com ctiastage.wpengine.com ctiadev.wpengine.com www.ctia.org *.facebook.com *.google-analytics.com t.co *.amazonaws.com *.ctia.org maps.googleapis.com img.youtube.com
font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com *.ctia.org
media-src 'self' ctia.wpengine.com ctia.staging.wpengine.com ctiastage.wpengine.com ctiadev.wpengine.com ctia-wp.herokuapp.com s3.amazonaws.com *.ctia.org *.youtube.com
script-src 'self' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.ctia.org *.youtube.com
style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com
frame-src *.vimeo.com *.youtube.com *.ctia.org flickrembed.com *.youtube.com youtu.be *.youtu.be *.boxwoodtech.com"
"frame-ancestors 'self' https://cdw.lookbookhq.com http://cdw.lookbookhq.com http://solutions.cdw.com https://solutions.cdw.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' seal-goldengate.bbb.org asknetag.112.2o7.net www.asknet.com www.asknet.de https:"
\t\tfont-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googleapis.com
\t\tstyle-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-inline' *.gstatic.com *.googleapis.com
\t\tframe-src 'self' *.youtube.com *.google.com *.google.co.kr  *.gstatic.com *.googleapis.com
\t\tconnect-src 'self' *.google-analytics.com *.google.com *.google.co.kr *.gstatic.com *.googleapis.com
\t\tscript-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.google.com *.google.co.kr *.gstatic.com *.googleapis.com
frame-src https://vars.hotjar.com https://www.googletagmanager.com https://e.issuu.com/embed.html https://player.vimeo.com/video/ https://www.youtube.com/embed/ https://s7.addthis.com/static/ https://www.facebook.com/tr/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapbox.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://m.addthisedge.com/live/ https://*.addthis.com/ https://e.issuu.com/embed.js https://dnn506yrbagrg.cloudfront.net/pages/scripts/0022/9283.js https://7217441.collect.igodigital.com/collect.js https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_us/fbevents.js https://connect.facebook.net/signals/config/1619154008352119 https://www.google-analytics.com/plugins/ua/ec.js https://jobadder.com/widgets/v1/jobs/renderjoblist https://apps.jobadder.com/widgets/v1/jobs/renderjoblist https://jobadder.com/widgets/v1/jobs/renderjobdetails
connect-src 'self' https://api.compassion.com.au https://concierge.compassion.com.au https://*.algolia.net https://stats.g.doubleclick.net/j/collect https://www.google-analytics.com/j/collect https://www.facebook.com/tr/ https://jobadder.com/widgets/v1/error/logerror https://apps.jobadder.com/widgets/v1/error/logerror https://m.addthis.com/live/red_lojson/100eng.json
img-src 'self' data: https://media.ci.org https://images.ctfassets.net https://images.contentful.com https://www.google-analytics.com/collect https://www.google-analytics.com/r/collect https://stats.g.doubleclick.net/r/collect https://nova.collect.igodigital.com/c2/7217441/track_page_view https://www.facebook.com/tr/  https://nova.collect.igodigital.com/c2/7217441/track_cart https://nova.collect.igodigital.com/c2/7217441/track_conversion https://auproddownloads.blob.core.windows.net/compassion/ https://jobadder.com/widgets/ https://apps.jobadder.com/widgets/ http://*.tile.openstreetmap.org/ https://server.arcgisonline.com/arcgis/ https://d33wubrfki0l68.cloudfront.net https://www.google.com/ads/ga-audiences https://www.google.com.au/ads/ga-audiences"
child-src *.lvmama.com *.baifendian.com http: https:
script-src *.staticfile.org *.bootcss.com *.uflys.com *.qiyukf.com *.criteo.com *.criteo.net *.bokecc.com *.qhimg.com *.bdimg.com *.lvmama.com *.lvjs.com.cn *.alicdn.com *.alimama.com *.baidu.com *.ipinyou.com *.mediav.com *.google-analytics.com *.baifendian.com *.p0y.cn *.w3t.cn *.de.coremetrics.com *.cn.coremetrics.com *.gtags.net *.zampda.net *.google.cn *.fraudmetrix.cn *.geetest.com *.gridsumdissector.com 'unsafe-inline' 'unsafe-eval' https: data: blob:
style-src * https: data: 'unsafe-inline'
img-src https://*  http://*  https://www.bettingpro.com.au data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com
frame-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://fityourself.club:443 https://*.fityourself.club:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' https://www.aeriehub.com https://www.aerielib.com https://aeriehub.blob.core.windows.net https://aeriehubqa.blob.core.windows.net https://aeriehubdev.blob.core.windows.net https://www2.aeriehub.com https://player.vimeo.com https://www.screencast.com https://docs.google.com https://geocoder.api.here.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://use.fortawesome.com https://ajax.cloudflare.com https://ajax.googleapis.com https://flesler-plugins.googlecode.com https://cdn.sucuri.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://ajax.aspnetcdn.com https://code.jquery.com https://www.google.com https://www.gstatic.com https://cdn.syncfusion.com https://cdn.datatables.net https://cdn.jsdelivr.net https://gitcdn.github.io https://stackpath.bootstrapcdn.com
style-src 'self' 'unsafe-inline' https://use.fortawesome.com https://cdn.sucuri.net https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.syncfusion.com http://cdn.datatables.net https://cdn.datatables.net https://cdn.jsdelivr.net https://gitcdn.github.io https://stackpath.bootstrapcdn.com https://fonts.googleapis.com
img-src 'self' data: https://aeriehub.blob.core.windows.net https://aeriehubqa.blob.core.windows.net https://aeriehubdev.blob.core.windows.net https://cdn.datatables.net https://cdnjs.cloudflare.com
frame-src 'self' https://www.aeriehub.com https://www.aerielib.com https://aeriehub.blob.core.windows.net https://aeriehubqa.blob.core.windows.net https://aeriehubdev.blob.core.windows.net https://www2.aeriehub.com https://player.vimeo.com https://www.screencast.com https://www.youtube.com https://docs.google.com https://www.google.com https://geocoder.api.here.com
font-src 'self' data: https://use.fortawesome.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.syncfusion.com
"child-src ateli.reamaze.com https://www.google.com/recaptcha/ googleads.g.doubleclick.net securepubads.g.doubleclick.net
connect-src wss://ws.reamaze.com ateli.reamaze.io csi.gstatic.com stats.g.doubleclick.net https://ateli.com https://*.ateli.com https://s3.dualstack.ap-northeast-1.amazonaws.com/ateli-jp-main https://cf.ateli.net https://sentry.io/api/37102/
img-src data: www.google-analytics.com stats.g.doubleclick.net pagead2.googlesyndication.com https://cf.ateli.net https://s.ateli.net/static/
media-src blob: cdn.reamaze.com https://api.ateli.com https://cf.ateli.net
script-src cdn.reamaze.com js.pusher.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ www.google-analytics.com pagead2.googlesyndication.com adservice.google.com adservice.google.co.kr adservice.google.co.jp https://s.ateli.net/static/
script-src 'self' 'unsafe-inline' tagmanager.google.com d10wj4q5nggahc.cloudfront.net com-iptiq.mini.snplow.net sp.lumico.com www.googletagmanager.com create.lidstatic.com www.google-analytics.com seal.websecurity.norton.com *.clicktale.net blob:
connect-src 'self' *.clicktale.net sp.lumico.com com-iptiq.mini.snplow.net www.google-analytics.com info.leadid.com create.leadid.com data:
img-src 'self' www.google-analytics.com ssl.gstatic.com www.gstatic.com sp.lumico.com data: blob:
style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com
frame-src https://ga.cuy.intergies.co:90/ ga.cuy.intergies.co:90/  *.intergies.co:90/ 'self'
"default-src 'self' https://www.googleapis.com https://www.google.com https://www.ausschreiben.de www.gravatar.com player.vimeo.com *.vimeocdn.com packages.umbraco.org our.umbraco.org https://www.youtube.com https://www.youtube-nocookie.com https://piwik.gossenmetrawatt.com/index.php
script-src 'self' https://piwik.gossenmetrawatt.com/piwik.js https://www.googleapis.com https://maps.googleapis.com https://maps.gstatic.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://piwik.gossenmetrawatt.com https://www.gossenmetrawatt.com https://i.ytimg.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com data: https://www.youtube.com https://www.googleapis.com www.gravatar.com umbraco.tv
"script-src 'unsafe-inline' 'unsafe-eval' 'self' data: https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://piwik.sipwise.com
img-src 'self' https://ps.w.org/ https://piwik.sipwise.com https://www.google-analytics.com https://secure.gravatar.com/avatar/ https://stats.g.doubleclick.net
font-src 'unsafe-inline' 'self' data: https://fonts.gstatic.com
object-src 'self' blob: filesystem: https://secure.gravatar.com
default-src 'self' blob: data: https://secure.gravatar.com"
script-src https: 'unsafe-inline' 'self' 'nonce-54dc0ded9ee286c15fe843c43a1a130e018ced53cf3119666ee99db280739f5f' 'strict-dynamic' 'report-sample'
script-src 'strict-dynamic' 'nonce-mze4nwvlnzitnwvizs00ngflltgyngytn2uxytdim2m3y2i2' 'unsafe-inline' https: http:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://becominghuman.ai:443 https://*.becominghuman.ai:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src http: data: 'self' 'unsafe-inline' 'unsafe-eval' *.scene7.com *.mobify.com *.bagsandbowsonline.com *.deluxe.com *.sparkred.com
script-src cbbvi.com https://graph.facebook.com https://connect.mail.ru https://vk.com https://connect.ok.ru https://share.yandex.ru https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://mc.yandex.ru https://mc.yandex.ua 'self' 'unsafe-inline' 'unsafe-eval'
img-src data: https://img.com-x.life https://www.google-analytics.com https://check.googlezip.net https://*.gstatic.com https://mc.yandex.ru https://mc.yandex.ua 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://adservice.google.com.ua https://newans-org.psh.one https://adservice.google.com https://pb.wtf https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://googleads.g.doubleclick.net https://usocial.pro https://d31j93rd8oukbv.cloudfront.net https://ajax.googleapis.com https://universalsrc.com https://goo.gl https://tizer.ssl-services.com http://ruttwind.com https://www.google-analytics.com https://nickhel.com https://ytimgg.com https://stats.g.doubleclick.net https://www.youtube.com https://s.ytimg.com https://www.free-kassa.ru https://retarget.ssl-services.com https://cubicmedia.net code.jquery.com www.darii.ru https://api-maps.yandex.ru https://www.gstatic.com pagead2.googlesyndication.com pb.wtf qoo.by ajax.googleapis.com apis.google.com www.google.com https://yandex.ru https://yastatic.net https://site.yandex.net share.yandex.ru clck.yandex.ru sitesuggest.yandex.ru yandex.ru site.yandex.net yastatic.net recreativ.ru yandex.st vk.com mc.yandex.ru
object-src 'self' *.cloudfront.net padsdela.cdnads.com *.youtube.com *.ytimg.com  www.youtube.com
style-src 'self' 'unsafe-inline' https://code.jquery.com https://usocial.pro https://fonts.googleapis.com https://ytimgg.com https://yastatic.net recreativ.ru
media-src 'self' https://air.radiorecord.ru:805/bighits_320 http://air.radiorecord.ru:805/symph_320 http://air.radiorecord.ru:805/bighits_320 http://air.radiorecord.ru:805/rr_320 *.yandex.net *.kinopoisk.ru
child-src 'self' http://pic1.pb.wtf/ googleads.g.doubleclick.net money.yandex.ru https://www.youtube.com www.google.com coub.com *.youtube.com yastatic.net vk.com
connect-src 'self' https://ymetrica1.com https://ff-input.mxpnl.net https://usocial.pro https://ytimgg.com https://cubicmedia.net https://level1cdn.com yandex.ru *.youtube.com  mc.yandex.ru *.gstatic.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://www.googletagmanager.com http://lightningauction.net https://code.jquery.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://public.tableau.com https://cdn.ckeditor.com https://use.fontawesome.com/ https://www.google-analytics.com/ https://ajax.googleapis.com/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/
style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdn.ckeditor.com https://*.googleapis.com/ https://cdn.jsdelivr.net/
img-src 'self' https://public.tableau.com https://cdn.ckeditor.com https://www.google-analytics.com/ https://*.googleapis.com/ https://*.gstatic.com/ data:
frame-src 'self' https://public.tableau.com https://player.vimeo.com https://www.youtube.com https://www.slideshare.net https://www.surveymonkey.com
img-src 'self' https: data: blob: https://mastodon.social
media-src 'self' https: data: https://mastodon.social
connect-src 'self' blob: https://mastodon.social wss://mastodon.social
"connect-src 'self' https: ws: *.addthis.com
"default-src 'self' s.ytimg.com consent.cookiebot.com consentcdn.cookiebot.com api.map.baidu.com api0.map.bdimg.com www.fondationhopitaux.fr api.ipdata.co ipinfo.io www.helloasso.com www.donnerenligne.fr syndication.twitter.com abs.twimg.com checkout.stripe.com www.piecesjaunes.fr cdn.syndication.twimg.com platform.twitter.com cdnjs.cloudflare.com maps.gstatic.com pbs.twimg.com www.linkedin.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com amaris.career-inspiration.com www.google.com.vn stats.g.doubleclick.net fonts.gstatic.com px.ads.linkedin.com www.google-analytics.com www.gstatic.com www.facebook.com fonts.googleapis.com ajax.googleapis.com google-analytics.com www.youtube.com www.googletagmanager.com connect.facebook.net www.google.com snap.licdn.com
script-src 'unsafe-eval' https://pony.town/assets/scripts/bootstrap-42a519ee8f.js https://pony.town/assets/scripts/bootstrap-es.js https://www.google-analytics.com
"default-src * 'unsafe-inline' 'unsafe-eval' data: blob: ws: wss:
"default-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.rawgit.com *.movimento5stelle.it *.wix.com *.facebook.net *.facebook.com *.parastorage.com *.googleapis.com *.google.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.jquery.com *.google-analytics.com s3-eu-west-1.amazonaws.com *.s3-eu-west-1.amazonaws.com *.youtube-nocookie.com data:
frame-src 'self' *.wix.com *.facebook.net *.facebook.com batchgeo.com *.youtube.com s3-eu-west-1.amazonaws.com *.s3-eu-west-1.amazonaws.com *.youtube-nocookie.com *.google.com
img-src 'self' *.ytimg.com *.movimento5stelle.it *.wixstatic.com *.paypalobjects.com *.google-analytics.com *.gstatic.com *.google.com s3-eu-west-1.amazonaws.com *.s3-eu-west-1.amazonaws.com *.youtube-nocookie.com *.parastorage.com *.movimento5stelle.it *.wix.com *.facebook.net *.facebook.com data:
"default-src 'self' maps.googleapis.com fonts.googleapis.com maps.google.com www.google.com ssl.google-analytics.com fonts.gstatic.com 'unsafe-eval' 'unsafe-inline'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.googleadservices.com https://connect.facebook.net https://tags.srv.stackadapt.com https://googleads.g.doubleclick.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://asostack.com:443 https://*.asostack.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: code.jquery.com www.google-analytics.com ws.sharethis.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net
style-src 'self' 'unsafe-inline'  casestudytool.arcbs.gooddogdesign.com ws.sharethis.com maxcdn.bootstrapcdn.com fonts.googleapis.com assets.zendesk.com
font-src 'self' data: fonts.gstatic.com  maxcdn.bootstrapcdn.com https://themes.googleusercontent.com
frame-src ws.sharethis.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com
style-src 'self' 'unsafe-inline'  *.olark.com *.powerreviews.com *.google.com *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.wistia.com *.wistia.net *.powerreviews.com *.olark.com *.voicestar.com *.google-analytics.com *.newrelic.com *.tctm.co *.nr-data.net *.googleadservices.com *.google.com
media-src 'self' blob: *.wistia.com *.wistia.net *.akamaihd.net *.olark.com
frame-src 'self' *.wistia.com *.wistia.net *.cybersource.com *.olark.com *.doubleclick.net *.google.com
frame-ancestors 'self' *.wistia.com *.wistia.net *.cybersource.com *.olark.com *.doubleclick.net *.google.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: sonicwall.com *.sonicwall.com
frame-src 'self' *.exist.ru tc.exist.ru yandex.ru yandex.kz yandex.ua yandex.by *.yandex.ru *.yandex.kz *.yandex.by *.yandex.ua www.facebook.com staticxx.facebook.com vk.com www.google.com api-maps.yandex.ru www.elcats.ru www.japancats.ru oauth.telegram.org
script-src 'self' 'unsafe-inline' https://checkout.stripe.com https://browser.sentry-cdn.com https://assets.gfycat.com https://platform.twitter.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.google-analytics.com
img-src 'self' https://*.stripe.com https://platform.slack-edge.com https://emojikit.com data: https://simplepoll.rocks https://*.twitter.com https://www.google-analytics.com
connect-src 'self' https://checkout.stripe.com https://sentry.io https://www.google-analytics.com
"default-src * 'unsafe-inline' data: 'unsafe-eval'
frame-ancestors 'self' onelovefor2.com www.onelovefor2.com dream-singles.com www.dream-singles.com"
"default-src 'self' https://*.rushcard.net https://*.oncard.ws https://*.rushcard.com https://*.omtrdc.net https://*.magnify360.com
frame-src 'self' https://*.adsrvr.org https://*.rushcardtracking.com https://*.youtube.com https://*.adobedtm.com
img-src 'self' data: https://*.googleadservices.com https://*.rushcard.net https://*.oncard.ws https://*.greendot.com https://*.rushcard.com https://*.magnify360.com https://*.amazonaws.com  https://*.facebook.com https://*.twitter.com https://*.t.co https://*.bing.com https://*.serving-sys.com https://*.cdninstagram.com https://*.google-analytics.com https://*.doubleclick.net https://*.adsrvr.org https://*.youtube.com  https://maps.gstatic.com https://maps.googleapis.com https://*.reson8.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.facebook.net https://*.adobedtm.com https://*.twitter.com https://*.googleadservices.com https://*.yimg.com https://*.yahoo.com https://*.adsrvr.org https://*.omtrdc.net https://*.twitter.com https://*.magnify360.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.youtube.com https://*.ytimg.com
"frame-ancestors 'self' *.aprendemas.com:* www.aprendemas.com crm.aprendemas.com api.aprendemas.com pre.aprendemas.com"
"connect-src 'self' icard.bg *.icards.eu mc.yandex.ru
default-src 'self' data: *.fontawesome.com *.gstatic.com *.googleapis.com *.icards.eu icard.bg *.google-analytics.com *.googletagmanager.com mc.yandex.ru *.facebook.net *.facebook.com *.doubleclick.net *.google.com *.google.bg
script-src 'self' 'unsafe-inline' 'unsafe-eval' icard.bg *.icards.eu code.jquery.com *.zdassets.com *.google-analytics.com *.googleapis.com *.bootstrapcdn.com *.googletagmanager.com mc.yandex.ru *.facebook.net *.facebook.com *.google.com
style-src 'self' 'unsafe-inline' icard.bg *.icards.eu *.gstatic.com *.fontawesome.com *.googleapis.com *.bootstrapcdn.com *.googletagmanager.com *.google.com
"frame-ancestors 'self' *.shipard.cz *.shipard.com *.shipard.pro *.uctarna.online
script-src  'self'                     https://secure.comodo.com                     http://www.trustlogo.com                     http://maps.googleapis.com                     https://maps.googleapis.com                     https://www.google-analytics.com                     https://www.google.com                     https://www.googletagmanager.com                     https://cdnjs.cloudflare.com                     http://www.gstatic.com                     https://www.gstatic.com                     https://www.youtube.com/iframe_api                     https://s.ytimg.com                     https://cdn.mathjax.org                     https://www.recaptcha.net                     https://cdn.rawgit.com                     'unsafe-inline'                     'unsafe-eval'
style-src   'self'                     https://www.google.com                     http://ajax.googleapis.com                     https://fonts.googleapis.com                     https://cdn.rawgit.com                     https://cdnjs.cloudflare.com                     'unsafe-inline'
img-src     'self'                     data:                     http://*.perfmed.ro                     https://ssl.comodo.com                     https://secure.comodo.com                     http://www.trustlogo.com                     http://maps.gstatic.com                     https://maps.gstatic.com                     http://csi.gstatic.com                     https://csi.gstatic.com                     http://*.googleapis.com                     http://*.ggpht.com                     http://maps.googleapis.com                     https://maps.googleapis.com                     https://www.google.com                     https://www.google.ro                     https://www.google-analytics.com                     https://stats.g.doubleclick.net                     https://seal.beyondsecurity.com
worker-src   'self'                     https://secure.comodo.com                     https://www.google.com                     https://www.youtube.com
frame-src   'self'                     https://secure.comodo.com                     https://www.google.com                     https://player.vimeo.com                     https://www.youtube.com
font-src    'self'                     data:                     https://fonts.gstatic.com                     http://fonts.googleapis.com                     https://fonts.googleapis.com
"default-src 'self' ta.fcaperformanceinstitute.com techauthorityonlinedemo.extra.chrysler.com techauthorityonline.extra.chrysler.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com ajax.aspnetcdn.com ssl.google-analytics.com
img-src 'self' data: www.google-analytics.com ajax.googleapis.com ajax.aspnetcdn.com ssl.google-analytics.com
base-uri 'self' ta.fcaperformanceinstitute.com techauthorityonlinedemo.extra.chrysler.com techauthorityonline.extra.chrysler.com
form-action 'self' ta.fcaperformanceinstitute.com techauthorityonlinedemo.extra.chrysler.com techauthorityonline.extra.chrysler.com"
script-src 'self' https: 'nonce-61f5649e' 'nonce-gtm-61f5649e' 'strict-dynamic' 'unsafe-inline'
connect-src 'self' https: wss://ebaymag.com/ wss://ebaymag.com:443/
script-src 'unsafe-inline' 'unsafe-eval' 'nonce-02254a1f3725e0d5b2a737ea92a3a657' https://*.flickr.com http://*.flickr.net https://*.flickr.net https://s.yimg.com https://*.analytics.yahoo.com https://yep.video.yahoo.com https://video.media.yql.yahoo.com https://*.yahooapis.com https://*.braintreegateway.com https://*.paypalobjects.com https://*.cedexis.com https://*.cedexis-radar.net https://*.cedexis-test.com https://connect.facebook.net https://*.facebook.com https://bs.serving-sys.com https://*.adserver.yahoo.com https://*.maps.api.here.com https://*.maps.cit.api.here.com https://*.ads.yahoo.com https://cdn.siftscience.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://ssl.ceneo.pl
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://cdn.ampproject.org https://*.fbcdn.net https://*.facebook.net https://*.facebook.com https://*.linkedin.com https://*.twitter.com https://*.google-analytics.com https://*.google.com https://*.yandex.ru
img-src 'self' data: http://*.vk.me https://*.vk.me https://*.twitter.com https://*.twimg.com https://*.cdninstagram.com https://trustthisproduct.com https://about24.info https://*.googlecode.com https://*.googleapis.com https://*.facebook.com https://*.gstatic.com https://*.licdn.com https://*.google-analytics.com https://*.googleusercontent.com https://*.yandex.ru https://*.fbcdn.net
frame-src 'self' https://trustthisproduct.com https://about24.info https://*.youtube.com https://*.facebook.com http://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.twitter.com https://*.google.com https://*.yandex.ru
style-src 'self' 'unsafe-inline' 'unsafe-eval' http://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net http://www.googletagmanager.com http://s7.addthis.com http://m.addthisedge.com  http://m.addthis.com http://hm.baidu.com https://assets.adobedtm.com https://ssl.google-analytics.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://g0v.news:443 https://*.g0v.news:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.tweepsmap.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com
img-src 'self' data: blob: *.tweepsmap.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.twimg.com https://*.gstatic.com https://maps.googleapis.com https://*.google.com https://*.cdninstagram.com https://*.fbcdn.net https://*.facebook.com  https://*.fbsbx.com https://*.licdn.com
media-src 'self' data: blob: *.tweepsmap.com https://*.twimg.com
font-src 'self' data: https://*.googleusercontent.com https://*.gstatic.com
frame-src 'self' https://www.youtube.com https://*.facebook.com https://*.google.com https://*.linkedin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.gstatic.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com
font-src  'self' 'unsafe-inline' 'unsafe-eval' https: http: *.fonts.gstatic.com"
script-src 'self' 'unsafe-eval' www.googletagmanager.com www.gstatic.com https://www.google.com/recaptcha/api.js ajax.googleapis.com www.google-analytics.com apis.google.com d2vqbs7xgyce6n.cloudfront.net js.recurly.com api.recurly.com platform.twitter.com syndication.twitter.com *.twimg.com static.ads-twitter.com analytics.twitter.com *.intercom.io js.intercomcdn.com cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net www.googleadservices.com googleads.g.doubleclick.net 'unsafe-inline' 'sha384-mns2hxtrw1r/kffnoydlx1ao4ore/m/wephxlnatzg3gkivtg9mfyj6t8vu0w2ub' 'sha384-fph0c1zjmcyb8crp6xdkl6ofr/34llx4vkgzcjdgndmggx2sn76z6cejwx+ryfgc'
"script-src 'self' http: https: 'unsafe-inline'
default-src * http: https: data: 'unsafe-inline' 'unsafe-eval'"
connect-src 'self' https://sentry.sc-prod.net https://accounts.snapchat.com https://snappublisher.sc-cdn.net https://storage.googleapis.com/ https://www.snapchat.com https://vis-dot-creativesuite-prod.appspot.com blob:
script-src 'self' 'sha256-og+comtuh715sbyqu6v3y0qnrurtuhn+voxtehdrb8m=' 'sha256-9+fgoaux5pfvhzvpmwuapq7liztcwmjathp56b6tqqe=' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://*.linkedin.com https://sjs.bizographics.com
img-src 'self' https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://code.jquery.com https://js.stripe.com https://maps.googleapis.com https://ajax.cloudflare.com
style-src 'self' 'unsafe-inline' https://hello.myfonts.net https://fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'nonce-fk6dcgqtz9mnj69daqe5' 'unsafe-eval' https://localhost:8732 https://localhost:9732 http://localhost:8732 http://localhost:9732 http://www.uhaul.com http://pwctag.uhaul.com http://pwc.uhaul.com https://showroom.uhaul.net https://www.bing.com https://dev.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net
style-src 'self' 'unsafe-inline' http://posdev.uhi.amerco https://posdev.uhi.amerco http://fonts.googleapis.com https://www.bing.com
img-src 'self' data: http://pwc.uhaul.com https://www.bing.com https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net
font-src data: http://fonts.gstatic.com http://fonts.googleapis.com https://webselfstorage.com https://www.webselfstorage.com https://rewrite.webselfstorage.com https://rewrites.webselfstorage.com https://rewriteqa.webselfstorage.com https://rewritebeta.webselfstorage.com http://tempstage http://wss.local
"script-src 'self' *.rankedgaming.com *.google.com *.gstatic.com *.jquery.com 'unsafe-inline' 'unsafe-eval'
"img-src 'self' *.trade.tt d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com data: https://account.trade.tt https://ttw-assets.trade.tt/
style-src 'self' blob: 'unsafe-inline' *.trade.tt https://account.trade.tt https://ttw-assets.trade.tt/ d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.trade.tt https://account.trade.tt https://ttw-assets.trade.tt/ d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com api.usersnap.com
script-src 'self' www.google-analytics.com js.recurly.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js https://cdn.jsdelivr.net/npm/d3@3.5.17/d3.min.js https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com 'unsafe-inline' 'sha256-lwqs1p92ys+ym1qyqatk6gefegjdlpxguefu6t72sgw=' 'sha256-1gcjkqmf3vdbhqtk/gcajkmg/ujnnomsjobgfusd8gu=' 'sha256-dcokebrosmwcisx1qqc5mqvzvtuyp7rxg1gdcn4i4ls='
"frame-ancestors 'self' *.brilliant.org *.online.tableau.com apps.facebook.com"
"default-src 'self' 'unsafe-eval' https://*.tgdd.vn https://*.bachhoaxanh.com
connect-src 'self' wss://rtccallcenter.tgdd.vn wss://rtm.thegioididong.com https:
script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.youtube.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://soulsight-thoughts.com:443 https://*.soulsight-thoughts.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com/ https://www.google.com/ https://ajax.googleapis.com/ajax/ https://www.gstatic.com/charts/ https://www.google-analytics.com/ https://platform.twitter.com https://cdn.syndication.twimg.com https://api.userlike.com/ https://s3-eu-west-1.amazonaws.com https://*.s3-eu-west-1.amazonaws.com https://*.cloudfront.net/ https://cdnjs.cloudflare.com/ https://assets.zendesk.com/ https://static.zdassets.com/ https://*.zopim.com/ https://js.hs-analytics.net/ https://js.hsleadflows.net/leadflows.js https://js.hs-scripts.com/ https://forms.hubspot.com/ https://js.usemessages.com/messageswidgetshell.js https://api.usemessages.com/messages/v2/embed/3307911.js https://js.hscollectedforms.net/collectedforms.js https://cdn.fraudlabspro.com/s.js https://code.jquery.com/jquery-latest.min.js
img-src 'self' data: https://ssl.google-analytics.com https://www.google-analytics.com/ https://ajax.googleapis.com https://arkahost.com/ https://*.cloudfront.net/ https://secure.gravatar.com https://www.gravatar.com/avatar/ https://stats.g.doubleclick.net/ https://s.w.org/images/core/emoji/ https://syndication.twitter.com https://*.twimg.com https://platform.twitter.com/css/ https://cdn.whmcs.com https://*.zopim.com/ https://v2assets.zopim.io/ https://pixabay.com/get/ https://www.paypal.com/ https://track.hubspot.com/ https://ssl-vg03.met.vgwort.de/ https://vg06.met.vgwort.de/ https://old-surf-58.app.baqend.com/v1
style-src 'unsafe-inline' https://ajax.googleapis.com https://www.google.com/uds/ https://fonts.googleapis.com https://www.gstatic.com/charts/ https://cdn.linearicons.com/free/ https://platform.twitter.com/css/ https://cdnjs.cloudflare.com 'self'
font-src 'self' data: https://fonts.gstatic.com https://cdn.linearicons.com/free/ https://*.cloudfront.net/ https://cdnjs.cloudflare.com https://*.zopim.com/
child-src 'self' https://www.google.com/maps/ https://www.google.com/recaptcha/ https://assets.zendesk.com/ https://forms.hubspot.com/ https://bbq.app.baqend.com/
connect-src 'self' https://spacehost.zendesk.com/ https://ekr.zdassets.com/ https://*.zopim.com/ wss://*.zopim.com/ https://forms.hubspot.com/ https://js.usemessages.com/messageswidgetshell.js https://api.hubspot.com/messages/v2/ https://old-surf-58.app.baqend.com/v1/ https://www.fraudlabspro.com/
"default-src 'self' http://samanthasummersinstitute.com http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://*.google.com https://www.paypal.com https://www.amazon.com https://amzn.com https://cdn.bootcss.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.googleapis.com https://ajax.aspnetcdn.com https://hitsteps.com http://hitsteps.com http://*.hitsteps.com https://*.hitsteps.com https://*.quantserve.com https://*.quantcast.com https://www.alexa.com https://code.jquery.com https://*.gstatic.com https://www.fetishhelp.com https://*.niteflirt.com https://*.youtube-nocookie.com https://*.youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://sucuri.net https://*.ampproject.org http://*.ampproject.org http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://*.godaddy.com https://www.tumblr.com https://*.youtube-nocookie.com https://*.google.com https://www.google-analytics.com http://www.google-analytics.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.googleapis.com https://ajax.aspnetcdn.com https://hitsteps.com http://hitsteps.com http://*.hitsteps.com https://*.hitsteps.com https://*.quantserve.com http://*.quantserve.com https://*.quantcast.com http://*.quantcast.com https://rules.quantcount.com https://www.alexa.com http://www.alexa.com https://d5nxst8fruw4z.cloudfront.net https://d31qbv1cthcecs.cloudfront.net https://stats.g.doubleclick.net https://code.jquery.com https://www.nodefire.com https://*.jotform.us https://*.jotform.com https://cdn.jotfor.ms https://www.classmarker.com https://*.ytimg.com https://secure.assets.tumblr.com https://*.twitter.com https://*.twimg.com https://www.youtube.com https://www.simplify.com https://affiliate-program.amazon.com https://www.paypal.com https://www.javascriptkit.com https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://cdn.bootcss.com https://images-na.ssl-images-amazon.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com
object-src 'self' http://samanthasummersinstitute.com http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://twitter.com https://*.niteflirt.com https://www.fetishhelp.com https://*.youtube-nocookie.com https://cdn.jotfor.ms https://js.jotform.com https://www.tumblr.com https://*.google.com https://www.google-analytics.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.hitsteps.com https://*.quantcast.com https://*.quantserve.com https://www.alexa.com https://d5nxst8fruw4z.cloudfront.net https://d31qbv1cthcecs.cloudfront.net https://stats.g.doubleclick.net https://code.jquery.com https://www.nodefire.com https://submit.jotform.us https://www.classmarker.com https://www.simplify.com https://affiliate-program.amazon.com https://www.paypal.com https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://cdn.bootcss.com https://netdna.bootstrapcdn.com https://*.googleapis.com https://*.niteflirt.com
style-src 'self' 'unsafe-inline' https://sucuri.net http://samanthasummersinstitute.org https://samanthasummersinstitute.org https://*.youtube-nocookie.com https://cdn.jotfor.ms https://js.jotform.com https://*.w3schools.com https://*.google.com https://www.google-analytics.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.hitsteps.com https://hitsteps.com https://*.quantserve.com https://*.quantcast.com https://www.alexa.com https://d5nxst8fruw4z.cloudfront.net https://d31qbv1cthcecs.cloudfront.net https://stats.g.doubleclick.net https://code.jquery.com https://www.nodefire.com https://submit.jotform.us https://www.classmarker.com https://www.simplify.com https://affiliate-program.amazon.com https://www.paypal.com https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://cdn.bootcss.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com http://*.googleapis.com https://*.googleapis.com
font-src 'self' data: http://samanthasummersinstitute.com http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://cdn.jotfor.ms https://js.jotform.com https://www.tumblr.com https://*.google.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.googleapis.com https://www.fetishhelp.com https://hitsteps.com https://*.hitsteps.com https://d5nxst8fruw4z.cloudfront.net https://seal.beyondsecurity.com https://d31qbv1cthcecs.cloudfront.net https://stats.g.doubleclick.net https://code.jquery.com https://www.nodefire.com https://www.classmarker.com https://www.simplify.com https://affiliate-program.amazon.com https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://cdn.bootcss.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://*.gstatic.com https://*.googleapis.com
img-src 'self' data: https://*.sucuri.net https://*.jotform.us https://*.jotform.com https://*.twitter.com http://samanthasummersinstitute.com http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://s2member.com http://ecx.images-amazon.com https://ecx.images-amazon.com https://*.youtube-nocookie.com https://www.paypal.com https://*.godaddy.com https://www.amazon.com https://amzn.com https://cdn.bootcss.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://ajax.aspnetcdn.com https://hitsteps.com http://hitsteps.com http://*.hitsteps.com https://*.hitsteps.com https://*.quantserve.com https://*.quantcast.com https://www.alexa.com https://www.s2member.com https://code.jquery.com https://www.google-analytics.com https://*.google.com https://*.gstatic.com https://www.fetishhelp.com https://*.niteflirt.com https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://images-na.ssl-images-amazon.com https://d5nxst8fruw4z.cloudfront.net https://cdn.bootcss.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com http://*.googleapis.com https://*.googleapis.com
child-src 'self' https://embed.tumblr.com https://*.twitter.com https://www.netip.de https://www.amazon.com https://amzn.com https://*.amazon-adsystem.com https://*.jotform.us https://*.jotform.com https://images-na.ssl-images-amazon.com https://seal.qualys.com http://samanthasummersinstitute.com http://samanthasummersinstitute.org https://samanthasummersinstitute.com http://*.samanthasummersinstitute.com https://*.samanthasummersinstitute.com https://samanthasummersinstitute.org https://*.youtube-nocookie.com https://*.google.com https://www.paypal.com https://cdn.bootcss.com https://nsgxxxserverservices-wmh68ontkdf33j6tl7x.netdna-ssl.com https://*.googleapis.com https://ajax.aspnetcdn.com https://hitsteps.com http://hitsteps.com http://*.hitsteps.com https://*.hitsteps.com https://*.quantserve.com https://*.quantcast.com https://www.alexa.com https://code.jquery.com https://*.gstatic.com https://www.fetishhelp.com https://*.niteflirt.com https://youtu.be https://*.youtube-nocookie.com https://*.youtube.com https://www.youtube.com
media-src 'self' blob: mediastream: https://youtu.be https://youtube.be https://*.youtube-nocookie.com https://*.youtube.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://www.googleadservices.com https://js-agent.newrelic.com https://bam.nr-data.net https://websites.agilecrm.com https://stats2.agilecrm.com https://pagead2.googlesyndication.com https://salesiq.zoho.com https://d2xwmjc4uy2hr5.cloudfront.net https://www.google.com https://adservice.google.co.in https://adservice.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://js.zohostatic.com https://s3.amazonaws.com https://platform-api.sharethis.com https://count-server.sharethis.com https://cdnjs.cloudflare.com https://buttons-config.sharethis.com https://graph.facebook.com https://client.crisp.chat blob: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://settings.crisp.chat https://code.jquery.com https://use.fontawesome.com https://static.hotjar.com https://script.hotjar.com https://partners.websites.co.in https://embed.tawk.to https://cdn.jsdelivr.net
connect-src 'self' https://api.amplitude.com https://www.facebook.com https://googleads.g.doubleclick.net wss://vts.zohopublic.com https://l.sharethis.com wss://client.relay.crisp.chat https://c.sharethis.mgr.consensu.org https://in.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com https://partners.websites.co.in https://static-v.tawk.to https://cdn.jsdelivr.net https://va.tawk.to https://*.tawk.to wss://*.tawk.to
img-src * data: https://www.facebook.com https://csi.gstatic.com https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://stats.g.doubleclick.net https://img.zohostatic.com https://img.youtube.com https://www.youtube.com https://image.crisp.chat https://www.google.co.in https://www.google.com https://www.google.com/ads/ga-audiences https://websites.co.in https://cdnjs.cloudflare.com https://scontent.xx.fbcdn.net https://m.youtube.com https://partners.websites.co.in
style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com https://css.zohostatic.com https://cdnjs.cloudflare.com https://client.crisp.chat https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://use.fontawesome.com https://partners.websites.co.in https://cdn.jsdelivr.net
font-src 'self' data: https://fonts.gstatic.com http://fonts.googleapis.com https://client.crisp.chat https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://partners.websites.co.in https://static-v.tawk.to
frame-src 'self' https://www.facebook.com https://s-static.ak.facebook.com https://cdn.api.twitter.com https://www.linkedin.com https://linkedin.com https://maps.googleapis.com https://csi.gstatic.com https://googleads.g.doubleclick.net https://www.google.com https://maps.gstatic.com https://www.google.co.in https://bid.g.doubleclick.net https://www.google.ae https://salesiq.zohopublic.com https://www.youtube.com https://c.sharethis.mgr.consensu.org https://vars.hotjar.com https://partners.websites.co.in https://*.tawk.to/
"script-src 'self' 'unsafe-inline' https://assets.zendesk.com https://static.zdassets.com
"default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'
"default-src 'self' *.google-analytics.com *.google.com  use.fontawesome.com 'unsafe-inline'
script-src 'self' use.fontawesome.com *.google-analytics.com *.google.com https://www.gstatic.com/recaptcha/api2/ 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.adocean.pl *.pl.ing-ad *.ingbank.pl *.ing.pl
font-src 'self' *.ingbank.pl *.ing.pl themes.googleusercontent.com *.googleapis.com *.pl.ing-ad *.gstatic.com tagmanager.google.com data:
style-src 'self' 'unsafe-inline' code.jquery.com *.ingbank.pl *.ing.pl *.googleapis.com www.google.com *.pl.ing-ad *.gstatic.com tagmanager.google.com s.ytimg.com https://www.ytimg.com
img-src 'self' data: clients1.google.com img01-olxpl.akamaized.net www.google.pl apollo-ireland.akamaized.net https://www.i1.ytimg.com https://img.youtube.com *.adocean.pl ingbankslaski.d2.sc.omtrdc.net traffic.tgdaudience.com *.google-analytics.com *.pl.ing-ad *.gstatic.com tagmanager.google.com *.domy.pl *.hit.gemius.pl *.ggpht.com ingbankslaski.d3.sc.omtrdc.net *.ingbank.pl *.ing.pl content.ingbank.pl *.doubleclick.net *.googleapis.com www.google.com *.demdex.net
frame-src 'self' *.ingbank.pl *.ing.pl *.doubleclick.net *.demdex.net www.google.com traffic.tgdaudience.com www.youtube.com *.pl.ing-ad https://www.youtube.com *.hit.gemius.pl
script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googleadservices.com *.adocean.pl https://www.oauth.googleusercontent.com tagmanager.google.com *.hit.gemius.pl code.jquery.com www.googletagmanager.com *.ingbank.pl *.doubleclick.net www.google.com www.youtube.com https://www.fbstatic-a.akamaihd.net https://www.youtube.com s.ytimg.com assets.adobedtm.com *.google-analytics.com *.pl.ing-ad *.gstatic.com ingbankslaski.d3.sc.omtrdc.net *.ing.pl *.googleapis.com *.demdex.net cdn.tgdaudience.com https://www.apis.google.com data:
object-src 'self' *.pl.ing-ad *.ingbank.pl *.ing.pl
connect-src 'self' ingbankslaski.d3.sc.omtrdc.net https://*.twilio.com *.ingbank.pl *.ing.pl wss://*.twilio.com *.adocean.pl *.demdex.net ingbankslaski.d2.sc.omtrdc.net traffic.tgdaudience.com *.pl.ing-ad *.hit.gemius.pl
frame-ancestors 'self' *.demdex.net *.pl.ing-ad *.ingbank.pl *.ing.pl
script-src 'unsafe-inline' 'nonce-wydqbobtpkr5figmj+o2' 'strict-dynamic' www.googletagmanager.com connect.facebook.net assets.pinterest.com platform.twitter.com static.ads-twitter.com www.google.com
style-src 'self' 'unsafe-inline' www.gstatic.com platform.twitter.com *.twimg.com d3og7jzzujajeu.cloudfront.net
img-src 'self' *.hotjar.com mare.io *.mare.io test.artimage.org.uk cdn.artimage.org.uk d1e2kq1i6pwuuf.cloudfront.net d3og7jzzujajeu.cloudfront.net *.pinterest.com stats.g.doubleclick.net *.twimg.com www.google-analytics.com *.facebook.com syndication.twitter.com platform.twitter.com t.co secure.worldpay.com data:
frame-src 'self' *.issuu.com *.hotjar.com *.youtube.com *.soundcloud.com *.pinterest.com player.vimeo.com www.google.com *.facebook.com *.facebook.net platform.twitter.com syndication.twitter.com *.livechatinc.com
font-src 'self' *.hotjar.com *.mare.io *.livechatinc.com *.googleusercontent.com
connect-src 'self' *.facebook.com *.twitter.com *.mare.io *.visii.com *.google-analytics.com *.hotjar.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' payslipview.com
script-src      'unsafe-eval' blob blob: 'unsafe-inline' 'self' https://linker2.cesnet.cz https://ds.eduid.cz https://code.jquery.com
style-src       'unsafe-inline' 'self' https://linker2.cesnet.cz https://fonts.googleapis.com
"frame-ancestors 'self' *.ergodirekt.de:* *.qv.de:* *.ergo.com:* *.ergo:* *.ergo.de
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.bpost.be bpost.be eshipper.bpost.cn bpost2.be medattest.be www.medattest.be editor-www.bpost.be www.googletagmanager.com tagmanager.google.com ssl.google-analytics.com b2btagmgr.azalead.com trker1.azalead.com www.google-analytics.com proslead.com www.depostlaposte.be www.bpost2.be www.google.com www.post.be post.be ajax.googleapis.com connect.facebook.net code.jquery.com platform.linkedin.com www.linkedin.com dashboard.whoisvisiting.com/who.js frontend.id-visitors.com js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net http://w.usabilla.com w.usabilla.com api.usabilla.com cdnjs.cloudflare.com maps.googleapis.com www.youtube.com https://ajax.googleapis.com api.jollywallet.com https://maps.googleapis.com www.googleadservices.com assets.idloom.com crm.bpack.idloom.com proslead.com https://www.google-analytics.com preprints.taxipost.net maf.taxipost.net s.ytimg.com img.en25.com player.qualifio.com d6tizftlrpuof.cloudfront.net https://maxcdn.bootstrapcdn.com static.hotjar.com script.hotjar.com vars.hotjar.com optimize.google.com login-2.bpost.be service.maxymiser.net static.hotjar.com script.hotjar.com bpost2.unfyd.com www.gstatic.com openlayers.org unpkg.com eloqua.com  www.bpost2.be
object-src 'self' www.bpost.be editor-www.bpost.be eshipper.bpost.cn www.youtube-nocookie.com www.medattest.be optimize.google.com login-2.bpost.be bpost2.be
style-src 'self' 'unsafe-inline' www.bpost.be eshipper.bpost.cn bpost2.be www.bpost2.be bpost3.be www.medattest.be editor-www.bpost.be www.google.com fonts.googleapis.com cdn.jsdelivr.net d6tizftlrpuof.cloudfront.net https://cdnjs.cloudflare.com www.post.be post.be proslead.com wersg01 preprints.taxipost.net maf.taxipost.net tagmanager.google.com optimize.google.com login-2.bpost.be maxcdn.bootstrapcdn.com my.bpost.be bpost2.unfyd.com openlayers.org use.fontawesome.com unpkg.com
img-src 'self' data: www.bpost.be bpost.be eshipper.bpost.cn www.bpost2.be bpost2.be www.google.be www.google-analytics.com www.google.com googleads.g.doubleclick.net b2btagmgr.azalead.com trker1.azalead.com stats.g.doubleclick.net www.post.be editor-www.bpost.be www.facebook.com www.google.co.in eshop.bpost.be static.licdn.com www.linkedin.com www.bpostinternational.com landmarkglobal.com www.landmarkglobal.com dashboard.whoisvisiting.com/who.ashx www.depostlaposte.be junglenet-a.akamaihd.net secure.adnxs.com d6tizftlrpuof.cloudfront.net w.usabilla.com 10.76.4.13:15871 https://cdnjs.cloudflare.com 10.109.34.52:15871 s1833705806.t.eloqua.com 10.76.4.11:15871 https://csi.gstatic.com https://maps.gstatic.com maps.googleapis.com https://ssl.google-analytics.com https://maps.googleapis.com www.googleadservices.com https://stats.g.doubleclick.net proslead.com https://www.google.de https://www.google.lu https://www.google.nl preprints.taxipost.net maf.taxipost.net chart.apis.google.com hello.bpost.be optimize.google.com login-2.bpost.be my.bpost.be bpost2.unfyd.com a.tile.openstreetmap.org server.arcgisonline.com tile.osm.be
frame-src 'self' www.bpost.be bpost.be www.medattest.be medattest.be eshipper.bpost.cn editor-www.bpost.be www.bpost2.be http://www.bpost2.be bpost2.be campaigns.bpost2.be www.campaigns.bpost2.be pass.post.be esim.post.be tools.emailgarage.com assets.idloom.com www.facebook.com ir2.flife.de qfx.quartalflife.com 4558452.fls.doubleclick.net www.youtube.com youtube.com fr.slideshare.net www.youtube-nocookie.com 85.17.197.32 roi.bpost3.be bpost3.be www.facebook.com www.twitter.com platform.linkedin.com addressbook.bpost.be www.google.com google.com cse.google.com/cse speos.connective.be speos.connective.eu junglenet-a.akamaihd.net post-online.be www.post-online.be cssprepaid.proximus.be www.depostlaposte.be depostlaposte.be www.postmobile.be postmobile.be reload.proximus.be s.chkmkt.com maxiresponse.bpost3.be bpi.bpost3.be post-api.be googletagmanager.com youtube.com www.youtube.com d6tizftlrpuof.cloudfront.net www.youtube.com speos.connective.eu www.speos.connective.eu assets.idloom.com crm.bpack.idloom.com zeromov.com player.qualifio.com preprints.taxipost.net maf.taxipost.net http://maf.taxipost.net crm.bpost.idloom.com news.bpost.be s1833705806.t.eloqua.com vars.hotjar.com optimize.google.com login-2.bpost.be bpost2.be service.maxymiser.net
font-src 'self' www.bpost.be bpost.be eshipper.bpost.cn editor-www.bpost.be cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.gstatic.com fonts.gstatic.com *.usabilla.com d6tizftlrpuof.cloudfront.net images.campaign.bpost.be optimize.google.com login-2.bpost.be my.bpost.be maxcdn.bootstrapcdn.com bpost2.unfyd.com use.fontawesome.com www.bpost2.be  cdn.jsdelivr.net fonts.gstatic.com
connect-src 'self' www.bpost.be bpost.be eshipper.bpost.cn www.medattest.be medattest.be bpost2.be www.bpost2.be editor-www.bpost.be proslead.com bam.nr-data.net api.usabilla.com https://api.bpost.be crm.bpack.idloom.com www-1.stbpost.be assets.idloom.com crm.bpack.idloom.com nikkomsgchannel tagmanager.google.com webservices-pub.bpost.be webservices-pub.stbpost.be webservices-pub.acbpost.be  s1833705806.t.eloqua.com static.hotjar.com insights.hotjar.com optimize.google.com login-2.bpost.be chatbot.bpost.be bpost2.be in.hotjar.com service.maxymiser.net bpost2.unfyd.com s1833705806.t.eloqua.com/e/f2
"default-src 'self' fonts.gstatic.com fonts.googleapis.com ajax.googleapis.com api.amplitude.com wireframecc-9947.kxcdn.com
script-src 'self' 'unsafe-inline' 'nonce-912c8f59dddc191f85dec38588228d10'  https://d24n15hnbwhuhn.cloudfront.net https://fonts.gstatic.com https://fonts.googleapis.com https://ajax.googleapis.com https://api.amplitude.com wireframecc-9947.kxcdn.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com wireframecc-9947.kxcdn.com
script-src 'self' 'sha256-gjglsqv2xfku3zbrputl+ctqkgeilq7afgsis7xmrme=' 'sha256-vngitsd+mglzsi/w8ddgvjshomqtuapwozmow42v8lw=' 'sha256-mnplhlz/cjfnbkrqoujdn7xcikxxbrzjni4r9e2d3gq=' 'sha256-9ga69sfjjxiombyheu22kujbcrxmlqnznvrf5bbk1vq=' 'sha256-p6phzkyba1rjapgy1syuhivrcfmbs1iatnmhgigrvzi=' 'sha256-jfe77jyvuqwqrif2j5emm+numyn2gwfkfli4jpfqqu8=' https://px.ads.linkedin.com https://analytics.twitter.com/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://cti.w55c.net/ct/dx_upx_0dizjqmrip.js https://www.google.com/jsapi https://www.gstatic.com/charts/ 'sha256-tb9fnfgwojrjed7kul29rt/knzvyarzge//ecyirnu4=' 'sha256-ipeqi+hso5rxj4wzizyy7syulnf9uk0/r/px8he5pe4=' 'sha256-3mx6st2fgcx+qvqontvhvawtobicv2yj8wz0dwm/s1u=' 'sha256-jp40vppeo1rkyurpzazcpksctk+jzfnxdteetzluupo=' 'sha256-b0ysqjwjwmr9j0kef84bxkxlef09h0j++mqmi9wwkas=' 'sha256-vbxjtizo5ykqyfy3vfsybbvr5ogr+9+pha/ccm3xfvw=' 'sha256-umhfl2zgfsraxshpnxpvp0i9nklsjl/vdy4y9rxd3ty=' 'sha256-htu7wdcmnsnminp6enzfo8tm6zb6be+bi06ni9xg2uw=' 'sha256-1inx0fsstg5w1j7r4aoqeldkyxvkc5yzooawrrgbykk=' 'sha256-eppuksollf7ah9scdu/q1yqcim1owzfdfpzwcjzi0t0=' 'sha256-kozvlni6wilva5smpsgkzkuz3pwscuhpugmi7sapqak=' 'sha256-v5da67rg0bq92kwbox361wwcizus7h6aosnm4qpevnc=' 'sha256-9g9ya0nujhv8gtx6x20qt4gcrfgxspnklcptqiklvsa=' 'sha256-szwxttadm2hnaxcfs1tpf8yq0yfyrimyzkoeyi6sumy=' 'sha256-5u7lpvhjohsvoqe6xhcl7+iyzp/b7c3j9mm+kt8sfw8=' 'sha256-r7kyhynnxx/ftjqooc7olklgo55joq+lwsffcdrehuc=' 'sha256-o0fez/wj0j1aqo/kacytnpgx1wtobs0tugrvwlh7q78=' 'sha256-sdb79kkhtpx1vw7ypelr4vlwyfgiivv4abth51zfd6k=' 'nonce-yjhkowfioge1njixyzqxntq5ngqyzge4yzuwnjrhota=' https://www.googletagmanager.com/gtm.js https://www.google-analytics.com https://www.gstatic.com https://maps.googleapis.com https://cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' https://www.gstatic.com/charts/ https://fonts.googleapis.com
img-src 'self' https://t.co https://www.facebook.com https://tags.w55c.net data: https://i.ytimg.com https://secure.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com
font-src 'self' https://fonts.googleapis.com data: https://fonts.gstatic.com
"connect-src 'self' www.google-analytics.com *.googleapis.com *.googlesyndication.com *.google.com mc.yandex.ru *.gstatic.com"
"default-src 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com
script-src 'self' *.seizethedeal.com *.townsquarecommerce.com  *.seizethedeal.com:8983 *.seizethedeal.com:8982 *.townsquarecommerce.com:8983 *.townsquarecommerce.com:8982 netdna.bootstrapcdn.com https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.com http://www.google-analytics.com https://apis.google.com https://unpkg.com https://faye.getstream.io http://nsg.symantec.com https://nsg.symantec.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://graph.facebook.com connect.facebook.net http://thomasjbradley.ca http://github.com https://maps.google.com https://cdn.rawgit.com https://maps.googleapis.com https://www.gstatic.com https://ssl.gstatic.com http://ak.sail-horizon.com https://ak.sail-horizon.com https://platform.twitter.com https://assets.pinterest.com *.adroll.com http://*.sharethis.com https://*.sharethis.com https://bat.bing.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com http://code.jquery.com https://fonts.googleapis.com http://fonts.googleapis.com https://ajax.googleapis.com https://www.google.com https://unpkg.com http://*.sharethis.com https://*.sharethis.com 'unsafe-inline'
connect-src 'self' https://graph.facebook.com https://faye.getstream.io wss://faye.getstream.io c.sharethis.mgr.consensu.org l.sharethis.com https://t.sharethis.com *.seizethedeal.com *.seizethedeal.com:8983 *.seizethedeal.com:8982 *.townsquarecommerce.com *.townsquarecommerce.com:8983 *.townsquarecommerce.com:8982 https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://ajax.googleapis.com https://cdnjs.cloudflare.com
font-src 'self' https://netdna.bootstrapcdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com data:
frame-src 'self' https://www.facebook.com staticxx.facebook.com https://web.facebook.com https://www.google.com https://accounts.google.com https://content.googleapis.com https://plusone.google.com https://platform.twitter.com https://status.rackspace.com https://rackspace.service-now.com https://www.youtube.com https://t.sharethis.com https://ws.sharethis.com edge.sharethis.com https://*.sharethis.com gsa://onpageload data:
child-src 'self' https://www.facebook.com staticxx.facebook.com https://www.google.com https://accounts.google.com https://content.googleapis.com https://plusone.google.com https://platform.twitter.com https://status.rackspace.com https://rackspace.service-now.com edge.sharethis.com gsa://onpageload data:
"default-src 'self' calendar.google.com www.openstreetmap.org data:
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' code.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com
"frame-ancestors 'self' https://preprod-tonic.afflelou.com http://mysun.afflelou.com https://mysun.afflelou.com https://tonic.afflelou.com"
script-src 'self' 'unsafe-inline' https://cdn.glosor.eu 'nonce-59608300775251557991' 'strict-dynamic'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://fueradeseries.com:443 https://*.fueradeseries.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors https://*.autobooks.co https://autobooks.co https://*.netteller.com https://netteller.com https://gorhamsavings.bank https://*.gorhamsavings.bank https://4frontcu.com https://*.4frontcu.com https://*.itsmybiz247.com https://itsmybiz247.com https://*.lafcu.com https://lafcu.com https://*.teamonecu.org https://teamonecu.org https://*.communitychoicecu.com https://secure.southside.com https://*.southside.com"
script-src 'unsafe-inline' https://*.google.com https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js https://slutsnooper.com/java/q.js https://slutsnooper.com/java/w.js https://slutsnooper.com/java/g.js https://*.google-analytics.com
style-src 'unsafe-inline' https://slutsnooper.com/css/style1.css https://slutsnooper.com/css/style2.css https://slutsnooper.com/css/style3.css https://slutsnooper.com/css/modal.css
img-src  https://roomimg.stream.highwebmedia.com https://*.xcdnpro.com https://primages.herokuapp.com https://slutsnooper.com https://www.google-analytics.com https://*.doubleclick.net https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.w3.org http://www.infinica.com http://jasperreports.sourceforge.net http://uniqa.cz https://uniqa.cz http://schemas.xmlsoap.org http://schemas.microsoft.com http://insdata.sk http://www.uniqa.sk https://www.uniqa.sk https://sec.uniqa.cz:443 https://pos.uniqa.cz http://rychleskody.uniqa.cz https://rychleskody.uniqa.sk https://pojisteni.uniqa.cz http://dozer.sourceforge.net http://java.sun.com/xml/ns/jaxb http://primefaces.org/ui http://omnifaces.org https://rsu.uniqa.sk https://rsu.uniqa.cz http://jakarta.apache.org/log4j http://www.trustpay.eu  https://gate.gopay.cz https://gate.gopay.cz https://www.google-analytics.com http://www.cebia.cz https://pos.uniqa.cz https://pojisteni.uniqa.cz https://cebia.com https://account.sandbox.gopay.com https://secure.smartform.cz
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://platform.linkedin.com https://platform.twitter.com
img-src 'self' data: https://www.google-analytics.com https://static.licdn.com https://syndication.twitter.com https://cdn.txbit.io/"
style-src 'self' 'unsafe-inline' https://www.skb.net fonts.googleapis.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com/ads/ga-audiences *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.bizographics.com *.ads.linkedin.com snap.licdn.com/li.lms-analytics/insight.min.js munchkin.marketo.net munchkin.brightfunnel.com api.brightfunnel.com *.boldchat.com https://secure.leadforensics.com https://od-media.s3.amazonaws.com https://secure.leadforensics.com *.vidyard.com ajax.googleapis.com code.jquery.com/ui/1.10.3/jquery-ui.js https://secure.adnxs.com https://static.filestackapi.com https://fonts.googleapis.com *.fs.liondemand.com
style-src 'self' 'unsafe-inline' code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css https://static.filestackapi.com https://fonts.googleapis.com/ *.fs.liondemand.com
frame-src 'self' bid.g.doubleclick.net *.vidyard.com https://livechat.boldchat.com/aid/812603416823147152/ https://od-static.s3.amazonaws.com https://od-media.s3.amazonaws.com http://media.liondemand.com/
img-src 'self' *.s3.amazonaws.com *.lionbridge.com https: data: http://images.boldchat.com/ *.google-analytics.com *.googleadservices.com *.fs.liondemand.com
connect-src 'self' *.mktoresp.com/webevents/ api.brightfunnel.com *.google-analytics.com https://pagead2.googlesyndication.com/ *.filestackapi.com *.amazonaws.com *.fs.liondemand.com
"default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' https://lysa.se https://embedwistia-a.akamaihd.net https://embed-ssl.wistia.com
script-src 'self' 'unsafe-inline' https://cms.lysa.se https://connect.facebook.net https://cdn.elev.io https://cdnjs.cloudflare.com https://cdn.polyfill.io https://www.google-analytics.com https://fast.wistia.com blob:
connect-src 'self' https://storage.googleapis.com https://www.facebook.com https://cdn.elev.io https://ipa.elev.io https://events.elev.io https://api.lysa.se https://api.lysa.nu https://cms.lysa.se https://www.google-analytics.com https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://distillery.wistia.com https://embedwistia-a.akamaihd.net https://embed-ssl.wistia.com https://stats.g.doubleclick.net
media-src 'self' https://embedwistia-a.akamaihd.net blob: data:
"default-src http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.youtube.com https://*.youtube.com
script-src https://*.rontar.com https://mobjs.b-cdn.net http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://www.googletagmanager.com http://*.googleadservices.com https://*.googleadservices.com http://*.googletagservices.com https://*.googletagservices.com http://google-analytics.com https://google-analytics.com http://*.google-analytics.com https://*.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.googleapis.com https://*.googleapis.com http://*.google.com https://*.google.com http://vk.com https://vk.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com 'unsafe-inline' 'unsafe-eval' 'self'
style-src https://adcode.rontar.com https://mobjs.b-cdn.net https://mobimg.b-cdn.net https://www.google.com http://*.googleapis.com https://*.googleapis.com 'unsafe-inline'
media-src data: tones.mob.org ru.ringtones.mob.org fr.ringtones.mob.org es.ringtones.mob.org ringtones.mob.org.ru ringtones.mob.org.ua ringtones.mob.com.de ringtones.mob.org.pt ringtones.mob.org.cn ringtones.mob.gr.jp http://ahandfulof.me
img-src data: https://ssp.adriver.ru https://*.rontar.com https://images.mob.org https://mobimg.b-cdn.net https://mobjs.b-cdn.net http://i.ytimg.com https://i.ytimg.com http://*.google-analytics.com https://*.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://vk.com https://vk.com https://mob.org http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.doubleclick.net https://*.doubleclick.net http://check.googlezip.net http://img.youtube.com https://img.youtube.com
child-src https://i.ohbah.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://gstatic.com https://gstatic.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.google.com https://*.google.com http://*.doubleclick.net https://*.doubleclick.net http://youtube.ru https://youtube.ru http://youtube.com https://youtube.com http://*.youtube.ru https://*.youtube.ru http://*.youtube.com https://*.youtube.com http://vk.com https://vk.com http://*.facebook.com https://*.facebook.com 'self'
frame-src https://mobimg.b-cdn.net https://i.ohbah.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://gstatic.com https://gstatic.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.google.com https://*.google.com http://*.doubleclick.net https://*.doubleclick.net http://youtube.ru https://youtube.ru http://youtube.com https://youtube.com http://*.youtube.ru https://*.youtube.ru http://*.youtube.com https://*.youtube.com http://vk.com https://vk.com http://*.facebook.com https://*.facebook.com
font-src data: https://mobjs.b-cdn.net http://fonts.gstatic.com https://fonts.gstatic.com
connect-src http://*.googleapis.com https://*.googleapis.com http://*.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://ahandfulof.me 'self'
frame-ancestors 'self' suitu.cz *.suitu.cz mysuitu.com *.mysuitu.com"
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'"
script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.cloudflare.com platform.twitter.com cdn.syndication.twimg.com *.wit.ai *.intercomcdn.com *.intercom.io *.facebook.com:8443
style-src data: blob: 'unsafe-inline' * *.cloudflare.com *.wit.ai
connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm *.wit.ai *.facebook.com:8443 https://*.intercom.io wss://*.intercom.io *.intercomcdn.com syndication.twitter.com
"default-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com blob: http://*.keepital.com https://*.keepital.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.paypal.com https://*.paypal.com http://*.paypalobjects.com https://*.paypalobjects.com
script-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com 'unsafe-eval' blob: http://*.keepital.com https://*.keepital.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.paypal.com https://*.paypal.com http://*.paypalobjects.com https://*.paypalobjects.com
connect-src * 'self' https://www.google.com/analytics https://cdn.mxpnl.com blob: http://*.keepital.com https://*.keepital.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.paypal.com https://*.paypal.com http://*.paypalobjects.com https://*.paypalobjects.com
img-src data: 'self' https://www.google.com/analytics https://cdn.mxpnl.com blob: http://*.keepital.com https://*.keepital.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.paypal.com https://*.paypal.com http://*.paypalobjects.com https://*.paypalobjects.com
style-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com blob: http://*.keepital.com https://*.keepital.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.doubleclick.net https://*.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com http://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.paypal.com https://*.paypal.com http://*.paypalobjects.com https://*.paypalobjects.com
script-src 'self' 'unsafe-inline' d5vbshbduovn.cloudfront.net use.fontawesome.com *.google.com *.google.ca *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.stripe.com *.ably.io *.ably-realtime.com *.newrelic.com *.nr-data.net *.hotjar.com *.facebook.net *.facebook.com 'unsafe-eval' *.bing.com *.hellobar.com *.juicer.io *.reviews.io *.livechatinc.com *.hellomedian.com *.visitor-track.com *.rumiview.com *.adobedtm.com blob: www.bugherd.com *.tawk.to *.jsdelivr.com *.leadquizzes.com *.learnerverified.com *.optmnstr.com
frame-src 'self' www.google.com www.youtube.com *.doubleclick.net
default-src 'self' *.googleapis.com www.blog.google blog.google *.gstatic.com services.google.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com  *.googletagservices.com *.googlesyndication.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.google.com *.bootstrapcdn.com  *.instagram.com *.cloudfront.net *.jquery.com *.facebook.com *.facebook.net *.gstatic.com *.tryinteract.com *.standardmedia.co.ke placehold.it/728x90 placehold.it/300x250 polldaddy.com *.polldaddy.com *.twitter.com *.youtube.com  *.syndication.twimg.com log.adaptv.advertising.com *.amazonaws.com  *.ustream.tv *.twimg.com withgoogle.com *.onthe.io *.withgoogle.com https://cdn.ampproject.org https://maxcdn.bootstrapcdn.com *.sde.co.ke https://cdn.probtn.com http://img.youtube.com *.probtn.com *.outbrain.com *.google.co.ke *.cloudflare.com https://soundcloud.com pixel.alexametrics.com *.alexametrics.com
"script-src https://www.googletagmanager.com https://www.google.com https://ssl.google-analytics.com/ http://www.google-analytics.com/ https://cdn.syndication.twimg.com/ https://*.flickr.com/ http://*.twitter.com/ http://*.cmstest.dev.bouvet.no/ https://cloud.typography.com/ http://localhost:50000/ https://localhost:50000/ https://*.pst.no/ 'self' data: 'unsafe-inline' 'unsafe-eval'
"frame-src 'self' https://map-viewer-acl.be-mobile.biz https://www.youtube.com http://www.youtube.com https://live.ride2go.com/#/embed/acl/ask"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://littlefield.co:443 https://*.littlefield.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:
img-src 'self' 'unsafe-inline' https: data:
"frame-ancestors 'self' http://*.amg.com https://*.amg.com http://*.cochand.com https://*.cochand.com http://*.google.com https://*.google.com
frame-src 'self' http://*.amg.com https://*.amg.com http://*.cochand.com https://*.cochand.com http://*.google.com https://*.google.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://onlinechat2.nic.cz https://test-ipv6.nic.cz https://*.test-ipv6.nic.cz https://piwik.nic.cz/piwik.js https://platform.twitter.com https://cdn.syndication.twimg.com https://s.ytimg.com https://*.googleapis.com https://*.google.com https://connect.facebook.net https://*.mapy.cz
style-src 'self' 'unsafe-inline' https://www.rhybar.cz https://platform.twitter.com https://*.nic.cz https://fonts.googleapis.com https://api.mapy.cz
connect-src 'self' https://*.test-ipv6.nic.cz https://*.labs.nic.cz https://rdap.nic.cz https://www.rhybar.cz https://akademie.nic.cz https://piwik.nic.cz/piwik.php https://www.nic.cz/files/cors/projects-bar/ https://mojeid.cz https://syndication.twitter.com
"frame-ancestors 'self' *.eu-myhyundai.net myhyundai.no *.myhyundai.no"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagservices.com googleads.g.doubleclick.net *.doubleclick.net *.google.ru cdn.jsdelivr.net *.top100.ru *.cloudfront.net *.google.com *.rambler.ru yandex.ru *.yandex.ru yastatic.net *.yandex.net yandex.st *.googleapis.com apis.google.com *.gstatic.com gstatic.com *.googlesyndication.com www.googleadservices.com counter.yadro.ru www.liveinternet.ru vk.com *.vk.com *.mail.ru *.twitter.com cdn.syndication.twimg.com *.facebook.net *.jquery.com cackle.me *.cackle.me
font-src 'self' data: *.gstatic.com *.yandex.ru fonts.googleapis.com maxcdn.bootstrapcdn.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cnzz.com *.luosimao.com rules.quantcount.com www.google-analytics.com secure.quantserve.com stats.g.doubleclick.net *.bdstatic.com *.baidu.com www.googletagmanager.com dn-cowlevel.qbox.me *.cdncl.net o922x45ft.qnssl.com interface.bilibili.com api.bilibili.com static.hdslb.com cdn.bootcss.com
frame-src 'self' cowlevel.net *.steampowered.com *.luosimao.com bandcamp.com *.missevan.com *.tudou.com itch.io *.acfun.cn  *.youku.com *.163.com *.bilibili.com *.kickstarter.com cowlevel-bridge-loaded cowlevel-wvjb-queue-message
script-src 'self' data: teachersammy.com *.amazonaws.com *.googleapis.com cdnjs.cloudflare.com *.google.com 'unsafe-eval' 'nonce-f30945d6-948a-4c9a-9a88-28c27b70a3d5'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://howtofirebase.com:443 https://*.howtofirebase.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'unsafe-eval' 'unsafe-inline' 'self' https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com https://widgets.upaknee.com https://script.hotjar.com https://www.googletagmanager.com https://tagmanager.google.com https://*.eyereturn.com https://static.hotjar.com https://connect.facebook.net maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com
style-src 'self' 'unsafe-inline' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com https://widgets.upaknee.com https://resources.upaknee.com https://use.typekit.net https://p.typekit.net fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com
img-src 'self' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com https://www.facebook.com https://*.doubleclick.net https://*.eyereturn.com https://*.adnxs.com maps.gstatic.com maps.googleapis.com *.google-analytics.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob:
font-src 'self' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com https://use.typekit.net data:
connect-src 'self' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com https://fbcfacapiprod.azurewebsites.net https://widgets.upaknee.com https://*.hotjar.com https://maps.googleapis.com accounts.google.com
frame-src 'self' https://fbcdotcomprod.blob.core.windows.net https://www.cdn.fortisbc.com https://secure.fortisbc.com https://securetest.fortisbc.com https://www.facebook.com https://globalnews.ca https://www.google.com https://vars.hotjar.com https://webforms.fortisbc.com https://www.energydepot.com https://www.plugshare.com https://careers2.hiredesk.net https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com
"default-src 'self' wss://www.reasedoper.pw wss://www.nathetsof.com https://pagead2.googlesyndication.com/ https://mc.yandex.ru/ http://rb.revolvermaps.com/
connect-src 'self' wss://sparnove.com https://api.push.world/ https://api.push.world/ https://static.reasedoper.pw/ wss://www.nathetsof.com wss://nathetsof.com wss://www.reasedoper.pw/ http://meelba.com/ http://stat.qload.ru http://uxm.ru https://mc.yandex.ru/ https://pagead2.googlesyndication.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.papaginos.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.papaginos.com *.googleapis.com www.googletagmanager.com www.google-analytics.com *.facebook.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.papaginos.com www.googletagmanager.com www.google-analytics.com
img-src 'self' *.papaginos.com *.gstatic.com www.googletagmanager.com www.google-analytics.com *.googleapis.com stats.g.doubleclick.net *.facebook.com *.advertising.com
font-src 'self' *.papaginos.com *.googleapis.com *.gstatic.com
connect-src 'self' *.papaginos.com www.google-analytics.com www.googletagmanager.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://arlogilbert.com:443 https://*.arlogilbert.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://docsapi.tendsign.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.tinymce.com https://www.google.com https://www.gstatic.com
style-src 'self' 'unsafe-inline' https://docsapi.tendsign.com https://fonts.googleapis.com https://cdnjs.cloudflare.com
img-src 'self' https://docsapi.tendsign.com https://docsapireports.tendsign.com data:
frame-src 'self' https://adforms.opic.com https://www.google.com https://online.csign.se https://www.quicksearch.se https://dm.quicksearch.se https://www.ibinder.com https://docsapi.tendsign.com
font-src 'self' https://docsapi.tendsign.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com
connect-src 'self' https://creditkarmacdn-a.akamaihd.net https://6033355.fls.doubleclick.net *.creditkarma.com  *.nr-data.net https://stats.g.doubleclick.net wss://www.creditkarma.ca https://www.google-analytics.com
font-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com data:
frame-src 'self' https://6033355.fls.doubleclick.net https://connect.facebook.net https://www.googletagmanager.com https://bid.g.doubleclick.net
img-src 'self' https://creditkarmacdn-a.akamaihd.net https://6033355.fls.doubleclick.net *.creditkarma.com  *.nr-data.net https://stats.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.facebook.com data: https://ckpoc.imgix.net/ https://seal.digicert.com https://www.googletagmanager.com https://sierra.kilo.ckapis.com
script-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com https://bam.nr-data.net https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net 'unsafe-inline' https://seal.digicert.com https://js-agent.newrelic.com 'report-sample' https://sierra.kilo.ckapis.com
style-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com 'unsafe-inline' https://creditkarma-com.go-vip.co data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://donnykimball.com:443 https://*.donnykimball.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com t.co images.ctfassets.net
script-src 'self' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com 'sha256-1gig1ei7abkbfq8rvwk7j2meeoilut5+tblxyancyta=' 'sha256-yebnganu2vnhbkglh1wpbqwtnbziphhkj2moxz3svha=' 'sha256-lfydihmbuygczx2awxvuhbre9o3fk8teju13thmwoic=' 'sha256-gtkfj0ynetpidka36pz+kl6/tx8y2xsltd/uft4luyk=' 'sha256-cnegl2dgufwggngmzkvqrbcfoeg9e26fre13uhvuqn4=' 'sha256-xjez/pxau+fvkl8t+pzfwosomjm5kutjwbf/4zbay6w=' 'sha256-ulpmpb9pplbtvd850n5qn5gmf3naz+v+ftc1+ertxmm='
style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com"
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.marchofdimes.com *.marchforbabies.org *.marchofdimes.org *.ywxi.net *.addthis.com *.addthisedge.com feed2js.org *.cloudfront.net script.crazyegg.com ajax.googleapis.com *.juicer.io api.usersnap.com *.optimizely.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.visualwebsiteoptimizer.com *.atdmt.com *.adsrvr.org *.youtube.com *.googleadservices.com *.cetrk.com *.rfihub.net *.gwallet.com *.godaddy.com *.amazonaws.com *.adroll.com doublethedonation.com *.braintreegateway.com *.payments-amazon.com *.paypalobjects.com *.paypal.com *.amazon.com *.ssl-images-amazon.com *.google.com *.bing.com *.mathtag.com *.acquireinsight.net code.highcharts.com *.jquery.com *.cloudflare.com *.rfihub.com *.formstack.com siteimproveanalytics.com cdn.usersnap.com maxcdn.bootstrapcdn.com *.pinimg.com *.amazonpay.com static.ads-twitter.com *.braintree-api.com *.hotjar.com
connect-src 'self' 'unsafe-inline' https://librarultau.ro/ https://www.google-analytics.com
img-src 'self' https://librarultau.ro/ https://librarultau.ro/ http://www.youblisher.com https://www.librariaonline.ro https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://librarultau.ro/ https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://netdna.bootstrapcdn.com/bootstrap/3.0.2/css/bootstrap.min.css https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/ https://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/base/jquery-ui.css https://netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.min.css
script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/api2/ https://www.googletagmanager.com/gtag/ https://www.google-analytics.com/ https://www.google-analytics.com/r/ https://code.jquery.com/jquery-3.3.1.min.js https://code.jquery.com/jquery-3.1.1.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js
font-src 'self' https://netdna.bootstrapcdn.com/bootstrap/3.0.2/fonts/glyphicons-halflings-regular.woff2 https://netdna.bootstrapcdn.com/bootstrap/3.0.2/fonts/glyphicons-halflings-regular.woff https://netdna.bootstrapcdn.com/bootstrap/3.0.2/fonts/glyphicons-halflings-regular.ttf https://netdna.bootstrapcdn.com/font-awesome/
"frame-ancestors 'self' *.appfluence.com *.office365.com *.office.com *.microsoft.com *.skype.com *.live.com"
"default-src 'self'  'unsafe-inline' 'unsafe-eval' *.nextcapital.com *.planoutcome.com *.smartplanenterprise.com *.pas-wmanagedaccount.com
img-src 'self' 'unsafe-inline' chart.googleapis.com *.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.google.com/recaptcha/api.js translate.google.com www.gstatic.com/recaptcha/ translate.googleapis.com maps.google.com maps.googleapis.com code.jquery.com www.googletagmanager.com/gtm.js www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com/translate_static/ maxcdn.bootstrapcdn.com code.jquery.com
font-src 'self' data: fonts.gstatic.com maxcdn.bootstrapcdn.com
child-src 'self' player.vimeo.com www.google.com www.googletagmanager.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com kiwiirc.com money.yandex.ru connect.facebook.net *.facebook.com *.twitter.com *.twimg.com *.youtube.com
"default-src blob: data: 'unsafe-inline' 'unsafe-eval' mail.ru *.mail.ru *.devmail.ru *.imgsmail.ru *.2gis.com *.2gis.ru s0.2mdn.net *.adriver.ru *.ampproject.net *.ampproject.org *.apester.com *.cloudfront.net www.dailymail.co.uk coub.com *.coub.com *.doubleclick.net *.doubleverify.com facebook.com *.facebook.com *.gemius.pl giphy.com *.google.com *.googleapis.com *.googlesyndication.com themes.googleusercontent.com *.gstatic.com instagram.com *.instagram.com video.khl.ru *.moatads.com *.mradx.net ok.ru *.ok.ru *.playbuzz.com *.qmerce.com rutube.ru *.rutube.ru *.serving-sys.com soundcloud.com *.soundcloud.com *.streamrail.com *.twimg.com twitter.com *.twitter.com player.vimeo.com vine.co vk.com *.vk.com *.weborama.fr *.yandex.ru *.yandex.net yandex.st yandexadexchange.net *.yandexadexchange.net yastatic.net *.youtube.com *.adsafeprotected.com *.newstube.ru *.bbc.com *.viqeo.tv facecast.net *.facecast.net bbc-maps.carto.com wtrfall.com *.1tv.ru corpmail.fluidsurveys.com *.nhl.com *.knightlab.com imgur.com *.tradingview.com paymaster.ru silatv.ru *.silatv.ru cdn.embedly.com player.vgtrk.com sportmail.ru *.sportmail.ru piter.tv *.bonus-tv.ru
script-src 'unsafe-inline' 'unsafe-eval' js-inject *.mail.ru *.devmail.ru *.imgsmail.ru *.api.2gis.ru s0.2mdn.net *.adlooxtracking.com *.algovid.com s3.amazonaws.com cdn.ampproject.org *.apester.com *.bing.com static.bbc.co.uk news.files.bbci.co.uk coub.com *.coub.com *.doubleclick.net *.doubleverify.com *.dvtps.com *.facebook.net *.facebook.com *.flickr.com translate.google.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.google.ru *.instagram.com mediatoday.ru *.moatads.com *.mradx.net *.mxpnl.com *.odnoklassniki.ru ok.ru *.ok.ru *.playbuzz.com *.qmerce.com sb.scorecardresearch.com *.twimg.com *.twitter.com platform.vine.co vk.com *.vk.com *.webvisor.com *.mtproxy.yandex.net *.yandex.ru yandex.st yastatic.net *.pinterest.com *.adsafeprotected.com *.serving-sys.com *.viqeo.tv *.videonow.ru apis.google.com wtrfall.com *.cloudfront.net *.imgur.com *.tradingview.com mytopf.com *.redditmedia.com cdn.embedly.com sportmail.ru *.sportmail.ru
connect-src 'self' wss://*.mail.ru wss://*.devmail.ru wss://*.viqeo.tv *.mail.ru *.devmail.ru *.imgsmail.ru *.api.2gis.ru s0.2mdn.net *.algovid.com *.ampproject.net *.apester.com *.doubleclick.net facebook.com *.facebook.com *.facebook.net *.flickr.com *.googleapis.com *.google-analytics.com *.googlesyndication.com *.gstatic.com *.instagram.com *.mixpanel.com *.mradx.net *.playbuzz.com *.qmerce.com geo.query.yahoo.com twitter.com *.twitter.com *.yadro.ru *.yandex.ru yandex.st yastatic.net collector.mediator.media *.serving-sys.com *.doubleverify.com *.viqeo.tv *.videonow.ru *.vidiom.net wtrfall.com *.mediator.media mytopf.com *.reddit.com wss://sportmail.ru wss://*.sportmail.ru sportmail.ru *.sportmail.ru
worker-src blob: 'self' *.mail.ru *.devmail.ru sportmail.ru *.sportmail.ru
script-src 'self' 'unsafe-inline' 'nonce-704508a098f685403fdfc21c00931595'  https://d24n15hnbwhuhn.cloudfront.net https://fonts.gstatic.com https://fonts.googleapis.com https://ajax.googleapis.com https://api.amplitude.com wireframecc-9947.kxcdn.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' data: *.appcues.com js.appcenter.intuit.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com *.capterra.com *.tinymce.com *.purechat.com *.googleapis.com
script-src 'self' https: 'unsafe-eval' 'unsafe-inline'
img-src 'self' data: https: 'unsafe-inline'
"\"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.gravatar.com *.corp.psi *.gstatic.com *.maximus.com:8000 *.googleapis.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval'  https: data: http://fonts.googleapis.com http://fonts.gstatic.com http://www.google-analytics.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com http://graph.facebook.com http://widgets.pinterest.com http://maps.google.com http://csi.gstatic.com http://maps.gstatic.com http://maps.googleapis.com http://www.linkedin.com http://api-public.addthis.com http://localhost http://www.youtube.com http://cdnjs.cloudflare.com  http://placehold.it  http://www.inetec.hr
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sompojapan.com.tr *.google.com *.google-analytics.com *.googleapis.com *.facebook.com *.gstatic.com *.facebook.net *.googletagmanager.com *.bootstrapcdn.com *.hotjar.com *.onesignal.com onesignal.com"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.ee https://*.yandex.ee static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.ee *.yandex.ee
font-src 'self' https://yastatic.net zen.yandex.ee static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.ee https://passport.yandex.ee wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.ee *.yandex.ee
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.ee https://*.yandex.ee *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.ee *.yandex.ee
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.ee https://www.yandex.ee https://pass.yandex.ee https://mc.yandex.ee zen.yandex.ee an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.ee www.yandex.ee suggest.yandex.ee
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.ee static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
script-src 'self' 'unsafe-inline' https://www.google.com/ http://cdn.livechatinc.com/ http://ajax.googleapis.com https://www.gstatic.com/recaptcha/ http://netdna.bootstrapcdn.com/ https://secure.livechatinc.com/ https://accounts.livechatinc.com/
frame-src 'self' https://www.youtube.com/ https://www.google.com/ https://secure.livechatinc.com/ http://track.dtdc.com/
font-src 'self' http://netdna.bootstrapcdn.com/ https://cdn.livechatinc.com/ https://themes.googleusercontent.com/ https://themes.googleusercontent.com/
img-src 'self' https://kino-fahrplan.de data: https://ssl-vg03.met.vgwort.de
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com
"script-src 'unsafe-inline' 'self' 'unsafe-eval' https://web.kominfo.go.id platform.twitter.com translate.google.com code.jquery.com static.addtoany.com cdn.syndication.twimg.com releases.flowplayer.org www.google-analytics.com translate.googleapis.com kominfo.disqus.com a.disquscdn.com"
style-src 'self' 'unsafe-inline' https://cash-f.squarecdn.com https://cash-c.squarecdn.com
img-src 'self' data: https://images-production-f.squarecdn.com https://images-production-s.squarecdn.com https://cash-f.squarecdn.com https://cash-c.squarecdn.com https://cash-s.squarecdn.com https://images.squareup.com https://notify.bugsnag.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com
frame-src 'self' https://www.google.com https://www.google.ca https://cash.me https://square.com squarecash:
script-src 'nonce-no8khuy3b7qd6r4l5mhk3w==' 'self' 'unsafe-inline' https://cash-f.squarecdn.com https://cash-c.squarecdn.com https://maps.googleapis.com squarecash:
script-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
frame-ancestors 'self' *.op.fi *.nordea.fi *.handelsbanken.fi *.poppankki.fi *.aktia.fi *.saastopankki.fi *.omasp.fi *.s-pankki.fi *.alandsbanken.fi *.danskebank.fi payment.checkout.fi *.paymenthighway.io maksu.pivo.fi
form-action 'self' *.op.fi *.nordea.fi *.handelsbanken.fi *.poppankki.fi *.aktia.fi *.saastopankki.fi *.omasp.fi *.s-pankki.fi *.alandsbanken.fi *.danskebank.fi payment.checkout.fi *.paymenthighway.io maksu.pivo.fi
script-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://ajax.googleapis.com https://www.google-analytics.com https://*.crazyegg.com https://s3.amazonaws.com https://content.govdelivery.com 'nonce-ee3a5e9dc34a4848b038a6493dfe5058' https://eastsussex.gov.uk
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.fr https://*.yandex.fr static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.fr *.yandex.fr
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.fr https://passport.yandex.fr wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.fr *.yandex.fr
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.fr https://*.yandex.fr *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.fr *.yandex.fr
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://www.yandex.fr https://pass.yandex.fr an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.fr www.yandex.fr suggest.yandex.fr
script-src 'unsafe-eval' 'nonce-zxhargjqretintjht3pketgxzmy=' https://enjinx.io https://enjinx.cn https://www.googletagmanager.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://ssl.google-analytics.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://platform.twitter.com https://apis.google.com https://webrtc.github.io
script-src 'self' 'unsafe-eval' 'unsafe-inline' about: spscc.hobsonsradius.com 25livepub.collegenet.com 5p4rk13.com bbox.blackbaudhosting.com connect.facebook.net cse.google.com e.issuu.com fonts.googleapis.com loader.webspellchecker.net rw1.marchex.io scripts.mymarketingreports.com spscc.hobsonsradius.com translate.google.com translate.googleapis.com www.google-analytics.com www.googleapis.com www.google.com www.googletagmanager.com www.googleadservices.com www.tickcounter.com googleads.g.doubleclick.net siteimproveanalytics.com
style-src 'self' 'unsafe-inline' bbox.blackbaudhosting.com cdnjs.cloudflare.com fonts.googleapis.com spscc.hobsonsradius.com translate.googleapis.com www.google.com
img-src 'self' 'unsafe-inline' data: 25livepub.collegenet.com bbox.blackbaudhosting.com clients1.google.com fonts.googleapis.com i.ytimg.com px.marchex.io spscc.edu spscc.hobsonsradius.com stats.g.doubleclick.net translate.google.com translate.googleapis.com www.facebook.com www.google-analytics.com www.googleapis.com www.google.com www.gstatic.com *.siteimprove.com googleads.g.doubleclick.net
frame-src 'self' 5p4rk13.com bbox.blackbaudhosting.com calendar.google.com connect.facebook.net cse.google.com e.issuu.com maps.google.com snapwidget.com staticxx.facebook.com www.facebook.com www.google.com www.tickcounter.com www.youtube.com googleads.g.doubleclick.net
font-src 'self' data: cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com staticxx.facebook.com www.google.com
"child-src https://plusone.google.com https://facebook.com https://platform.twitter.com player.vimeo.com www.google.com sicticch.cyon.link www.sictic.ch www.facebook.com https://www.sictic.ch https://docs.google.com
connect-src 'self' localhost https://sictic.nextension.com https://www.sictic.ch https://sictic.ch
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com *.gstatic.com data: https://fintechday.com https://www.sictic.ch
script-src 'self' https://platform.twitter.com 'unsafe-inline' https://www.google.com maps.googleapis.com *.vimeocdn.com data: sictic.nextension.dev localhost 'unsafe-eval' fintechday.nextension.com fintechday.ch fintechinvestorday.ch swissfintechinvestorday.ch www.fintechday.ch www.fintechinvestorday.ch https://www.gstatic.com https://www.sictic.ch https://sictic.ch https://connect.facebook.net https://www.google-analytics.com player.vimeo.com
style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' vimeocdn.com
img-src 'self' *.gravatar.com data: *.gstatic.com *.googleapis.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net blob:
"script-src https://connect.facebook.net/ http://connect.facebook.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://browser-update.org/ https://www.google.com/ https://www.gstatic.com/recaptcha/ http://www.google.com/recaptcha/ https://ajax.googleapis.com/ 'unsafe-inline' 'unsafe-eval' 'self'
"default-src 'self' 'unsafe-inline' *.fontys.nl *.hse.nl client.presspage.com *.gxsoftware.com *.linkedin.com *.youtube-nocookie.com *.youtube.com *.doubleclick.net *.addthis.com *.amazonaws.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.nl *.googleadservices.com *.googletagmanager.com *.snapchat.com *.hotjar.com data: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: wss:
style-src https: * 'unsafe-inline' 'unsafe-eval' 'self' data: *
img-src * data: 'unsafe-eval' 'unsafe-inline'
font-src *  data: 'unsafe-eval' 'unsafe-inline'
"default-src https: 'unsafe-eval' 'unsafe-inline' 'self'
script-src: 'unsafe-eval' 'unsafe-inline' 'self' www.google-analytics.com
"default-src 'self' * data: 'unsafe-inline' 'unsafe-eval'
"frame-src *.iwcollege.ac.uk *.google.com *.facebook.com *.facebook.net *.twitter.com *.t.co *.wordpress.org *.youtube.com *.youtube-nocookie.com *.unistats.ac.uk *.issuu.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://theascent.pub:443 https://*.theascent.pub:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' data: https://c.imedia.cz https://im9.cz  https://maps.google.com  https://www.google.cz https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net  https://toplist.cz
script-src 'self' https://ssl.heureka.cz https://*.zbozi.cz https://ajax.googleapis.com  https://www.google.com https://www.google-analytics.com   'nonce-nvsdwmtctytmhnaylrl9'
"connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.securelist.ru https://*.youtube.com https://cdn.securelist.ru https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://securelist.ru https://www.google-analytics.com
default-src 'self' https://*.securelist.ru https://cdn.securelist.ru https://kasperskycontenthub.com https://securelist.ru
font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.securelist.ru https://*.wp.com https://assets.kasperskycontenthub.com https://cdn.securelist.ru https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://s0.wp.com https://securelist.ru
frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.youtube.com https://cdn.securelist.ru https://kasperskycontenthub.com https://player.vimeo.com https://s-static.ak.facebook.com https://securelist.ru https://tpc.googlesyndication.com https://w.securelist.com https://widgets.wp.com https://www.brighttalk.com https://www.facebook.com https://www.google.com https://www.youtube.com
img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.netdna-ssl.com https://*.securelist.ru https://*.sharethis.com https://*.staticflickr.com https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://blog.kaspersky.ru https://cdn.securelist.com https://cdn.securelist.ru https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://pbs.twimg.com https://pixel.wp.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://securelist.com https://securelist.ru https://stats.g.doubleclick.net https://t.co https://threatpost.ru https://track.addevent.com https://www.facebook.com https://www.google-analytics.com
object-src 'self' https://*.securelist.ru https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://securelist.ru
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.securelist.ru https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://apis.google.com https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://cdn.api.twitter.com https://cdn.securelist.ru https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://graph.facebook.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://platform.twitter.com https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://secure.gravatar.com https://securelist.ru https://share.yandex.ru/ https://static.ads-twitter.com https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://www.linkedin.com
style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://assets.kasperskycontenthub.com https://cdn.securelist.ru https://fonts.googleapis.com https://kasperskycontenthub.com https://s0.wp.com https://secure.gravatar.com https://securelist.ru"
script-src 'strict-dynamic' 'nonce-56ad604d39d2447dab107fe9457e0e52' 'unsafe-inline' 'unsafe-eval' https:
default-src 'self' 'unsafe-eval' 'unsafe-inline' *
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://code.jquery.com https://themes.googleusercontent.com
font-src 'self' *.gstatic.com *.googleapis.com *.bootstrapcdn.com http://fonts.gstatic.com data:
frame-src 'self' instagram://media *.mail.ru *.g.doubleclick.net *.googlevideo.com *.doubleclick.net mc.webvisor.org *.webvisor.org *.yandex.ru ymetrica1.com yastatic.net *.yandexadexchange.net yandexadexchange.net *.instagram.com http://www.youtube.com *.youtube.com *.google.com gsa://onpageload instagram://user
img-src 'self' slimim.com *.yandex.ru *.yandex.fr *.yandex.ua *.yandex.com.tr *.webvisor.org mc.webvisor.org *.yadro.ru *.ytimg.com http://*.ytimg.com *.youtube.com *.googlesyndication.com *.mds.yandex.net *.yandex.net *.mail.ru *.gstatic.com *.yandex.com.am an.yandex.ru data:
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com www.google.ca ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com maps.googleapis.com maps.gstatic.com stats.g.doubleclick.net connect.facebook.net www.facebook.com connect.facebook.com www.facebook.net staticxx.facebook.com *.zopim.com *.zopim.io *.zendesk.com *.zdassets.com *.zopim.org wss://*.zopim.com https://embedsocial.com https://www.googletagmanager.com
script-src 'unsafe-eval' https://cdn.jsdelivr.net https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js https://ssl.google-analytics.com/analytics.js https://streamsnooper.com/java/d.js https://streamsnooper.com/java/l.js https://streamsnooper.com/java/g.js https://ss-static.com https://*.cloudflare.com https://*.google-analytics.com https://*.googlesyndication.com 'nonce-eg/t4z9dwj1tspm91iototml96ootgybvtrhixwz' 'strict-dynamic'
style-src 'unsafe-inline' https://streamsnooper.com/css/sty.css https://streamsnooper.com/css/style1.css https://streamsnooper.com/css/style1a.css https://streamsnooper.com/css/style2.css https://streamsnooper.com/css/style3.css https://ss-static.com https://fonts.googleapis.com ajax.cloudflare.com https://*.mgid.com
"default-src 'self' *.onboardify.com *.amazonaws.com player.vimeo.com youtube.com *.google-analytics.com *.googletagmanager.com *.clicky.com videopress.com googlecode.com cdn.kendostatic.com api.userinfo.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com seal.godaddy.com webapp.onboardify.com webapp-qa.onboardify.com js-agent.newrelic.com bam.nr-data.net *.google-analytics.com *.googletagmanager.com *.clicky.com *.getclicky.com hs-scripts.com
img-src 'self' data: *.dossier.work  img.onboardify.com seal.godaddy.com webapp.onboardify.com webapp-qa.onboardify.com *.amazonaws.com *.google.com *.google-analytics.com *.doubleclick.net
frame-src 'self' accounts.google.com *.youtube.com player.vimeo.com webapp.onboardify.com webapp-qa.onboardify.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://byrslf.co:443 https://*.byrslf.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
frame-src 'self' www.youtube-nocookie.com *.stripe.com *.google.com
img-src 'self' data: *.stripe.com *.google-analytics.com
script-src 'self' *.stripe.com polyfill.io *.google.com *.gstatic.com *.googletagmanager.com 'nonce-5mya3hwtbnfoiwkgrebxnnwpiuwlc6tel30cv4tz4r8=' 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://mc.yandex.ru
img-src 'self' https://ssl.google-analytics.com https://mc.yandex.ru https://pp.vk.me https://pp.userapi.com https://chart.googleapis.com https://sun6-1.userapi.com https://sun6-2.userapi.com https://sun6-3.userapi.com https://sun6-4.userapi.com https://sun6-5.userapi.com https://sun6-6.userapi.com
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.lt https://*.yandex.lt static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.lt *.yandex.lt
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.lt https://passport.yandex.lt wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.lt *.yandex.lt
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.lt https://*.yandex.lt *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.lt *.yandex.lt
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.lt https://www.yandex.lt https://pass.yandex.lt https://mc.yandex.lt an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.lt www.yandex.lt suggest.yandex.lt
"default-src 'self' https://order.velomap.org/ https://order.outdoormaps.com/ https://order.openmtbmap.org/ https://order.mtbmap.com/ https://order.velomap.com/ https://order.openmtbmap.com/ https://openmtbmap.org https://outdoormaps.thrivecart.com/ https://js.stripe.com/ https://www.velomap.org https://outdoormaps.com https://openmtbmap.com https://www.velomap.com https://www.openmtbmap.com https://checkout.stripe.com https://youtube.com https://accounts.google.com https://yoast.com https://player.vimeo.com/
script-src 'self' https://tinder.thrivecart.com https://code.jquery.com/jquery-1.12.4.min.js https://www.google.com/uds/ https://ajax.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/ https://www.google.com/jsapi https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/ https://js.stripe.com https://cspf-locate.herokuapp.com https://maps.googleapis.com/ https://developers.google.com/maps/ https://checkout.stripe.com https://openmtbmap.org https://www.velomap.org https://outdoormaps.com https://openmtbmap.com https://www.velomap.com https://www.openmtbmap.com https://apis.google.com 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.gstatic.com data:
img-src 'self' https://www.gstatic.com https://www.velomap.org https://openmtbmap.org https://q.stripe.com *.tile.osm.org *.tiles.mapbox.com https://www.gstatic.com/images https://www.gstatic.com/images/branding/product/2x/translate_24dp.png data: https://www.google.com https://ajax.googleapis.com 'self' https://openmtbmap.org https://www.velomap.org https://outdoormaps.com https://openmtbmap.com https://www.velomap.com https://www.openmtbmap.com https://www.s2member.com https://wordpress.org https://*.w.org https://*.wp.com https://ssl.google-analytics.com https://www.google-analytics.com https://s2member.com https://www.paypal.com https://ajax.cloudflare.com https://www.paypalobjects.com
style-src 'self' https://cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/ https://openmtbmap.org https://www.velomap.org https://outdoormaps.com https://openmtbmap.com https://www.velomap.com https://www.openmtbmap.com 'unsafe-inline' https://ajax.googleapis.com https://www.google.com https://fonts.googleapis.com https://assets.zendesk.com https://*.wp.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://www.gstatic.com
font-src 'self' https://openmtbmap.org https://www.velomap.org https://outdoormaps.com https://openmtbmap.com https://www.velomap.com https://www.openmtbmap.com https://netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com http://fonts.gstatic.com https://themes.googleusercontent.com https://themes.googleusercontent.com https://www.google.com https://use.fontawesome.com data:
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-ymyznjjmngytndrlos00nzk4lthlotitzmziytbmnjrlnjc2'
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-ndzhn2i2ndktm2exni00njmylthlnzitm2fmymnhmjvhotfi'
connect-src *.stellarport.io ws://api.stellarport.io wss://api.stellarport.io ws://stellar.api.stellarport.io wss://stellar.api.stellarport.io https://api.mixpanel.com *.googletagmanager.com *.google-analytics.com
img-src *.stellarport.io 'self' data: https:
script-src 'self' api.stellarport.io stellar.api.stellarport.io 'sha256-yxm+lyryp8wovtz0m4qngdlczliyqt3++zbc0macmf4=' 'sha256-kmtezr8hpztiqr1quwvbg3hxwt7ciirqyi1zq0ewprk=' 'sha256-loml7w8v08pqhd4vcntjny+cvcyqv/kkf3zhx8ht2gc=' 'sha256-znw+prxu+xsry+rciopltpvbv9gm3yjq8aoxiftqreu=' 'sha256-hfoor8jowsl4g50ftqgvrsejphpvt5paclceqtfnbaw=' *.mxpnl.com *.googletagmanager.com *.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://homemasters.ru:443 https://mail.ru https://*.mail.ru https://imgsmail.ru https://*.imgsmail.ru https://google.ru https://*.google.ru https://google-analytics.com https://*.google-analytics.com https://vk.com https://*.vk.com  https://vkontakte.ru https://*.vkontakte.ru https://facebook.net https://*.facebook.net https://facebook.com https://*.facebook.com https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yandex.st https://*.yandex.st https://yastatic.net https://gstatic.com https://*.gstatic.com https://googleads.g.doubleclick.net https://google.com https://*.google.com https://twitter.com https://*.twitter.com https://*.twimg.com https://*.googleapis.com https://*.googlesyndication.com https://ok.ru https://*.ok.ru https://*.odnoklassniki.ru https://counter.rambler.ru https://st.top100.ru  https://keycaptcha.com https://*.keycaptcha.com https://click-stroy.ru https://*.click-stroy.ru  https://pinterest.com https://*.pinterest.com https://s3.amazonaws.com/ https://mixmarket.biz https://*.mixmarket.biz https://*.adriver.ru https://*.instagram.com
connect-src * data: filesystem: 'unsafe-inline' 'unsafe-eval'
frame-src * data: filesystem: 'unsafe-inline' 'unsafe-eval'
object-src * data: filesystem: 'unsafe-inline' 'unsafe-eval'
img-src * data: filesystem: 'unsafe-inline' 'unsafe-eval'
media-src * data: filesystem: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' besposrednika.ru *.besposrednika.ru besposrednika.local *.besposrednika.local yandex.ru *.yandex.ru yandex.net *.yandex.net yandex.st *.yandex.st yastatic.net *.yastatic.net google.com *.google.com google.ru *.google.ru googleapis.com *.googleapis.com gstatic.com *.gstatic.com googlesyndication.com *.googlesyndication.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com *.ggpht.com *.googletagservices.com vk.com *.vk.com vk.me *.vk.me userapi.com *.userapi.com ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru *.api.2gis.ru *.maps.2gis.com yadro.ru *.yadro.ru liveinternet.ru *.liveinternet.ru counter.rambler.ru counter.nn.ru data:
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://www.googleapis.com https://www.google-analytics.com/ https://code.highcharts.com/highcharts.js  *.wlresources.com xlovecam.com *.xlovecam.com acwm.biz *.acwm.biz xlovecash.com *.xlovecash.com traffic.acwebconnecting.com *.dev.cam
connect-src 'self'  *.wlresources.com xlovecam.com *.xlovecam.com acwm.biz *.acwm.biz xlovecash.com *.xlovecash.com traffic.acwebconnecting.com *.dev.cam
script-src 'unsafe-inline' 'unsafe-eval' 'self' *.googleapis.com www.google-analytics.com *.cloudflare.com *.statcounter.com *.google.com *.jquery.com *.calendly.com
"style-src 'unsafe-inline' https://use.fontawesome.com https://www.paypalobjects.com https://www.paypal.com https://cdn.datatables.net https://fonts.googleapis.com https://www.hashes.org https://hsl.hashes.org https://hashes.org https://fonts.gstatic.com https://ssl.google-analytics.com https://www.blockonomics.co
default-src 'self' https://use.fontawesome.com https://www.blockonomics.co https://cdn.datatables.net https://www.paypalobjects.com https://www.paypal.com https://fonts.googleapis.com https://www.hashes.org https://hsl.hashes.org https://hashes.org https://fonts.gstatic.com https://ssl.google-analytics.com
script-src 'unsafe-inline' https://www.paypalobjects.com https://www.paypal.com https://cdn.datatables.net https://fonts.googleapis.com https://www.hashes.org https://hsl.hashes.org https://hashes.org https://fonts.gstatic.com https://ssl.google-analytics.com https://www.blockonomics.co"
"default-src 'self' 'unsafe-inline' https://*.sharethis.com www.google-analytics.com https://www.bportugal.pt
style-src 'self' 'unsafe-inline' https://*.sharethis.com https://static.addtoany.com *.googleapis.com code.jquery.com cdn.jsdelivr.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.sharethis.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://static.addtoany.com https://code.jquery.com cdn.jsdelivr.net https://*.instagram.com
child-src 'self' http://www.44.mktid1.com https://*.sharethis.com https://www.bportugal.pt https://static.addtoany.com https://www.youtube.com https://www.euro-area-statistics.org https://www.google.com https://*.instagram.com
img-src 'self' data: https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' besposrednika.ru *.besposrednika.ru bsps.ru *.bsps.ru besposrednika.local *.besposrednika.local yandex.ru *.yandex.ru yandex.net *.yandex.net yandex.st *.yandex.st yastatic.net *.yastatic.net google.com *.google.com google.ru *.google.ru googleapis.com *.googleapis.com gstatic.com *.gstatic.com googlesyndication.com *.googlesyndication.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com *.ggpht.com *.googletagservices.com vk.com *.vk.com vk.me *.vk.me userapi.com *.userapi.com ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru *.api.2gis.ru *.maps.2gis.com yadro.ru *.yadro.ru liveinternet.ru *.liveinternet.ru counter.rambler.ru counter.nn.ru st2.barnaul.besposrednika.ru brn.c.bsps.ru data:
child-src 'self' blob: https://content.googleapis.com https://www.googletagmanager.com/ns.html
connect-src 'self' https://atlas.microsoft.com https://www.google-analytics.com https://events.glasgowlife.org.uk https://plus.browsealoud.com https://*.speechstream.net https://stats.g.doubleclick.net https://babm.texthelp.com https://dc.services.visualstudio.com
font-src 'self' 'unsafe-inline' data: https://atlas.microsoft.com https://fonts.gstatic.com https://fonts.googleapis.com https://fast.fonts.net
img-src 'self' blob: data: https://atlas.microsoft.com https://gl-events.s3.amazonaws.com https://qaglportal.azureedge.net https://prodglportal.azureedge.net https://qaglportalv2.azureedge.net https://prodglportalv2.azureedge.net https://gl-wip-portal-cache.azureedge.net https://gl-test-portal-cache.azureedge.net https://gl-prod-portal-cache.azureedge.net https://glwipportal.blob.core.windows.net https://gltestportal.blob.core.windows.net https://glwipportal.blob.core.windows.net https://glprodportal.blob.core.windows.net https://glportalprodblob.blob.core.windows.net https://glportalv2qablobfront.blob.core.windows.net https://glportalv2prodblob.blob.core.windows.net https://events.glasgowlife.org.uk https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.gravatar.com https://plus.browsealoud.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com
media-src 'self' https://qaglportal.azureedge.net https://prodglportal.azureedge.net https://qaglportalv2.azureedge.net https://prodglportalv2.azureedge.net https://*.speechstream.net
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://atlas.microsoft.com https://www.browsealoud.com https://plus.browsealoud.com https://connect.facebook.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://fast.fonts.net https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' https://atlas.microsoft.com https://fonts.googleapis.com https://fast.fonts.net https://plus.browsealoud.com https://tagmanager.google.com
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-0pwjg83xslognbnafwwxpsiupttabsrzvmjemnk9284='
script-src 'self' 'unsafe-eval' *.gstatic.com 'nonce-2000c7f20c' *.interactievetv.nl *.appsquad.net https://www.google-analytics.com
frame-src 'self' https://bansovet.ru http://awaps.yandex.ru https://*.ok.ru http://*.ok.ru http://*.mail.ru https://*.mail.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru http://*.imgsmail.ru https://*.imgsmail.ru http://imgsmail.ru https://imgsmail.ru https://*.jivosite.com wss://*.jivosite.com http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.google-analytics.com https://*.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yastatic.net/ https://*.github.io https://pass.yandex.ru http://mc.yandex.ru https://api-maps.yandex.ru http://api-maps.yandex.ru https://mc.yandex.ru http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.google-analytics.com https://*.google-analytics.com https://*.jivosite.com wss://*.jivosite.com https://*.ok.ru http://*.ok.ru http://*.mail.ru https://*.mail.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru http://*.imgsmail.ru https://*.imgsmail.ru http://imgsmail.ru https://imgsmail.ru  http://counter.rambler.ru https://counter.rambler.ru http://mod.calltouch.ru
connect-src 'self' http://mc.yandex.ru https://*.github.io https://*.jivosite.com wss://*.jivosite.com https://mc.yandex.ru http://www.google-analytics.com https://www.google-analytics.com https://yandex.ru http://*.dreamline.com.ru https://*.dreamline.com.ru http://*.mail.ru http://yandex.ru
child-src 'self' *.preview.myqcloud.com captcha.guard.qcloud.com h5.aisee.qq.com lexiangla.com open.work.weixin.qq.com v.qq.com weixin: weixinping:
connect-src 'self' *.myqcloud.com *.qq.com *.v.smtcdns.com *.vod2.myqcloud.com data: file.lexiang-asset.com lexiangla.com oneapm.lexiang-asset.com playvideo.qcloud.com pxy.video.qq.com sentry.pot.tencent.com vod2.qcloud.com
frame-src 'self' *.gov.weixin.qq.com *.preview.myqcloud.com h5.aisee.qq.com lexiangla.com open.work.weixin.qq.com ssl.captcha.qq.com uni.weixiao.qq.com v.qq.com weixin: weixinping:
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.v.qq.com *.video.qq.com imgcache.gtimg.cn imgcache.qq.com livew.l.qq.com oneapm.lexiang-asset.com pingjs.qq.com play.video.qcloud.com playvideo.qcloud.com res.wx.qq.com ssl.captcha.qq.com static.lexiang-asset.com v.qq.com vd.l.qq.com vm.gtimg.cn
style-src 'self' 'unsafe-inline' imgcache.qq.com ssl.captcha.qq.com static.lexiang-asset.com vm.gtimg.cn
"script-src 'self' 'nonce-a399d629-6459-4a89-bf03-cfc07d534d4b' https://*.msecnd.net https://*.mxpnl.com https://cdn-mxpnl.com https://cdn.ravenjs.com https://checkout.razorpay.com/v1/checkout.js https://wzrkt.com https://d2r1yp2w7bby2u.cloudfront.net
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.umbraco.org *.umbraco.com *.blob.core.windows.net *.youtube.com youtube.com *.gstatic.com *.googleapis.com html5shiv.googlecode.com cloud.typography.com google-analytics.com *.google.com www.google-analytics.com stats.g.doubleclick.net *.googletagmanager.com *.googleapis.com *.azurewebsites.net *.addsearch.com addsearch.com *.cloudfront.net *.searchcdn.com *.2mco.com"
"frame-ancestors macrium.000webhostapp.com macrium2.000webhostapp.com northamber.com apps.macrium.com www.macrium.com www-dev.macrium.com localhost macrium.com portal.macrium.com"
"default-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru
script-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru
connect-src * 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru
img-src data: 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru
style-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru
font-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com https://js.iugu.com https://api.iugu.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://ssl.gstatic.com https://ssl.gstatic.com http://www.google-analytics.com https://apis.google.com https://fonts.gstatic.com https://accounts.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://js.hs-scripts.com https://js.hs-scripts.com http://js.leadin.com https://js.leadin.com http://js.hs-analytics.net https://js.hs-analytics.net http://track.hubspot.com https://track.hubspot.com http://js.hsleadflows.net https://js.hsleadflows.net http://js.hscollectedforms.net https://js.hscollectedforms.net http://api.usemessages.com https://api.usemessages.com http://call.chatra.io http://chat.chatra.io http://pippio.com https://pippio.com http://x01.aidata.io https://x01.aidata.io http://sync.1dmp.io https://sync.1dmp.io http://an.yandex.ru https://an.yandex.ru data:
"default-src 'self' blob: about: s.ytimg.com www.linkedin.com px.ads.linkedin.com cdn.datatables.net www.youtube.com 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net *.sciex.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com addtocalendar.com *.crazyegg.com cdn.bioz.com use.typekit.net www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.cloudfront.net sjs.bizographics.com content.jwplatform.com ssl.p.jwpcdn.com *.en25.com www.bioz.com *.walkme.com *.salesforceliveagent.com platform.twitter.com jwpsrv.com *.addthis.com now.eloqua.com cdn.syndication.twimg.com m.addthisedge.com performance.typekit.net graph.facebook.com s3.amazonaws.com/trk.cetrk.com *.tinymce.com
img-src 'self' data: *.doubleclick.net *.crazyegg.com sciex.secure.force.com www.googletagmanager.com www.google-analytics.com *.sciex.com sciex.com www.google.com gtrk.s3.amazonaws.com placehold.it az621941.vo.msecnd.net *.walkme.com s1866.t.eloqua.com s1542299845.t.eloqua.com jwpltx.com p.typekit.net *.webdamdb.com code.jquery.com syndication.twitter.com *.tinymce.com
font-src 'self' data: webfonts.zohostatic.com maxcdn.bootstrapcdn.com ssl.p.jwpcdn.com use.typekit.net fonts.gstatic.com *.tinymce.com
frame-src 'self' *.sciex.com bid.g.doubleclick.net www.phenomenex.com www.youtube.com maps.google.com www.google.com www.bioz.com internal.discoversciex.com platform.twitter.com *.cloudfront.net s7.addthis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' https://ajax.googleapis.com/ https://code.jquery.com/
img-src 'self' data: 'unsafe-eval' https://code.jquery.com/
font-src 'self' 'unsafe-inline' https://code.jquery.com/ https://fonts.gstatic.com/
connect-src 'self' https://nolt.io api.cloudinary.com *.algolia.net *.algolianet.com *.paddle.com
img-src 'self' https://nolt.io data: res.cloudinary.com www.google-analytics.com *.paddle.com
script-src 'self' https://nolt.io www.google-analytics.com *.paddle.com 'nonce-yjhkntu1nwityjnhys00mjfhlthhyjutmtfmywi1mtvjmdzj'
script-src 'self' https://cdn.mathjax.org https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://code.jquery.com https://ajax.googleapis.com https://www.google-analytics.com https://paragonie.com:443 paragonie.com:443 'sha384-dxxwatrup7cvaqsjslq8y30xnlv+kbg0q/esjcstpj7besqctr1kyuzuu8ntp0qd' 'nonce-kngh50q/ijxbfk0oj38yxo/i' 'nonce-dcclvbokqi2lij75t5qjfzui' 'nonce-hs+t8cprdpbzzxhk3hwzzi/0' 'nonce-2rsxkqcusdkyekkzwdv0cohd' 'nonce-f5gfxltonylzfudxsjvq4fgl' 'nonce-zpy1msttxxnuxua9jh4+fgmr' 'nonce-z40ejjpet5shbwz9si5vjujl' 'unsafe-eval' data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https https://static.optoma.co https://teststatic.optomaeurope.com https://code.jquery.com https://fast.fonts.net https://www.googletagmanager.com https://*.google.com https://*.pingdom.net https://*.youtube.com https://www.google-analytics.com https://*.ytimg.com https://www.youtube-nocookie.com https://*.googleapis.com https://*.gstatic.com https://*.doubleclick.net https://*.google.co.uk https://*.jsdelivr.net https://*.aspnetcdn.com https://youtube.com https://*.vimeo.com https://unpkg.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.amphia.nl *.amphia.local *.doubleclick.net *.bootstrapcdn.com *.google-analytics.com *.youtube-nocookie.com *.youtube.com *.readspeaker.com *.google.com *.gstatic.com *.cloudflare.com *.googleapis.com data:"
"default-src 'self' *.braathe.no *.gstatic.com *.google.com * www.gravatar.com player.vimeo.com https://oslobysykkel.no *.vimeocdn.com packages.umbraco.org our.umbraco.org *.zopim.com https://www.google.com/ gap: https://ssl.gstatic.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' *.braathe.no wss: wss://*.zopim.com https://oslobysykkel.no *.zopim.com 'unsafe-inline' 'unsafe-eval' https://ssl.gstatic.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com stats.g.doubleclick.net
img-src 'self' *.braathe.no https://v2.zopim.com *.zopim.io data: 'unsafe-inline' *.zopim.io https://v2.zopim.com 'unsafe-eval' https://v2.zopim.com *.zopim.io www.googletagmanager.com data: *.braathe.no umbraco.tv *.umbraco.tv i.ytimg.com *.umbraco.org www.gravatar.com content: www.google-analytics.com stats.g.doubleclick.net
font-src 'self' *.braathe.no data: *.zopim.com
script-src 'self' *.braathe.no *.zopim.com 'unsafe-inline' 'unsafe-eval'  https://www.gstatic.com https://www.google.com https://storage.googleapis.com data: gap: www.google-analytics.com ajax.googleapis.com www.googletagmanager.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com maps.googleapis.com fonts.gstatic.com www.gstatic.com csi.gstatic.com maps.gstatic.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com www.googletagmanager.com www.google.com *.vo.msecnd.net www.google-analytics.com www.googleadservices.com dnn506yrbagrg.cloudfront.net sjs.bizographics.com www.googletagservices.com dc.services.visualstudio.com adservice.google.com tpc.googlesyndication.com pagead2.googlesyndication.com cdn.ampproject.org www.brighttalk.com *.g.doubleclick.net *.ads.linkedin.com *.liveperson.net *.lpsnmedia.net cdn.snapapp.com scdn.snapapp.com *.snapapp.com
frame-src 'self' https://lpcdn.lpsnmedia.net https://server.iad.liveperson.net www.brighttalk.com www.google.com www.youtube.com *.snapapp.com
child-src 'self' https://lpcdn.lpsnmedia.net https://server.iad.liveperson.net www.brighttalk.com www.google.com www.youtube.com"
"default-src https: connect-src https: wss:
"frame-ancestors https://www.thesbcommunity.com http://www.sbmania.net http://sbmania.net https://cytu.be https://www.cytu.be"
"script-src 'self' https://maps.googleapis.com/ 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://mc.yandex.ru https://fo.allianz.ru https://testfo.allianz.ru https://www.googletagmanager.com https://egrp365.ru http://128.199.44.127 https://*.dadata.ru https://bitrix.info/ba.js https://ssl.google-analytics.com/ga.js https://stats.g.doubleclick.net https://www.google.com/recaptcha/api.js"
script-src 'nonce-s5tvxccourrobsfda8ndvx9g7jqzz4n6' archmule.com next.archmule.com archmule.test *.bootstrapcdn.com cdnjs.cloudflare.com connect.facebook.net *.google-analytics.com fonts.googleapis.com *.googletagmanager.com djtflbt20bdde.cloudfront.net code.jquery.com stats.pusher.com platform.twitter.com *.twimg.com www.youtube.com s.ytimg.com
"script-src 'self' 'nonce-8a93d469-1e0d-4297-af52-d0058182a301' gearsofwar.com *.gearsofwar.com www.google.com *.googleapis.com  www.google-analytics.com www.googletagmanager.com www.gstatic.com *.msecnd.net *.youtube.com *.ytimg.com cdnjs.cloudflare.com fb.me connect.facebook.net *.facebook.com www.facebook.com platform.twitter.com cdn.syndication.twimg.com uhf.microsoft.com c.s-microsoft.com code.jquery.com maxcdn.bootstrapcdn.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://jw-webmagazine.com:443 https://*.jw-webmagazine.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' https: data: *.skyminds.net http://thunderstruck.servebeer.com
script-src 'self' https: data: https://stats.wp.com https://z-eu.amazon-adsystem.com https://ws-eu.assoc-amazon.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https: data: https://fonts.googleapis.com https://ws-eu.assoc-amazon.com 'unsafe-inline'
img-src 'self' https: https://codeable.io https://app.codeable.io data:
"default-src 'self' https://docs.google.com *.googleapis.com https://music.yandex.ru *.googletagmanager.com *.googlesyndication.com *.calameo.com *.facebook.com *.vk.com vk.com https://apis.google.com *.google.com *.google.ru *.google.com.ua *.twitter.com *.youtube.com http://*.youtube.com *.ok.ru ok.ru https://www.youtube.com *.odnoklassniki.ru  *.yandex.ru https://accounts.google.com https://s-static.ak.facebook.com https://www.facebook.com https://login.vk.com *.getloupe.com *.padlet.com *.twitter.com schoodle.ru https://prezi.com http://vedomosti.media.eagleplatform.com https://learningapps.org https://*.revolvermaps.com https://player.vgtrk.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.google.com *.google.ru https://docs.google.com https://apis.google.com ajax.googleapis.com mc.yandex.ru an.yandex.ru *.yandex.ua *.yandex.ru vk.com *.twitter.com connect.facebook.net graph.facebook.com connect.mail.ru counter.rambler.ru www.googletagservices.com www.googletagmanager.com www.google-analytics.com https://www.googleadservices.com *.odnoklassniki.ru *.ok.ru counter.rambler.ru https://www.googleapis.com relap.io schoodle.ru https://*.revolvermaps.com
style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com relap.io *.twitter.com ton.twimg.com cdn.jsdelivr.net uroki-maya.online
connect-src 'self' mc.yandex.ru www.google-analytics.com www.googleapis.com
"script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com static.zdassets.com s.ytimg.com www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com
style-src * data: blob: 'unsafe-inline'"
"default-src 'unsafe-inline' 'self' *.google.com *.google.pl *.googletagmanager.com *.googleapis.com *.youtube.com *.google-analytics.com *.gstatic.com *.gemius.pl *.doubleclick.net data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://planamag.com:443 https://*.planamag.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.vtinfo.com *.vipcustomers.com http://*.vipcustomers.com http://*.vipcustomers.com:8082 *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com vipmobile.atlassian.net
frame-src 'self' https://www.google.com/recaptcha/ *.vtinfo.com player.vimeo.com vipmobile.atlassian.net www.google.com calendar.google.com
img-src 'self' data: *.vtinfo.com *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com res.cloudinary.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ www.googletagmanager.com ajax.googleapis.com maps.googleapis.com www.google-analytics.com maxcdn.bootstrapcdn.com
style-src 'self' 'unsafe-inline' * maxcdn.bootstrapcdn.com fonts.googleapis.com
font-src 'self' * maxcdn.bootstrapcdn.com fonts.gstatic.com data:
child-src 'self' *.youtube.com *.issue.com *.facebook.com *.twitter.com https://*.genkgo.com
font-src 'self' *.typekit.net https://*.genkgo.com 'unsafe-inline'
img-src 'self' https://* https://*.genkgo.com data:
script-src 'self' *.typekit.net *.linkedin.com *.twitter.com https://*.genkgo.com 'unsafe-inline'
style-src 'self' *.typekit.net https://*.genkgo.com 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com *.akamaihd.net *.baml.com bankofamerica.tt.omtrdc.net *.ml.com secure.insightexpressai.com *.businesswire.com testdata.coremetrics.com http://*.bankofamerica.com https://*.bankofamerica.com  *.brightcove.com *.brightcove.net *.sharethis.com *.twitter.com twitter.com *.facebook.com www.linkedin.com delicious.com digg.com api.pinterest.com www.stumbleupon.com www.myspace.com buzz.yahoo.com www.bankofamerica.com www.boa.com www.ml.com www.merrill.com www.totalmerrill.com www.merrilllynch.com www.ust.com www.us-trust.com www.ustrust.com www.baml.com www.ba-ml.com www.bac.com acemegreen.thismoment.com analytics1.onedotone.net *.googleapis.com ecx.images-amazon.com brightcove.vo.llnwd.net *.doubleclick.net cdnt.meteorsolutions.com expressyourthanks.thismoment.com thismoment-a.akamaihd.net api.tiles.mapbox.com *.google.com *.gstatic.com www.youtube.com www.google-analytics.com bofa.44doors.com *.mapbox.com bofa.demdex.net *.maxmind.com *.betrad.com sjs.bizographics.com www.googletagmanager.com *.userzoom.com *.evidon.com *.zencdn.net *.licdn.com *.company-target.com *.demandbase.com brightcove.hs.llnwd.net *.boldchat.com *.2mdn.net *.dartmotif.net *.doubleclick.com *.merrilledge.com *.digitas.com *.serving-sys.com *.mediamind.com *.corporate-ir.net *.imwx.com
font-src 'self' http: https: *.zencdn.net *.ml.com data:
script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com site.yandex.net yastatic.net yandex.com clck.yandex.ru ajax.googleapis.com
img-src 'self' data: site.yandex.net yastatic.net
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com yastatic.net maxcdn.bootstrapcdn.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com
"frame-ancestors 'self' https://login.bog.ge/ http://itry.ge https://itry.ge https://itry.bog.ge http://itry.bog.ge"
script-src 'self' 'unsafe-inline' 'unsafe-eval' optanon.blob.core.windows.net *.drinkaware.co.uk *.optimizely.com *.googletagmanager.com tagmanager.google.com *.jquery.com *.aspnetcdn.com *.bootstrapcdn.com *.cloudflare.com *.msecnd.net *.facebook.net *.twitter.com *.atmrum.net *.fonts.net *.google-analytics.com *.googleadservices.com *.cloudfront.net *.ads-twitter.com *.trackedweb.net *.doubleclick.net *.addthis.com *.addthisedge.com *.facebook.com *.pinterest.com *.linkedin.com *.outbrain.com *.adnxs.com e.issuu.com geolocation.onetrust.com *.youtube.com s.ytimg.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com assets.nhs.uk *.preview.antbits.com *.assets.adobedtm.com *.s.webtrends.com *.statse.webtrendslive.com ajax.googleapis.com cdn.cookielaw.org prf.audiencemanager.de
style-src 'self' 'unsafe-inline' *.blob.core.windows.net *.fonts.net *.googleapis.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.drinkaware.co.uk tagmanager.google.com cdn.cookielaw.org
img-src 'self' *.drinkaware.co.uk *.facebook.com *.googletagmanager.com *.google-analytics.com *.amazonaws.com *.doubleclick.net *.footprintdns.com *.google.com *.google.co.uk sm-wimd.azure-api.net *.outbrain.com data: http://t.co www.gravatar.com optanon.blob.core.windows.net drinkaware-corp-prod.azurewebsites.net drinkaware-corp-prod-stage.azurewebsites.net http://drinkaware-corp-prod-stage.azurewebsites.net http://drinkaware-corp-prod.azurewebsites.net *.gstatic.com *.itunes.apple.com cdn.cookielaw.org
frame-src 'self' *.twitter.com *.facebook.com *.atmrum.net *.addthis.com e.issuu.com *.youtube.com www.google.com drinkaware.serco.com assets.nhs.uk *.audiencemanager.de *.timeforstorm.com
font-src 'self' *.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com
connect-src 'self' www.facebook.com/tr/ stats.g.doubleclick.net *.visualstudio.com *.google-analytics.com *.trackedweb.net *.atmrum.net sm-wimd.azure-api.net addthis.com www.gravatar.com m.addthis.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://bellocollective.com:443 https://*.bellocollective.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.faceless.cc
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.faceless.cc
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.marchofdimes.com *.marchforbabies.org *.marchofdimes.org *.ywxi.net *.addthis.com *.addthisedge.com feed2js.org *.cloudfront.net script.crazyegg.com ajax.googleapis.com *.juicer.io api.usersnap.com *.optimizely.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.visualwebsiteoptimizer.com *.atdmt.com *.adsrvr.org *.youtube.com *.googleadservices.com *.cetrk.com *.rfihub.net *.gwallet.com *.godaddy.com *.amazonaws.com *.adroll.com doublethedonation.com *.braintreegateway.com *.payments-amazon.com *.paypalobjects.com *.paypal.com *.amazon.com *.ssl-images-amazon.com *.google.com *.bing.com *.mathtag.com *.acquireinsight.net code.highcharts.com *.jquery.com *.cloudflare.com *.rfihub.com *.formstack.com siteimproveanalytics.com cdn.usersnap.com maxcdn.bootstrapcdn.com *.pinimg.com *.amazonpay.com static.ads-twitter.com *.braintree-api.com
script-src 'self' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com
img-src 'self' data: https://www.google-analytics.com https://img.youtube.com
img-src 'self' *.google-analytics.com *.gravatar.com *.facebook.com screenshots.nomoreencore.com
script-src 'self' *.googletagmanager.com *.google-analytics.com 'sha256-v7b5pdsgeuaa8xkd6idvngtmion9v+6o0h1fz0rlfam=' *.facebook.net 'sha256-p70ionn7lzr0v1pnyuiwox+9ojzqbc7zgp+eujcwzse=' 'sha256-pjpfkuw4lcwwr0e2/abrzckruktajdw5wmg7psjfxls='
"default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'"
script-src 'sha256-eieum0reatwcvg/x4mn4nlqrafh9xx+4akahy7uncpa=' 'self' 'sha256-x3zm8sme34uv9lglknh69un/vkuo+blzt0e7mn1runq=' 'sha256-2xbjy9xhkmthpdhrq5dplvz7ekowxmla4wyumb1jyfy=' www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.google.com www.gstatic.com www.gstatic.cn googleads.g.doubleclick.net cdn.mouseflow.com ajax.googleapis.com js.intercomcdn.com connect.facebook.net player.vimeo.com use.typekit.net *.intercom.io
frame-src www.google.com player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.like.co like.co
connect-src 'self' data: * wss://*.intercom.io
img-src 'self' https://www.google-analytics.com/ https://www.paypalobjects.com/ https://stats.g.doubleclick.net/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagservices.com http://ajax.aspnetcdn.com https://m.addthis.com https://m.addthisedge.com https://s7.addthis.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.co.in https://adservice.google.co.in https://securepubads.g.doubleclick.net *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com
img-src 'self' https://taxation.co.uk http://taxation.co.uk http://taxation.azurewebsites.net https://taxation.azurewebsites.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com/ http://www.google.com https://stats.g.doubleclick.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com
font-src 'self' https://cdnjs.cloudflare.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:
connect-src 'self' https://prefserviceqa.smartwebportal.co.uk https://prefservice.smartwebportal.co.uk accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://ln-sf-prod.search.windows.net
child-src 'self' https://s7.addthis.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' https://stats.g.doubleclick.net https://*.mapy.cz http://*.mapy.cz https://cdnjs.cloudflare.com http://www.bing.com https://ssl.gstatic.com http://plus.google.com http://www.domaintools.com http://fbstatic-a.akamaihd.net http://web.archive.org http://www.alexa.com http://bing.com http://www.semrush.com http://www.google.com http://www.google-analytics.com https://*.google-analytics.com https://fonts.googleapis.com https://*.google.com https://fonts.gstatic.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://mts0.googleapis.com https://mts1.googleapis.com https://maps.googleapis.com"
script-src 'unsafe-eval' 'unsafe-inline' 'self' https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googleapis.com *.bootstrapcdn.com *.google.com *.google-analytics.com *.cloudflare.com https://connect.facebook.net connect.facebook.net *.facebook.com *.khaosat.me https://www.youtube.com *.youtube.com https://s.ytimg.com *.ytimg.com https://www.googletagmanager.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.cloudflare.com *.khaosat.me
font-src 'self' *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.cloudflare.com *.khaosat.me
frame-src https://staticxx.facebook.com https://www.facebook.com *.facebook.com https://www.youtube.com *.youtube.com https://khaosat.me *.khaosat.me khaosat.me localhost:3000 *.google.com https://connect.facebook.net
sandbox allow-forms allow-scripts allow-same-origin allow-popups
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com http://cdnjs.cloudflare.com
"child-src 'self' www.google.com player.vimeo.com s7.addthis.com www.youtube.com *.webspellchecker.net
script-src 'unsafe-inline' 'unsafe-eval' 'self' static.hotjar.com maps.google.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com
frame-src 'self' player.vimeo.com www.google.com s7.addthis.com www.youtube.com"
script-src 'self' 'unsafe-inline' 'sha256-iwfv1p87594ascx/pqk1+awzryykkpt6nkg06l6nxae=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' 127.0.0.1 https://*.googleapis.com https://*.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' 127.0.0.1:* http://localhost:* http://*.vo.msecnd.net https://*.vo.msecnd.net https://*.google.com https://*.gstatic.com https://cdnjs.cloudflare.com https://kendo.cdn.telerik.com
img-src 'self' https: data: blob: https://mastodon.technology
media-src 'self' https: data: https://mastodon.technology
connect-src 'self' blob: https://mastodon.technology wss://mastodon.technology
"default-src 'self' *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.cloudfront.net *.amazonaws.com *.fg.cz *.local
font-src 'self' data: fonts.gstatic.com *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.cloudfront.net *.amazonaws.com *.mailchimp.com *.fg.cz *.local *.toyota-domansky.cz *.toyotatrutnov.cz *.hsautomobil.cz toyota.autoeder.cz toyota.autobond.cz *.toyota-emilfrey.cz *.toyotatsusho.cz *.liberec-toyota.cz *.toyota-louwman.cz *.t-motor.cz *.toyotabrno.cz *.toyotatarget.sk *.toyota-poprad.sk *.toyotatrencin.sk *.toyota-bratislava.sk *.toyota-kosice.sk *.vvauto.sk toyota.pkauto.eu *.toyota-zilina.sk *.toyota-trnava.sk *.toyotanitra.sk *.ppcteam.sk *.toyotabb.sk *.toyotadolak.eu *.toyotafinance.cz *.toyotafinance.sk
connect-src 'self' analytics.monkeytracker.cz *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.test.toyota-ce.com *.cloudfront.net *.amazonaws.com *.herokuapp.com *.fg.cz *.justuno.com *.hotjar.com *.mailchimp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com *.googleadservices.com *.youtube.com s.ytimg.com analytics.monkeytracker.cz www.google.com *.doubleclick.net *.facebook.net tagmanager.google.com *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.cloudfront.net *.amazonaws.com *.imedia.cz *.justuno.com *.hotjar.com *.mailchimp.com *.list-manage.com *.fg.cz *.toyota-domansky.cz *.toyotatrutnov.cz *.hsautomobil.cz toyota.autoeder.cz toyota.autobond.cz *.toyota-emilfrey.cz *.toyotatsusho.cz *.liberec-toyota.cz *.toyota-louwman.cz *.t-motor.cz *.toyotabrno.cz *.toyotatarget.sk *.toyota-poprad.sk *.toyotatrencin.sk *.toyota-bratislava.sk *.toyota-kosice.sk *.vvauto.sk toyota.pkauto.eu *.toyota-zilina.sk *.toyota-trnava.sk *.toyotanitra.sk *.ppcteam.sk *.toyotabb.sk *.toyotadolak.eu *.toyotafinance.cz *.toyotafinance.sk
form-action 'self' *.facebook.com *.fg.cz *.local
frame-src 'self' www.youtube.com *.facebook.com www.googletagmanager.com *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.tipcars.com *.fg.cz *.local *.suzuki-emilfrey.cz c.imedia.cz *.hotjar.com
child-src 'self' www.youtube.com *.facebook.com www.googletagmanager.com *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.tipcars.com *.fg.cz *.local *.suzuki-emilfrey.cz c.imedia.cz *.hotjar.com
img-src 'self' data: *.gstatic.com *.google.com *.google.cz *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com *.googleadservices.com analytics.monkeytracker.cz *.doubleclick.net *.justuno.com tagmanager.google.com *.facebook.com *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.cloudfront.net *.amazonaws.com *.imedia.cz *.mailchimp.com *.fg.cz *.local *.toyota-domansky.cz *.toyotatrutnov.cz *.hsautomobil.cz toyota.autoeder.cz toyota.autobond.cz *.toyota-emilfrey.cz *.toyotatsusho.cz *.liberec-toyota.cz *.toyota-louwman.cz *.t-motor.cz *.toyotabrno.cz *.toyotatarget.sk *.toyota-poprad.sk *.toyotatrencin.sk *.toyota-bratislava.sk *.toyota-kosice.sk *.vvauto.sk toyota.pkauto.eu *.toyota-zilina.sk *.toyota-trnava.sk *.toyotanitra.sk *.ppcteam.sk *.toyotabb.sk *.toyotadolak.eu *.toyotafinance.cz *.toyotafinance.sk
style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com analytics.monkeytracker.cz *.toyota-europe.com *.toyota.cz *.toyota.sk *.toyota.pl *.cloudfront.net *.amazonaws.com *.justuno.com *.mailchimp.com *.fg.cz *.local *.toyota-domansky.cz *.toyotatrutnov.cz *.hsautomobil.cz toyota.autoeder.cz toyota.autobond.cz *.toyota-emilfrey.cz *.toyotatsusho.cz *.liberec-toyota.cz *.toyota-louwman.cz *.t-motor.cz *.toyotabrno.cz *.toyotatarget.sk *.toyota-poprad.sk *.toyotatrencin.sk *.toyota-bratislava.sk *.toyota-kosice.sk *.vvauto.sk toyota.pkauto.eu *.toyota-zilina.sk *.toyota-trnava.sk *.toyotanitra.sk *.ppcteam.sk *.toyotabb.sk *.toyotadolak.eu *.toyotafinance.cz *.toyotafinance.sk
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://cdn.segment.com https://js.intercomcdn.com https://widget.intercom.io
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://tagmanager.google.com/
img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://stats.g.doubleclick.net https://www.google-analytics.com https://stats/g/doubleclick.net https://cdn-images-1.medium.com https://static.intercomassets.com https://js.intercomcdn.com https://ssl.gstatic.com/ https://www.gstatic.com
font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com https://use.typekit.net https://p.typekit.net https://js.intercomcdn.com
connect-src 'self' https://api.rss2json.com https://api.segment.io https://js.intercomcdn.com https://api-iam.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io https://tagmanager.google.com
"frame-ancestors 'self' *.chemistwarehouse.com.au *.epharmacy.com.au *.mychemist.com.au htmlbuilder.com.au *.htmlbuilder.com.au"
script-src 'self' https://www.recaptcha.net/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/
script-src 'self' 'unsafe-inline' 'unsafe-eval' bitmovin-a.akamaihd.net https://cdnjs.cloudflare.com/ajax/libs/rollbar.js/ https://www.google-analytics.com/analytics.js maps.googleapis.com *.gstatic.com
style-src 'self' 'unsafe-inline' bitmovin-a.akamaihd.net *.typekit.net https://fonts.googleapis.com/css
connect-src 'self' *.mediapeers.biz licensing.bitmovin.com api.rollbar.com bitdash-reporting.appspot.com *.licensekeyserver.com www.google-analytics.com
font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net
img-src 'self' data: blob: thumbor.mediapeers.biz *.s3.amazonaws.com *.s3-accelerate.amazonaws.com www.google-analytics.com maps.gstatic.com maps.googleapis.com
media-src 'self' blob: *.vod.mediapeers.biz *.s3.amazonaws.com *.s3-accelerate.amazonaws.com
"default-src https://www.motortax.ie/omt/ https://www.motarchain.ie/omt/ https://www.motarchain.ie/omt/css/bootstrap.min.css https://www.motarchain.ie/omt/css/ie10-viewport-bug-workaround.css 'unsafe-inline'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com tagmanager.google.com connect.facebook.net platform.twitter.com  *.facebook.com www.google-analytics.com *.st-hatena.com *.instagram.com *.cloudflare.com *.youtube.com *.googleapis.com *.mieru-ca.com loka-cdn.akamaized.net *.lokaplatform.com"
"connect-src https://7gogo.jp https://contents.7gogo.jp https://stat.7gogo.jp https://moviestat.7gogo.jp https://api.7gogo.jp https://movie.7gogo.jp https://ogcdn.7gogo.jp wss://sck.7gogo.jp"
"default-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://catapult.org.uk
font-src data: http://catapult.org.uk https://catapult.org.uk http://fonts.gstatic.com https://fonts.gstatic.com
frame-src https://satappscatapult.wufoo.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com
child-src https://satappscatapult.wufoo.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com
img-src data: http://catapult.org.uk https://catapult.org.uk https://ct.catapult.org.uk https://es.catapult.org.uk https://hvm.catapult.org.uk https://i.ytimg.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://images.ctfassets.net https://md.catapult.org.uk https://media.sa.catapult.org.uk https://ore.catapult.org.uk https://s.w.org http://s3-eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://sa.catapult.org.uk https://stats.g.doubleclick.net https://ts.catapult.org.uk https://warwick.ac.uk https://www.catapult.org.uk http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com
script-src 'unsafe-eval' 'unsafe-inline' http://catapult.org.uk https://catapult.org.uk https://secure.wufoo.com https://wufoo.com http://www.google-analytics.com https://www.google-analytics.com https://www.google.com http://www.googletagmanager.com https://www.googletagmanager.com https://www.gstatic.com https://www.wufoo.com
style-src 'unsafe-inline' http://ajax.googleapis.com https://ajax.googleapis.com http://catapult.org.uk https://catapult.org.uk http://fonts.googleapis.com https://fonts.googleapis.com/css
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *
"default-src 'self' ajax.googleapis.com www.google.com google-analytics.com www.gstatic.com 'unsafe-inline' ssl.google-analytics.com stats.g.doubleclick.net"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com maps.googleapis.com *.piwikpro.com *.newrelic.com https://www.gstatic.com https://www.google.com/recaptcha/api.js https://www.youtube.com/iframe_api *.bam.nr-data.net https://bam.nr-data.net https://csi.gstatic.com https://az416426.vo.msecnd.net https://s.ytimg.com https://ajax.aspnetcdn.com/ajax/jquery/jquery-2.1.1.min.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.13.1/jquery.validate.min.js https://ajax.aspnetcdn.com/ajax/mvc/5.1/jquery.validate.unobtrusive.min.js http://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.js
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://*.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://sentry.valhalla.pw https://*.yandex.ru https://*.yandex.net https://yastatic.net"
script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.jquery.com *.adroll.com *.facebook.net *.ads-twitter.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' badgr.io *.badgr.io badgr.ws *.badgr.ws www.google-analytics.com www.googletagmanager.com data:"
"script-src 'self' 'unsafe-inline' data: https://ssl.google-analytics.com"
form-action 'self' https://www.gov.uk/ https://vehicletax.service.gov.uk/ https://sorn.service.gov.uk/
style-src fonts.googleapis.com optimize.google.com s.yimg.com 'self' sp.analytics.yahoo.com tagmanager.google.com ton.twimg.com *.twitter.com 'unsafe-inline' widget.alongside.com ws1.postescanada-canadapost.ca
form-action *.alc.ca s.yimg.com 'self' sp.analytics.yahoo.com tr.snapchat.com *.twitter.com www.facebook.com
script-src *.google-analytics.com *.alc.ca c1.rfihub.net *.cloudfront.net connect.facebook.net *.doubleclick.net *.finrings.com *.g2-networks.com *.game-mode.net *.gracenote.com *.igodigital.com *.mkodo.com *.mkodo.net optimize.google.com r.turn.com *.rfihub.com rules.quantcount.com s.yimg.com sc-static.net secure.adnxs.com secure.quantserve.com 'self' *.serving-sys.com sp.analytics.yahoo.com tagmanager.google.com *.twimg.com *.twitter.com 'unsafe-eval' 'unsafe-inline' widget.alongside.com ws1.postescanada-canadapost.ca www.google-analytics.com www.googletagmanager.com
connect-src api.ipify.org *.doubleclick.net *.game-mode.net *.google-analytics.com *.mkodo.com *.mkodo.net s.yimg.com 'self' sp.analytics.yahoo.com ws1.postescanada-canadapost.ca
frame-src *.adobe.com *.alc.ca blob: *.doubleclick.net *.finrings.com *.g2-networks.com *.gracenote.com optimize.google.com *.rfihub.com 'self' sp.analytics.yahoo.com *.twitter.com www.facebook.com *.youtube.com tr.snapchat.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.artik.cloud https://static.zdassets.com/ https://info.artik.io/cdnr/25/acton/bn/tracker/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ https://ajax.googleapis.com/ https://v2.zopim.com/ https://connect.facebook.net/ https://assets.zendesk.com/embeddable_framework/ https://cdn.polyfill.io/v2/polyfill.min.js https://unpkg.com/react-intl@2.3.0/locale-data/en.js https://js.stripe.com/v2/ https://api.taxamo.com/js/v1/ https://trackcmp.net/visit https://static.ads-twitter.com/uwt.js https://analytics.twitter.com/i/adsct https://snap.licdn.com/li.lms-analytics/insight.min.js https://*.ads.linkedin.com/collect/ https://www.bizographics.com/collect/ https://www.linkedin.com/csp/ https://secure.adnxs.com/ https://cdn.optimizely.com/js/8278010835.js https://tagmanager.google.com/ https://ssl.gstatic.com/ https://www.googleadservices.com/ https://t.co/i/adsct https://imp2.ads.linkedin.com/l http://cdn.mouseflow.com/ https://n2.mouseflow.com/ https://info.artik.io/acton/bn/32353 https://api.swiftype.com/api/v1/public/ https://code.jquery.com/
frame-src *.artik.cloud https://www.google.com/recaptcha/ https://js.stripe.com/ https://api.taxamo.com/ https://www.youtube.com/
style-src 'self' 'unsafe-inline' *.artik.cloud https://fonts.googleapis.com https://tagmanager.google.com
font-src 'self' data: *.artik.cloud https://fonts.gstatic.com https://v2.zopim.com/widget/fonts/
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://ton.twimg.com https://platform.twitter.com https://fonts.googleapis.com https://fonts.gstatic.com http://ajax.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://plus.google.com http://www.facebook.com http://twitter.com https://www.youtube.com https://ssl.google-analytics.com http://cdnjs.cloudflare.com http://code.jquery.com https://cdn.plyr.io https://cdn.selz.com https://s.ytimg.com https://player.vimeo.com https://vimeo.com http://i.ytimg.com https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com
img-src 'self' data: https://www.mincotur.gob.es http://www.mincotur.gob.es  https://cdn.syndication.twimg.com https://syndication.twitter.com http://www.google-analytics.com https://www.google-analytics.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com http://i.ytimg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://fonts.googleapis.com https://fonts.gstatic.com http://ajax.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://plus.google.com http://www.facebook.com http://twitter.com https://www.youtube.com https://ssl.google-analytics.com http://cdnjs.cloudflare.com http://code.jquery.com https://cdn.syndication.twimg.com https://platform.twitter.com
frame-src 'self' https://syndication.twitter.com https://platform.twitter.com http://maps.google.com https://www.google.com https://maps.google.com https://www.youtube.com
"script-src 'strict-dynamic' 'nonce-ye8wu+mrkponhwymoholig==' 'unsafe-inline' 'unsafe-eval' https: http:
img-src https://spending.gov.ua https://spending.gov.ua https://www.google-analytics.com https://stats.g.doubleclick.net data:
script-src 'self' https://spending.gov.ua https://www.google-analytics.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https//spending.gov.ua https://fonts.googleapis.com 'unsafe-inline'
connect-src 'self' *.mil.ru *.gcdn.co *.mail.ru top100.ru mc.yandex.ru *.anycaster.tv *.vintera.tv *.cdnvideo.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mil.ru *.rambler.ru *.yandex.ru *.mail.ru *.google-analytics.com *.google.com top100.ru *.top100.ru *.tvzvezda.ru tvzvezda.ru *.mail.ru tns-counter.ru *.tns-counter.ru *.googletagmanager.com mil.ru *.mil.ru *.xn--90anlfbebar6i.xn--p1ai
img-src 'self' mil.ru *.mil.ru hotlog.ru *.hotlog.ru digitaltarget.ru *.digitaltarget.ru doubleclick.net *.doubleclick.net tns-counter.ru *.tns-counter.ru *.google.com google.com data: counter.yadro.ru *.yandex.net *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru
frame-src 'self' mil.ru *.mil.ru vk.com *.vk.com ok.ru *.ok.ru tvzvezda.ru *.tvzvezda.ru *.yandex.ru *.yandex.net *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtube.com *.youtu.be *.google.com
default-src 'self' scontent.xx.fbcdn.net csi.gstatic.com secure.gravatar.com maps.gstatic.com platform-api.sharethis.com maps.google.com cloudflare.com maps.googleapis.com graph.facebook.com fb-s-d-a.akamaihd.net www.google-analytics.com count-server.sharethis.com l.sharethis.com/log s3.amazonaws.com/sharethis-socialab-prod/
script-src 'self' 'unsafe-inline' 'unsafe-eval' scontent.xx.fbcdn.net platform-api.sharethis.com buttons-config.sharethis.com l.sharethis.com googleapis.com cdnjs.cloudflare.com https://www.google.com/recaptcha/api.js count-server.sharethis.com graph.facebook.com maps.google.com maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ www.google-analytics.com
style-src 'self' 'unsafe-inline' platform-api.sharethis.com buttons-config.sharethis.com l.sharethis.com fonts.googleapis.com cloudflare.com
"default-src * blob: data: 'unsafe-inline' 'unsafe-eval'
script-src * blob: data: 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com static.hotjar.com snap.licdn.com px.ads.linkedin.com script.hotjar.com"
"script-src 'strict-dynamic' 'nonce-pgemj9isza/okdlhx7vswa==' 'unsafe-inline' 'unsafe-eval' https: http:
script-src 'self' 'nonce-1f19c36a-fddc-4e8c-836d-87766e07f2d6' 'unsafe-inline' https://www.google.com/ https://www.google.com/recaptcha/api.js cdn.polyfill.io connect.facebook.net/en_us/sdk.js graph.facebook.com apis.google.com https://www.google-analytics.com/analytics.js
script-src 'self' www.google-analytics.com https://js.driftt.com 'nonce-mtkyzgu0mzutyme4os00ymzkltllntytmtg3m2e4mgfmngvm' 'unsafe-inline' https://web.autumcdn.com
"frame-ancestors 'self' https://*.backstreetmerch.com https://*.livenationmerch.com https://www.joestrummer.com https://eustore.rogerwaters.com https://www.trailerparkboysmerch.com https://store.niallhoran.com https://shop.thebodycoach.com https://merchandise.footballmanager.com https://shop.little-mix.com https://shop.shanefilan.com https://merch.bulletformyvalentine.com https://merch.raksu-official.com https://eustore.aperfectcircle.com"
"default-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com liberapay.com data:"
"frame-ancestors 'self' https://www.jobs.ch *.cler.ch *.mycler.ch
frame-src 'self'  'unsafe-inline' *.cler.ch *.mycler.ch https://irs.tools.investis.com *.youtube.com https://insight.adsrvr.org *.doubleclick.net *.google.com *.google.ch https://sitecatalyst.omniture.com https://authorize.omniture.com https://sc3.omniture.com *.swissmusicawards.ch https://match.adsrvr.org  https://api.raisenow.com/ https://payment.datatrans.biz/ https://acs1.viseca.ch/ https://epayment.postfinance.ch/ https://edge.capturemedia.network
script-src 'self' 'unsafe-inline' 'unsafe-eval'  www.gstatic.com https://apis.google.com https://www.google.com pagead2.googlesyndication.com www.google-analytics.com www.google-analytics.com *.googletagservices.com *.googleadservices.com *.googleapis.com www.google.com ssl.gstatic.com *.doubleclick.net https://securepubads.g.doubleclick.net http://publisherconsole.appspot.com *.gstatic.com https://graph.facebook.com *.facebook.net https://vk.com https://login.vk.com https://cdn.api.twitter.com yandex.st share.yandex.ru https://mc.yandex.ru https://api.flickr.com
object-src 'self'  http://www.gstatic.com pagead2.googlesyndication.com http://tpc.googlesyndication.com https://tpc.googlesyndication.com *.cdn.yandex.net
frame-src 'self'  https://content.googleapis.com https://accounts.google.com googleads.g.doubleclick.net cm.g.doubleclick.net *.googlesyndication.com www.google.com www.youtube.com https://www.youtube.com http://publisherconsole.appspot.com http://tpc.googlesyndication.com https://cm.g.doubleclick.net *.facebook.com https://www.facebook.com https://s-static.ak.facebook.com vk.com login.vk.com
connect-src 'self'  *.gstatic.com www.youtube.com https://mc.yandex.ru mc.yandex.ru *.cdn.yandex.net
"script-src 'unsafe-inline' 'self' fonts.googleapis.com www.google.com www.gstatic.com recaptcha.msgapp.com cdn.ampproject.org www.google-analytics.com client-analytics.braintreegateway.com api.braintreegateway.com client-analytics.sandbox.braintreegateway.com api.sandbox.braintreegateway.com js.braintreegateway.com marketing.suzohapp.com stats.g.doubleclick.net maps.googleapis.com maps.google.com ajax.googleapis.com mts1.googleapis.com"
"default-src 'self' cdn.dreamhack.com id.dreamhack.com dreamhackcdn.com
script-src 'nonce-154899042308200' 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' cdn.dreamhack.com id.dreamhack.com dreamhackcdn.com www.google-analytics.com connect.facebook.net https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com
style-src 'self' 'unsafe-inline' blob: cdn.dreamhack.com dreamhackcdn.com fonts.googleapis.com pro.fontawesome.com 'unsafe-inline'
font-src 'self' data: cdn.dreamhack.com dreamhackcdn.com fonts.googleapis.com fonts.gstatic.com pro.fontawesome.com https://js.intercomcdn.com
img-src 'self' data: android-webview-video-poster: cdn.dreamhack.com dreamhackcdn.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com company.dreamhack.com winter.dreamhack.com www.gravatar.com data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com
media-src 'self' cdn.dreamhack.com dreamhackcdn.com ssl.gstatic.com company.dreamhack.com winter.dreamhack.com https://js.intercomcdn.com
child-src * https://share.intercom.io https://intercom-sheets.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net
connect-src 'self' api.dreamhack.com id.dreamhack.com dreamhackapi.com sentry.io docs.google.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com
"default-src data: filesystem: blob: 'self' 'unsafe-inline' 'unsafe-eval' https://*.azureedge.net https://specialconventiondev.blob.core.windows.net https://*.jw-api.org https://code-a.akamaihd.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://ipinfo.io https://cdnjs.cloudflare.com https://az416426.vo.msecnd.net https://dc.services.visualstudio.com http://*.azureedge.net
"*.yandex.ru *.google.com *.google-analytics.com *.gstatic.com *.vk.com *.doubleclick.net *.bitrix.info *.bitrix24.ru *.cnetcontent.com"
"default-src self data: 'self' blob: node.ruvita.ru:3000 wss://node.ruvita.ru:3000 node.ruvita.ru:9000 wss://node.ruvita.ru:9000 83xn3b3api.execute-api.eu-central-1.amazonaws.com ruvitaassets.s3.eu-central-1.amazonaws.com *.maps.yandex.net ruvita.ru *.ruvita.ru www.google.com vk.com pp.vk.me *.gstatic.com connect.ok.ru www.facebook.com www.google-analytics.com mc.yandex.ru api-maps.yandex.ru stats.g.doubleclick.net cdn.bitrix24.ru ruv.bitrix24.ru bitrix.info bitrix2.cdnvideo.ru *.youtube.com yandex.ru
script-src self ruvita.ru *.ruvita.ru cdnjs.cloudflare.com www.google.com vk.com pp.vk.me *.gstatic.com connect.ok.ru www.facebook.com www.google-analytics.com mc.yandex.ru api-maps.yandex.ru suggest-maps.yandex.ru stats.g.doubleclick.net cdn.bitrix24.ru bitrix.info kladr-api.ru ruvitaassets.s3.eu-central-1.amazonaws.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' www.5xxx.org 5xxx.org http://img.5xxx.org megabc.info https://fex.net *.fex.net https://n161adserv.com http://mpay3.info http://redirect.mpay69.info http://mpay69.com http://mpay69.biz *.xcvgdf.party *.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com yandex.st an.yandex.ru *.google.com pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com https://accounts.google.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' http://www.5xxx.org http://5xxx.org data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com"
img-src 'self' slimim.com *.yandex.ru *.yandex.fr *.yandex.ua *.yandex.com.tr *.webvisor.org mc.webvisor.org *.yadro.ru *.ytimg.com http://*.ytimg.com *.googlesyndication.com *.mds.yandex.net *.yandex.net *.mail.ru *.gstatic.com *.yandex.com.am data:
child-src https://*.google.com/ https://*.asstr.org http://*.nifty.org https://www.google.com
img-src https://*.asstr.org http://*.nifty.org https://*.asstr.net https://*.creativecommons.org https://*.statcounter.com/ https://*.google-analytics.com https://*.google.com
script-src https://cdn.jsdelivr.net/ https://*.tawk.to/ https://*.bootstrapcdn.com/ https://*.statcounter.com/ https://*.asstr.org http://*.nifty.org https://*.asstr.net https://*.creativecommons.org https://*.googleapis.com/ https://*.google-analytics.com https://*.google.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' http omronhealthcare.la  https www.google-analytics.com https stats.g.doubleclick.net https *.smartsupp.co https *.facebook.com https *.twitter.com https *.gstatic.com https: *.googleapis.com
style-src 'self' 'unsafe-inline' https smartsupp-widget-161959.c.cdn77.org https: *.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: maps.googleapis.com https: *.googletagmanager.com https: *.doubleclick.net https: *.smartsuppchat.com
frame-src 'self' https: youtube.com *.smartsuppchat.com
connect-src 'self'  https: wss: *.smartsupp.com
"script-src 'self' 'unsafe-inline' https://www.googletagservices.com https://www.google.com https://www.gstatic.com https://verify.authorize.net https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://seal.starfieldtech.com https://secure.quantserve.com https://edge.quantserve.com https://rules.quantcount.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' d.impactradius-event.com js.stripe.com cdn.b0e8.com maps.google.com maps.googleapis.com tagmanager.google.com https://tagmanager.google.com/debug resources.xg4ken.com services.xg4ken.com connect.facebook.net https://connect.facebook.net https://connect.facebook.com bat.bing.com cdn.trialfire.com app.trialfire.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com yimg.com s.yimg.com www.optimizely.com cdn.optimizely.com googleads.g.doubleclick.net sp.analytics.yahoo.com cdn3.optimizely.com cdnjs.cloudflare.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://tokeneconomy.co:443 https://*.tokeneconomy.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.gstatic.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cm.g.doubleclick.net https://ssl.google-analytics.com https://www.google-analytics.com https://static.doubleclick.net https://twitter.com https://analytics.twitter.com https://js.intercomcdn.com https://connect.facebook.net https://www.google.com https://www.googletagmanager.com https://widget.intercom.io https://www.youtube.com https://s.ytimg.com
img-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://google-analytics.com https://ad.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://www.google.com https://static.intercomassets.com https://intercom.help https://js.intercomcdn.com https://static.doubleclick.net https://googleads.g.doubleclick.net https://connect.facebook.net https://stats.g.doubleclick.net https://platform.twitter.com https://www.youtube.com
style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com https://use.fontawesome.com https://www.youtube.com
font-src 'self' data: https://fonts.googleapis.com https://twitter.com https://fonts.gstatic.com https://js.intercomcdn.com https://use.fontawesome.com
frame-src 'self' https://www.google.com https://intercom-sheets.com https://platform.twitter.com https://upload.twitter.com https://s-static.ak.facebook.com https://staticxx.facebook.com https://connect.facebook.net https://www.facebook.com https://twitter.com https://player.vimeo.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.youtube.com
"default-src 'self' http://*.s3.amazonaws.com https://*.s3.amazonaws.com http://s3.amazonaws.com https://s3.amazonaws.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://*.fontawesome.com https://*.fontawesome.com http://*.elb.amazonaws.com https://*.elb.amazonaws.com http://dcaz3d51ftzmw.cloudfront.net https://dcaz3d51ftzmw.cloudfront.net http://*.youtube.com https://*.youtube.com http://scontent-ord1-1.xx.fbcdn.net https://scontent-ord1-1.xx.fbcdn.net http://*.udisclive.com https://*.udisclive.com http://udisclive.com https://udisclive.com data:
script-src 'self' 'unsafe-inline' http://*.s3.amazonaws.com https://*.s3.amazonaws.com http://s3.amazonaws.com https://s3.amazonaws.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://*.fontawesome.com https://*.fontawesome.com http://*.elb.amazonaws.com https://*.elb.amazonaws.com http://dcaz3d51ftzmw.cloudfront.net https://dcaz3d51ftzmw.cloudfront.net http://*.youtube.com https://*.youtube.com http://scontent-ord1-1.xx.fbcdn.net https://scontent-ord1-1.xx.fbcdn.net http://*.udisclive.com https://*.udisclive.com http://udisclive.com https://udisclive.com data: 'unsafe-eval'
connect-src * 'self' http://*.s3.amazonaws.com https://*.s3.amazonaws.com http://s3.amazonaws.com https://s3.amazonaws.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://*.fontawesome.com https://*.fontawesome.com http://*.elb.amazonaws.com https://*.elb.amazonaws.com http://dcaz3d51ftzmw.cloudfront.net https://dcaz3d51ftzmw.cloudfront.net http://*.youtube.com https://*.youtube.com http://scontent-ord1-1.xx.fbcdn.net https://scontent-ord1-1.xx.fbcdn.net http://*.udisclive.com https://*.udisclive.com http://udisclive.com https://udisclive.com data:
img-src data: 'self' http://*.s3.amazonaws.com https://*.s3.amazonaws.com http://s3.amazonaws.com https://s3.amazonaws.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://*.fontawesome.com https://*.fontawesome.com http://*.elb.amazonaws.com https://*.elb.amazonaws.com http://dcaz3d51ftzmw.cloudfront.net https://dcaz3d51ftzmw.cloudfront.net http://d9ijal99tw9xh.cloudfront.net https://d9ijal99tw9xh.cloudfront.net http://*.youtube.com https://*.youtube.com http://scontent-ord1-1.xx.fbcdn.net https://scontent-ord1-1.xx.fbcdn.net http://*.udisclive.com https://*.udisclive.com http://udisclive.com https://udisclive.com
style-src 'self' 'unsafe-inline' http://*.s3.amazonaws.com https://*.s3.amazonaws.com http://s3.amazonaws.com https://s3.amazonaws.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.google-analytics.com https://*.google-analytics.com http://*.fontawesome.com https://*.fontawesome.com http://*.elb.amazonaws.com https://*.elb.amazonaws.com http://dcaz3d51ftzmw.cloudfront.net https://dcaz3d51ftzmw.cloudfront.net http://*.youtube.com https://*.youtube.com http://scontent-ord1-1.xx.fbcdn.net https://scontent-ord1-1.xx.fbcdn.net http://*.udisclive.com https://*.udisclive.com http://udisclive.com https://udisclive.com data:
img-src 'self' data: https://www.mazda.com.co http://www.mazda.com.co https://www.google.com 'unsafe-eval' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com
frame-src 'self' https://cdn-akamai.mookie1.com https://tags.tiqcdn.com https://mazda.com.co https://www.mazda.com.co http://www.mazda.com.co https://mazdaapps.co https://www.youtube.com
script-src 'unsafe-inline' https://www.mazdaapps.co www.mazda.com.co 'unsafe-eval' www.googletagmanager.com http://platform.twitter.com https://analytics.twitter.com https://connect.facebook.net http://www.google-analytics.com https://b3.mookie1.com cdn.syndication.twimg.com https://b3.mookie1.com code.jquery.com https://cdn-akamai.mookie1.com https://www.google-analytics.com https://connect.facebook.net https://platform.twitter.com https://tags.tiqcdn.com https://static.ads-twitter.com
child-src 'self' www.mazda.com.co 'unsafe-inline' https://tags.tiqcdn.com"
"https://www.pchf.in https://ajax.googleapis.com www.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net
"default-src 'self' script-src 'self' style-srci 'self' *.csio.res.in https: 'unsafe-inline'"
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thesprucecrafts.com *.qa.aws.thesprucecrafts.com atlas.thesprucecrafts.com atlas.local.thesprucecrafts.com"
"frame-src blob: https://runbox.com https://www.google.com https://www.gstatic.com https://js.stripe.com
script-src https://runbox.com https://support.runbox.com/ https://www.google.com/ https://www.gstatic.com https://js.stripe.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
img-src 'self' https: data: blob: https://fandom.ink
media-src 'self' https: data: https://fandom.ink
connect-src 'self' blob: https://fandom.ink wss://fandom.ink
style-src fonts.googleapis.com widget.alongside.com 'unsafe-inline' 'self' tagmanager.google.com *.twitter.com ton.twimg.com optimize.google.com ws1.postescanada-canadapost.ca sp.analytics.yahoo.com s.yimg.com
form-action s.yimg.com *.twitter.com sp.analytics.yahoo.com tr.snapchat.com *.alc.ca www.facebook.com 'self'
script-src rules.quantcount.com 'unsafe-inline' *.twitter.com *.game-mode.net *.rfihub.com www.googletagmanager.com *.cloudfront.net *.twimg.com *.mkodo.com secure.quantserve.com optimize.google.com sc-static.net *.finrings.com 'self' www.google-analytics.com tagmanager.google.com s.yimg.com ws1.postescanada-canadapost.ca *.alc.ca *.g2-networks.com *.serving-sys.com *.gracenote.com c1.rfihub.net secure.adnxs.com *.igodigital.com *.doubleclick.net *.mkodo.net sp.analytics.yahoo.com connect.facebook.net *.google-analytics.com r.turn.com 'unsafe-eval' widget.alongside.com
connect-src 'self' *.mkodo.com *.doubleclick.net sp.analytics.yahoo.com *.game-mode.net s.yimg.com api.ipify.org *.mkodo.net ws1.postescanada-canadapost.ca *.google-analytics.com
frame-src *.alc.ca *.doubleclick.net optimize.google.com *.twitter.com blob: *.finrings.com 'self' *.youtube.com *.adobe.com *.g2-networks.com *.gracenote.com *.rfihub.com www.facebook.com sp.analytics.yahoo.com tr.snapchat.com
"connect-src 'self' https://*.powerreviews.com https://cdn.decibelinsight.net wss://cdn.decibelinsight.net *.mercuryinsurance.com https://service.maxymiser.net https://bs.serving-sys.com https://tags.bkrtx.com https://developers.google.com https://*.gomoxie.solutions https://api.surveymonkey.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' files.gpxpl.us pagead2.googlesyndication.com https://pagead2.googlesyndication.com www.google-analytics.com www.gstatic.com gpxplus.s3-website-us-west-2.amazonaws.com https://gpxplus.s3.amazonaws.com https://apis.google.com platform.twitter.com https://platform.twitter.com static.gpx.plus https://static.gpx.plus ap.lijit.com *"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com ajax.googleapis.com *.google.com *.googletagmanager.com https://maps.googleapis.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net/"
"default-src 'self' *.youtube.com *.google.com *.b-ite.de *.b-ite.com
script-src 'self' https://www.gstatic.com/ https://supsystic-42d7.kxcdn.com/ https://maps.googleapis.com *.b-ite.de *.b-ite.com *.netzlink.com *.bootstrapcdn.com *.jquery.com *.powr.io/powr.js 'unsafe-inline' 'unsafe-eval' https://stats.netzlink.com https://www.google.com *.b-ite.de *.b-ite.com
style-src 'self' 'unsafe-inline' *.b-ite.de *.b-ite.com http: https: fonts.googleapis.com
"default-src 'self' 'unsafe-inline' data: https://updown.io https://*.updown.io https://*.stripe.com https://www.paypalobjects.com https://*.uservoice.com https://assets.uvcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.headwayapp.co http://headway-widget.net
script-src 'unsafe-inline' 'unsafe-eval' https://jweiland.net https://stat.jweiland.net https://www.googletagmanager.com https://www.google-analytics.com
img-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://stat.jweiland.net
frame-src https://jweiland.net https://www.google.com/ https://maps.google.de/ https://player.vimeo.com/ https://stat.jweiland.net/ https://www.slideshare.net/ https://de.slideshare.net/
script-src 'nonce-2186c475-3d47-4db3-997c-2c1f9a5121a8' 'unsafe-inline' 'unsafe-eval' https: http: https://*.maps.googleapis.com https://*.cdn.polyfill.io https://*.google-analytics.com https://*.csi.gstatic.com https://*.stats.g.doubleclick.net https://fonts.googleapis.com data:
img-src 'self' https://www.google-analytics.com https://www.google.de https://www.google.com https://www.google.at https://www.google.ch https://www.google.lu https://stats.g.doubleclick.net
script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://*.intelliad.de https://server.adform.net/serving/scripts/trackpoint/async/ https://server.adform.net/serving/trackpoint/ https://server.adform.net/serving/trackpoint/
"default-src 'unsafe-inline' 'unsafe-eval' kamensk-uralskiy.ru *.kamensk-uralskiy.ru http://old.kamensk-uralskiy.ru counter.yadro.ru yandex.ru *.yandex.ru yandex.net *.yandex.net yastatic.net *.yastatic.net google.com *.google.com youtube.com *.youtube.com googleapis.com *.googleapis.com http://googleapis.com http://*.googleapis.com http://html5shim.googlecode.com http://fonts.googleapis.com gstatic.com *.gstatic.com *.stat.sputnik.ru http://stat.sputnik.ru data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com google.com *.webvisor.com webvisor.com *.wordpress.org wordpress.org *.gravatar.com gravatar.com *.yastatic.net yastatic.net *.google-analytics.com google-analytics.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.cloudflare.com *.google.ru *.yandexadexchange.net *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com vk.com *.vk.com https://vk.com https://*.vk.com google.com *.google.com https://google.com https://*.google.com userapi.com ok.ru *.ok.ru akismet.com *.akismet.com https:
child-src 'self' *.google.com google.com *.webvisor.com webvisor.com *.wordpress.org wordpress.org *.gravatar.com gravatar.com *.yastatic.net yastatic.net *.google-analytics.com google-analytics.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net *.yandexadexchange.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com google.com *.google.com https://google.com https://*.google.com ok.ru *.ok.ru akismet.com *.akismet.com https:
img-src 'self' *.google.com google.com *.webvisor.com webvisor.com *.yandex.ru *.yandex.net https://*.googlesyndication.com *.google-analytics.com *.doubleclick.net https: data:
font-src 'self' *.webvisor.com webvisor.com *.yandex.ru https: data:
connect-src 'self' *.google.com google.com *.webvisor.com webvisor.com *.yandex.ru https:
style-src 'unsafe-inline' 'unsafe-eval' 'self' https:
"script-src http: https: 'self' 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.thawte.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://ssl.google-analytics.com https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://syndication.twitter.com
img-src 'self' data: https://ssl.google-analytics.com https://s-static.ak.facebook.com https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://syndication.twitter.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://syndication.twitter.com
frame-src https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://syndication.twitter.com https://www.facebook.com https://s-static.ak.facebook.com https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://syndication.twitter.com object-src 'none'"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://koukia.ca:443 https://*.koukia.ca:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src https: 'unsafe-inline' 'self' 'nonce-b0121a9523ca675fe45554e3b3deff0fe4efadd113fdc8883d8862f36c75143f' 'strict-dynamic' 'report-sample'
script-src 'self' sha384-o/50jgkexnn+nf8dlr/69a07yie2zedlajlhjg3vt9k1pylwnctkxymbjbydswxm https://www.youtube.com/iframe_api https://www.youtube.com/sw.js https://s.ytimg.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net 'unsafe-inline'
img-src 'self' https://www.fondationcartier.com https: http: blob: data:
connect-src 'self' https://www.fondationcartier.com https://www.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net
frame-src 'self' https://www.fondationcartier.com http: https:
media-src 'self' https://www.fondationcartier.com http: https:
img-src 'self' data: https://www.google-analytics.com/ https://www.snapchat.com/
script-src 'self' https://www.google-analytics.com/ https://www.youtube.com/ https://s.ytimg.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net http://queatinotepase.cl https://tagmanager.google.com
object-src 'self' www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com http://queatinotepase.cl https://tagmanager.google.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net http://queatinotepase.cl https://tagmanager.google.com
img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://tagmanager.google.com
frame-src 'self'  www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com
font-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com
connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' cinemax.tv www.google-analytics.com connect.facebook.net platform.twitter.com cdn.syndication.twimg.com dpm.demdex.net tags.bkrtx.com assets.adobedtm.com hbolag.d2.sc.omtrdc.net
child-src 'self' *.fls.doubleclick.net staticxx.facebook.com www.facebook.com platform.twitter.com *.bluekai.com
img-src 'self' https://lh3.googleusercontent.com https://www.google.com https://www.google-analytics.com https://*.krxd.net https://rtd.tubemogul.com https://idsync.rlcdn.com https://*.doubleclick.net https://sync-tm.everesttech.net https://www.facebook.com
script-src 'self' 'unsafe-inline' https://www.foxprivacy.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com www.google-analytics.com https://*.krxd.net https://foxnet.demdex.net https://connect.facebook.net https://cdn.segment.com https://tagmanager.google.com
script-src 'self' mid.as *.mid.as 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org ajax.googleapis.com www.google-analytics.com www.googletagmanager.com api.stripe.com js.stripe.com platform.twitter.com syndication.twitter.com ssl.livezilla.net
style-src 'self' 'unsafe-inline' mid.as *.mid.as cdn.midas.network fonts.googleapis.com platform.twitter.com
img-src 'self' data: mid.as *.mid.as cdn.midas.network www.google.com www.google.co.uk www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net platform.twitter.com syndication.twitter.com pbs.twimg.com q.stripe.com *.ytimg.com
frame-src 'self' mid.as *.mid.as js.stripe.com platform.twitter.com syndication.twitter.com www.youtube.com
child-src 'self' mid.as *.mid.as js.stripe.com www.youtube.com
connect-src 'self' chat.mid.as cdn.midas.network api.stripe.com stats.g.doubleclick.net www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.siteimprove.net https://siteimproveanalytics.com https://www.google-analytics.com https://kristianstads-kommun.mynewsdesk.com https://ajax.googleapis.com https://spoxy4.insipio.com https://dl.episerver.net https://translate.google.com https://translate.googleapis.com https://platform.twitter.com https://connect.facebook.net https://www.vizzit.se https://tag.vizzit.se www.kristianstad.se:443
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com https://www.vizzit.se https://maxcdn.bootstrapcdn.com https://dl.episerver.net www.kristianstad.se:443
img-src 'self' https://se1.siteimprove.com https://syndication.twitter.com https://stats.g.doubleclick.net https://web.facebook.com https://www.google-analytics.com https://spoxy4.insipio.com https://kartor.kristianstad.se https://www.gstatic.com https://www.google.com https://www.facebook.com https://www.vizzit.se https://tag.vizzit.se data: https://dl.episerver.net https://www.vattenriket.kristianstad.se https://translate.googleapis.com https://translate.google.com www.kristianstad.se:443
font-src 'self' https://sxt.cdn.skype.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com www.kristianstad.se:443
connect-src 'self' https://id.siteimprove.com https://my2.siteimprove.com wss: ws: https://spoxy4.insipio.com https://translate.googleapis.com https://syndication.twitter.com www.kristianstad.se:443
form-action 'self' https://syndication.twitter.com https://platform.twitter.com www.kristianstad.se:443
script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.m.me
style-src data: blob: 'unsafe-inline' * *.m.me
connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm *.m.me
img-src 'self' data: https://fastmail.innocraft.cloud https://*.twimg.com https://*.twitter.com https://www.gravatar.com https://icgroup.helpspot.com https://www.paypalobjects.com http://www.pobox.com https://*.gstatic.com https://www.fastmail.com
font-src 'self' data: http://fonts.gstatic.com https://fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.twitter.com https://*.twimg.com https://connect.facebook.net https://fastmail.innocraft.cloud https://listbox.com https://run-static.pingdom.net https://*.gstatic.com https://*.facebook.com https://talon-ehawk.netdna-ssl.com https://www.e-hawk.net https://www.ehawk.net https://www.paypalobjects.com https://www.paypal.com https://icgroup.helpspot.com
frame-src 'self' data: https://*.twitter.com https://*.twimg.com https://*.facebook.com https://*.google.com
"default-src https: http: data: 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'nonce-6e4fbfea-3630-4952-9327-3c37812c1292' 'unsafe-eval' apis.google.com www.google-analytics.com assets.adobedtm.com cdn.jsdelivr.net play.vidyard.com pixel.quantserve.com edge.quantserve.com secure.quantserve.com rules.quantcount.com cdn.ravenjs.com use.typekit.net v2.zopim.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://widget.trustpilot.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.google.com https://www.gstatic.com
img-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://www.google-analytics.com data:
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com
frame-src 'self' https://discordapp.com https://www.youtube.com https://googleads.g.doubleclick.net https://widget.trustpilot.com https://sketchfab.com/ https://www.google.com https://www.gstatic.com
connect-src wss: ws: https://minehub.de/ https://minehub.de:6008 https://minehub.de:6007"
"frame-ancestors https://www.usgacardshop.com http://www.usgacardshop.com http://www.123print.com http://www.brookhollowcards.com http://www.cardsdirect.com https://www.123print.com https://www.brookhollowcards.com https://www.cardsdirect.com http://*.cardsdirect.com
script-src 'self' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com 'sha256-1gig1ei7abkbfq8rvwk7j2meeoilut5+tblxyancyta=' 'sha256-yebnganu2vnhbkglh1wpbqwtnbziphhkj2moxz3svha=' 'sha256-7jkemgknzqenszthy6o71kmdy2oge1zmevviukd/dl4=' 'sha256-dhzrwuf4myxzqeg15rszzbc6uiuqwunpf53/n4gdfro=' 'sha256-jfdsl3h5rw7tplo13m12qgbpibgewtf1y+jxdya+axm=' 'sha256-xjez/pxau+fvkl8t+pzfwosomjm5kutjwbf/4zbay6w=' 'sha256-ulpmpb9pplbtvd850n5qn5gmf3naz+v+ftc1+ertxmm='
"default-src 'self' data: *.yadro.ru fonts.gstatic.com yandex.ru *.yandex.ru google-analytics.com *.google-analytics.com yastatic.net www.facebook.com cdn.siteswithcontent.com cdn.contentsitesrv.com cdn.s2normal.com counter.lentainform.com rtb.com.ru bael5.variti.net s1vesta.com *.s1vesta.com s1block.com *.s1block.com sw1block.com *.sw1block.com actionteaser.ru *.actionteaser.ru marketgid.com *.marketgid.com tovarro.com *.tovarro.com mirs.com *.mirs.com criteo.com *.criteo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.siteswithcontent.com cdn.contentsitesrv.com block.sw2block.com *.yadro.ru fonts.gstatic.com yandex.ru *.yandex.ru google-analytics.com *.google-analytics.com yastatic.net www.facebook.com s1vesta.com *.s1vesta.com s1block.com *.s1block.com sw1block.com *.sw1block.com rtb.com.ru bael5.variti.net actionteaser.ru *.actionteaser.ru marketgid.com *.marketgid.com tovarro.com *.tovarro.com mirs.com *.mirs.com criteo.com *.criteo.com
"frame-ancestors 'self' http://texaselectricityratings.com https://texaselectricityratings.com http://www.texaselectricityratings.com https://www.texaselectricityratings.com http://facebook.com https://facebook.com http://www.facebook.com https://www.facebook.com"
"default-src  'self' https://googleads4.g.doubleclick.net https://www.google.com https://an.yandex.ru https://adservice.google.ru https://adservice.google.com https://adservice.google.com.au https://www.gstatic.com https://adservice.google.de https://adservice.google.kz https://adservice.google.com.ua https://mc.yandex.by https://www.googletagservices.com https://api-maps.yandex.ru https://googleads.g.doubleclick.net https://mc.yandex.ru https://pagead2.googlesyndication.com http://www.youtube.com http://www.gdepapa.ru http://gdepapa5 http://gdepapa.ru https://www.gdepapa.ru https://gdepapa.ru *.yandex.ru *.googlesyndication.com http://counter.yadro.ru http://counter.rambler.ru https://clck.yandex.ru http://yastatic.net *.google.com *.google.ru http://yandexadexchange.net http://googleads.g.doubleclick.net https://yastatic.net https://csi.gstatic.com https://adservice.google.co.id http://www.google-analytics.com https://themes.googleusercontent.com https://fonts.googleapis.com https://ssl.google-analytics.com http://traff.travelata.ru https://www.youtube.com https://money.yandex.ru https://auth.robokassa.ru http://awaps.yandex.net https://www.googleapis.com https://st.yandexadexchange.net
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://googleads4.g.doubleclick.net https://www.google.com https://an.yandex.ru https://adservice.google.ru https://adservice.google.com https://adservice.google.com.au https://www.gstatic.com https://adservice.google.de https://adservice.google.kz https://adservice.google.com.ua https://mc.yandex.by https://www.googletagservices.com https://api-maps.yandex.ru https://googleads.g.doubleclick.net https://mc.yandex.ru https://pagead2.googlesyndication.com http://www.youtube.com http://www.gdepapa.ru http://gdepapa5 http://gdepapa.ru https://www.gdepapa.ru https://gdepapa.ru *.yandex.ru *.googlesyndication.com http://counter.yadro.ru http://counter.rambler.ru https://clck.yandex.ru http://yastatic.net *.google.com *.google.ru http://yandexadexchange.net http://googleads.g.doubleclick.net https://yastatic.net https://csi.gstatic.com https://adservice.google.co.id http://www.google-analytics.com https://themes.googleusercontent.com https://fonts.googleapis.com https://ssl.google-analytics.com http://traff.travelata.ru https://www.youtube.com https://money.yandex.ru https://auth.robokassa.ru http://awaps.yandex.net https://www.googleapis.com https://st.yandexadexchange.net
style-src 'unsafe-inline' 'self' https://googleads4.g.doubleclick.net https://www.google.com https://an.yandex.ru https://adservice.google.ru https://adservice.google.com https://adservice.google.com.au https://www.gstatic.com https://adservice.google.de https://adservice.google.kz https://adservice.google.com.ua https://mc.yandex.by https://www.googletagservices.com https://api-maps.yandex.ru https://googleads.g.doubleclick.net https://mc.yandex.ru https://pagead2.googlesyndication.com http://www.youtube.com http://www.gdepapa.ru http://gdepapa5 http://gdepapa.ru https://www.gdepapa.ru https://gdepapa.ru *.yandex.ru *.googlesyndication.com http://counter.yadro.ru http://counter.rambler.ru https://clck.yandex.ru http://yastatic.net *.google.com *.google.ru http://yandexadexchange.net http://googleads.g.doubleclick.net https://yastatic.net https://csi.gstatic.com https://adservice.google.co.id http://www.google-analytics.com https://themes.googleusercontent.com https://fonts.googleapis.com https://ssl.google-analytics.com http://traff.travelata.ru https://www.youtube.com https://money.yandex.ru https://auth.robokassa.ru http://awaps.yandex.net https://www.googleapis.com https://st.yandexadexchange.net
img-src 'self' data: i.ytimg.com www.google-analytics.com
script-src 'unsafe-inline' www.google-analytics.com ajax.googleapis.com *.twitter.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: wss://ws.justcase.net:* wss://ws.justcase.one:*
img-src 'self' https://www.denic.de https://www.google-analytics.com https://piwik.denic.de
img-src 'self' data: blob: https://sinblr.com media.sinblr.com
media-src 'self' data: https://sinblr.com media.sinblr.com
connect-src 'self' blob: wss://sinblr.com https://sinblr.com media.sinblr.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.quriobot.com:* quriobot.com:* cdn.headwayapp.co/widget.js *.hotjar.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com www.google.com www.gstatic.com *.googleapis.com connect.facebook.net invitebox.com
frame-src 'self' *.quriobot.com:* quriobot.com:* headway-widget.net vars.hotjar.com www.google.com www.youtube.com
style-src 'self' 'unsafe-inline' *.quriobot.com:* quriobot.com:* blob: *.googleapis.com
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-c9gyq6szcsyhcoj6ppmcad1oiyzvlqa2bwmsylwdexu='
connect-src 'self' https: wss://*.intercom.io wss://api.appcues.net
img-src 'self' https: data: res.cloudinary.com
script-src 'self' data: https: static.hotjar.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https: 'unsafe-inline' cloud.typography.com"
connect-src 'self' dc.services.visualstudio.com/v2/track fonts.googleapis.com unpkg.com use.fontawesome.com fonts.gstatic.com az416426.vo.msecnd.net prca01cdndata.blob.core.windows.net"
"connect-src 'self' wss: *.maxict.nl                                                                       *.doubleclick.net                                                                       *.google-analytics.com                                                                       *.hotjar.com                                                                       *.tawk.to
font-src 'self' data: *.maxict.nl                                                                     *.gstatic.com                                                                     *.tawk.to
frame-src 'self' 'unsafe-inline' about: *.maxict.nl                                                                                       *.criteo.com                                                                                       *.eetgroup.com                                                                                       *.facebook.com                                                                                       *.hotjar.com                                                                                       *.kingston.com                                                                                       *.newstar.eu                                                                                       *.newstar.nl                                                                                       *.startech.com                                                                                       *.tawk.to                                                                                       *.twindis.com                                                                                       *.youtube.com
style-src 'self' 'unsafe-inline' *.maxict.nl                                                                                *.cloudfront.net                                                                                *.googleapis.com                                                                                *.google.com                                                                                *.jsdelivr.net                                                                                *.mailchimp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com http://localhost:50029 https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://maps.googleapis.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com stats.g.doubleclick.net https://angular-ui.github.io https://sjs.bizographics.com https://snap.licdn.com https://px.ads.linkedin.com https://siteimproveanalytics.com/ https://policy.cookiereports.com/
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://tagmanager.google.com https://cdnjs.cloudflare.com
img-src 'self' https://gowlingwlg.com *.google.com https://www.google.co.uk http://*.twimg.com https://*.twimg.com https://www.google.ca/ https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://us2.siteimprove.com stats.g.doubleclick.net data:
font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:
frame-src 'self' s7.addthis.com https://*.youtube.com https://*.media-server.com https://*.slideshare.net https://*.vuturevx.com https://*.gowlingwlg.com https://cdn.yoshki.com/ https://w.soundcloud.com/ https://html5-player.libsyn.com https://player.vimeo.com
script-src 'self' 'unsafe-inline' https://static.frag-den-staat.de https://traffic.okfn.de
img-src 'self' data: blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://traffic.okfn.de https://www.betterplace.org https://betterplace-assets.betterplace.org https://i.vimeocdn.com https://raw.githubusercontent.com *.tile.openstreetmap.org *.global.ssl.fastly.net i.ytimg.com
frame-src 'self' blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://okfde.github.io https://www.betterplace.org https://betterplace-assets.betterplace.org https://player.vimeo.com https://www.youtube-nocookie.com https://media.ccc.de https://challonge.com https://www.foodwatch.org/de/iframe/
form-action 'self' https://fragdenstaat.de https://www.paypal.com https://pretix.eu fragdenstaat://authorize
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://copygeneral.daktela.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://rec.smartlook.com
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com/ads/ https://www.google.cz/ads/ https://www.google.com/pagead/ https://www.google.cz/pagead/ https://maps.gstatic.com https://maps.googleapis.com
connect-src 'self' https://manager.smartlook.com https://writer.smartlook.com https://events-writer.smartlook.com
"frame-ancestors *.kfst.dk *.forbrug.dk *.stormraadet.dk *.forbrugerombudsmanden.dk *.energianke.dk *.forbrugereuropa.dk *.consumerombudsman.dk *.consumereurope.dk *.danishstormcouncil.dk *.energysuppliescomplaintboard.dk"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://connect.facebook.net https://apis.google.com https://maxcdn.bootstrapcdn.com https://www.google.com https://js-agent.newrelic.com https://d37gvrvc0wt4s1.cloudfront.net https://www.googleapis.com https://clients1.google.com https://www.google-analytics.com https://bam.nr-data.net https://cdn.syndication.twimg.com"
frame-src https://www.youtube.com https://syndication.twitter.com https://www.google.com https://twitter.com https://platform.linkedin.com https://platform.twitter.com https://static.licdn.com
img-src https://ton.twimg.com https://pbs.twimg.com https://syndication.twitter.com https://secure.gravatar.com https://www.google-analytics.com 'self' data: https://static.licdn.com https://www.youtube.com https://www.google.com https://twitter.com https://platform.linkedin.com https://platform.twitter.com
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com *.google-analytics.com https: https://platform.linkedin.com https://platform.twitter.com
"default-src https://*.filemaker-magazin.de https://filemaker-magazin.de https://*.qutic.com https://fmm.radiantmagic.com http://*.filemaker-magazin.de https://cdn.radiantmagic.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' https: 'unsafe-inline' 'unsafe-eval' data:
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.wp.com *.googletagmanager.com *.quora.com *.indeed.com api.instagram.com cdn.syndication.twimg.com *.twitter.com *.facebook.net *.facebook.com *.linkedin.com ajax.cloudflare.com *.googleapis.com *.google.com cdnjs.cloudflare.com cdn.datatables.net *.meritocracy.is *.google-analytics.com cdn.heapanalytics.com *.hotjar.com oss.maxcdn.com platform.twitter.com s7.addthis.com *.googleadservices.com *.youtube.com *.ytimg.com code.jquery.com unpkg.com raw.github.com raw.githubusercontent.com js-agent.newrelic.com api.filestackapi.com js.pusher.com d3js.org cdn.rawgit.com cdn.ravenjs.com cdn.jsdelivr.net code.highcharts.com static.ads-twitter.com *.indeed.com *.stripe.com *.addthis.com *.addthisedge.com bam.nr-data.net
frame-src 'self' *.google.com *.facebook.com *.facebook.net *.youtube.com youtu.be vars.hotjar.com *.filestackapi.com cdn.filestackcontent.com *.stripe.com *.addthis.com *.google.com platform.twitter.com"
script-src 'self' 'unsafe-inline' 'nonce-6192744e8c60a3fe8fa5d074f3ccc6bd'  https://d24n15hnbwhuhn.cloudfront.net https://fonts.gstatic.com https://fonts.googleapis.com https://ajax.googleapis.com https://api.amplitude.com wireframecc-9947.kxcdn.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' http://d12ux87dkit87z.cloudfront.net http://ssl.google-analytics.com http://www.google-analytics.com http://www.facebook.com http://mystrom.com http://www.mystrom.com"
script-src 'self' use.fontawesome.com www.austinregionalclinic.com mychart.austinregionalclinic.com *.gstatic.com 'unsafe-inline' 'unsafe-eval' rawgithub.com blob: www.youtube.com *.linkedin.com ajax.aspnetcdn.com cdn.syndication.twimg.com sjs.bizographics.com connect.facebook.net use.typekit.net maxcdn.bootstrapcdn.com arc.mymedicalme.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com platform.twitter.com m.addthisedge.com *.addthis.com hummsystems.appspot.com
img-src 'self' stats.g.doubleclick.net data: *.googlecode.com p.typekit.net i.ytimg.com *.gstatic.com www.google.com www.google-analytics.com *.googleapis.com www.facebook.com *.twitter.com *.twimg.com ajax.aspnetcdn.com match.adsrvr.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://googleads.g.doubleclick.net *.dmca.com *.craftyclicks.co.uk *.zenaps.com *.awin1.com *.dwin1.com *.olark.com *.mention-me.com connect.facebook.net https://widget.trustpilot.com http://widget.trustpilot.com https://www.googletagmanager.com https://cdn.optimizely.com https://www.google-analytics.com http://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com
style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com *.olark.com
font-src 'self' data: https://fonts.gstatic.com/ http://*.hotjar.com https://*.hotjar.com *.zenaps.com
"default-src 'self' n161adserv.com bongacams.com *.bongacams.com ymetrica1.com mc.yandex.ru cam.bet *.cam.bet http://87.98.178.56 http://87.98.178.56
"default-src https://www.facebook.com https://www.google-analytics.com 'unsafe-inline' 'self'
script-src https://www.gstatic.com https://maps.googleapis.com https://www.google.com https://connect.facebook.net https://www.google-analytics.com 'unsafe-inline' 'self'
img-src https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://csi.gstatic.com https://www.facebook.com https://i.ytimg.com 'self'
font-src 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com 'self'
img-src 'self' https: data: blob: https://tootplanet.space
media-src 'self' https: data: https://tootplanet.space
connect-src 'self' blob: https://tootplanet.space wss://tootplanet.space
"script-src 'self' 'nonce-8c7ca2c7-82e6-4407-919f-bf78bc339745' https://*.msecnd.net https://*.mxpnl.com https://cdn-mxpnl.com https://cdn.ravenjs.com https://checkout.razorpay.com/v1/checkout.js https://wzrkt.com https://d2r1yp2w7bby2u.cloudfront.net
"frame-ancestors https://*.yandex.ru https://*.yandex.com https://*.yandex.com.tr https://*.yandex.id https://*.yandex-team.ru"
child-src  blob:  https://fast.wistia.net https://share.intercom.io https://intercom-sheets.com
media-src  'self' https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com
connect-src  'self'  https://sixtravel-be-dev.herokuapp.com https://sixtravel-be-prod.herokuapp.com https://sixtravel-be-stage.herokuapp.com https://*.tiles.mapbox.com https://api.mapbox.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https: https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com
"default-src 'self'  https://nominatim.openstreetmap.org https://www.facebook.com https://pbs.twimg.com/ http://www.juicer.io https://static.juicer.io http://oh1w.mj.am https://app.mailjet.com/ https://www.google-analytics.com https://docs.google.com http://e.issuu.com/ http://unspod.unice.fr https://www.google.com http://s7.addthis.com/ http://univ-cotedazur.fr https://api.archives-ouvertes.fr https://player.vimeo.com https://www.youtube.com/ http://gof.univ-cotedazur.fr/ http://s7.addthis.com https://cdn-univ.fr https://fonts.gstatic.com https://use.fontawesome.com
style-src 'self' 'unsafe-inline' https://unpkg.com/ http://assets.juicer.io http://cdn-univ.fr http://fonts.googleapis.com https://use.fontawesome.com https://fonts.googleapis.com https://cdn-univ.fr
script-src 'self' https://platform.twitter.com https://unpkg.com https://github.com http://assets.juicer.io http://e.issuu.com/embed.js https://platform.twitter.com/widgets.js http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com http://univ-cotedazur.fr http://s7.addthis.com/ https://cdn.rawgit.com https://www.youtube.com https://use.fontawesome.com http://q.addthis.com/ http://graph.facebook.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com/ https://www.googletagmanager.com https://cdn-univ.fr http://www.linkedin.com http://widgets.pinterest.com http://graph.facebook.com http://api-public.addthis.com 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.simplifiedinventory.com *.affilired.com *.doubleclick.net *.googleadservices.com *.golfscape.com *.googletagmanager.com *.googleapis.com *.gstatic.com  *.google.com *.google.ae *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com *.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com
img-src 'self' https://jaweb2019cdn.azureedge.net  *.blob.core.windows.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com *.simplifiedinventory.com *.doubleclick.net *.golfscape.com *.google.com  *.google.ae https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com
child-src 'self' *.golfscape.com *.doubleclick.net https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.simplifiedinventory.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://r.turn.com https://fomo.com https://*.jotfor.ms https://*.jotform.co https://*.fomo.com https://*.keen.io https://*.yandex.ru https://*.nr-data.net https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.cloudfront.net https://*.fullstory.com https://*.newrelic.com https://*.alphatec.net https://googleads.g.doubleclick.net https://*.rentalcover.com https://*.usefomo.com https://www.googletagmanager.com https://www.googleadservices.com https://komito.net https://*.brightwrite.com https://bat.bing.com https://ajax.googleapis.com https://*.zopim.com https://*.trustpilot.com https://linksynergy.com https://track.linksynergy.com https://intljs.rmtag.com
connect-src 'self' https://*.fullstory.com https://*.segment.io https://*.alphatec.net https://stats.usefomo.com wss://*.zopim.com https://*.google-analytics.com https://*.yandex.ru https://*.trustpilot.com https://*.brightwrite.com https://sentry.io
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://bothsidesofthetable.com:443 https://*.bothsidesofthetable.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' https: https://code.jquery.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cdn.fontawesome.com 'sha256-vunusj59bpcpw62hm2jg/hcygiqopn3nqgvnxqpu+ry=' 'nonce-alm5rr8h7zn16htlcquyajfclbu4zesxe23hikq0xvq=' 'unsafe-inline'
style-src 'self' https: *.ebarnehage.no https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.googleapis.com 'nonce-alm5rr8h7zn16htlcquyajfclbu4zesxe23hikq0xvq='
font-src 'self' https: *.ebarnehage.no data: https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com
"default-src 'self' blob: data: *.facebook.com *.doubleclick.net *.googlesyndication.com *.youtube.com *.braintreegateway.com *.paypal.com *.paypalobjects.com *.gstatic.com *.google.com
child-src 'self' *.braintreegateway.com *.paypal.com *.facebook.com *.doubleclick.net *.youtube.com *.google.com *.cardinalcommerce.com
frame-src 'self' *.braintreegateway.com *.paypal.com *.facebook.com *.doubleclick.net *.youtube.com *.google.com *.cardinalcommerce.com
img-src 'self' blob: fiilrcdn.com www.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.braintreegateway.com *.paypal.com *.paypalobjects.com http://web.micropay.hu *.ytimg.com *.gstatic.com *.googleapis.com maps.google.com *.fbcdn.net android-webview data:
connect-src 'self' wss://paratlan.hu:443 *.googleapis.com *.gstatic.com *.googlesyndication.com *.doubleclick.net *.braintreegateway.com *.braintree-api.com *.paypal.com *.paypalobjects.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: fiilrcdn.com *.facebook.com *.facebook.net *.googlesyndication.com *.google-analytics.com *.googletagservices.com *.googletagmanager.com *.ampproject.org *.googlesyndication.com *.google.ee *.google.com.mx *.google.co.nz *.google.com.qa *.google.com.gh *.google.ru *.google.ie *.google.co.il *.google.com.ng *.google.hr *.google.bg *.google.ca *.google.hu *.google.sn *.google.pl *.google.gr *.google.nl *.google.com.au *.google.be *.google.cz *.google.fr *.google.se *.google.it *.google.de *.google.at *.google.ch *.google.rs *.google.co.uk *.google.ro *.google.sk *.google.ci *.google.com.ua *.doubleclick.net *.gstatic.com *.googleapis.com *.braintreegateway.com *.paypal.com *.paypalobjects.com *.google.com *.youtube.com *.ytimg.com
style-src 'self' 'unsafe-inline' fiilrcdn.com *.googleapis.com *.braintreegateway.com
"child-src 'self' *.qld.gov.au *.melbourneit.com.au https://www.youtube.com https://dsdip.wufoo.com https://www.vision6.com.au http://www.vision6.com.au *.darzin.com https://public.tableau.com http://*.dilgp.synamic.net.au/ https://*.dilgp.synamic.net.au/ *.google.com *.vimeo.com https://*.vimeo.com *.goanimate.com https://goanimate.com *.twitter.com https://*.twitter.com"
img-src 'self' https://brave.com https://basicattentiontoken.org https://analytics.brave.com https://boards.greenhouse.io https://www.gravatar.com https://blog.brave.com https://*.ggpht.com https://*.jtvnw.net
script-src 'self' 'unsafe-inline' https://analytics.brave.com https://secure.gaug.es https://boards.greenhouse.io https://code.jquery.com https://sgwidget.leaderapps.co
img-src 'self' *.facebook.com adcanopus.go2cloud.org catch.polyvalent.co.in *.hockeycurve.com *.googleusercontent.com *.google.com *.g.doubleclick.net *.google.co.in *.cloudfront.net *.fbcdn.net *.flixcart.com *.flipkart.com *.amazonaws.com *.googleapis.com *.s3.amazonaws-medium.com *.photobucket.com *.taglr.com *.google.com/ *.google.co.in *.hockeycurve.com *.youtube.com/ *.g.doubleclick.net/ *.polyvalent.co.in *.go2cloud.org
script-src 'self' 'nonce-5daf66a8-5a2a-420d-8f09-455ed27e29ec' 'unsafe-inline' cdn.polyfill.io *.facebook.net *.google.com *.taglr.com *.cloudflare.com http://static.clevertap.com https://d2r1yp2w7bby2u.cloudfront.net https://*.cloudfront.net http://wzrkt.com https://*.amazonaws.com *.hockeycurve.com/taglr-001.js *.googletagmanager.com *.googleadservices.com http://ads.google.com/ *.youtube.com/ http://googleads.g.doubleclick.net/ *.googletagmanager.com
"default-src 'self' *.ketchum.com d3cwznimnyr9sx.cloudfront.net maxcdn.bootstrapcdn.com *.jquery.com *.google.com *.googleapis.com *.googlecode.com maps.gstatic.com www.youtube.com vimeo.com 'unsafe-inline' 'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.daum.net *.daumcdn.net *.google-analytics.com https://*.akamaihd.net http://*.akamaihd.net http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com
frame-src 'self' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com
connect-src 'self' https://*.daum.net http://*.daum.net http://www.googleapis.com https://www.googleapis.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com
script-src *.google-analytics.com *.google.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com *.s.w.org 127.0.0.1:* localhost:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self'
"default-src 'self' *.googleapis.com www.facebook.com *.gstatic.com *.youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' track.adform.net tagmanager.google.com *.linkedin.com googleads.g.doubleclick.net *.bizographics.com developers.google.com www.youtube.com s.ytimg.com *.sharethis.com code.jquery.com *.googleapis.com *.gstatic.com maps.google.com www.googleadservices.com *.google-analytics.com www.googletagmanager.com connect.facebook.net
style-src 'self'  *.googleapis.com tagmanager.google.com 'unsafe-inline'
img-src 'self' stats.g.doubleclick.net *.google-analytics.com img.youtube.com *.google.com *.google.be *.googleapis.com maps.google.com *.gstatic.com googleads.g.doubleclick.net www.facebook.com data:
connect-src 'self' http://freegeoip.net *.googleapis.com *.freegeoip.net api.ipify.org *.sharethis.mgr.consensu.org *.sharethis.com"
img-src 'self' data: https://www.mincotur.gob.es http://www.mincotur.gob.es https://cdn.syndication.twimg.com https://syndication.twitter.com http://www.google-analytics.com https://www.google-analytics.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com http://i.ytimg.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.google.com connect.facebook.net *.googletagmanager.com *.google-analytics.com *.googleapis.com vimeo.com *.facebook.com platform.twitter.com *.addthis.com *.addthisedge.com"
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' xuri.me *.xuri.me disqus.com *.disqus.com disquscdn.com *.disquscdn.com cloudflare.com *.cloudflare.com google.com *.google.com www.google-analytics.com youtube.com *.youtube.com *.ampproject.org *.googleapis.com *.seedanddew.com
style-src 'self' data: 'unsafe-inline' xuri.me *.xuri.me disqus.com *.disqus.com disquscdn.com *.disquscdn.com cloudflare.com *.cloudflare.com google.com *.google.com www.google-analytics.com youtube.com *.youtube.com *.ampproject.org *.googleapis.com
"default-src https: ws: data: 'unsafe-inline' 'unsafe-eval'"
script-src coinexplorer.sk *.google-analytics.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'
child-src coinexplorer.sk *.youtube.com kryptotop.sk kryptotop.eu"
"default-src 'self' https://login.vk.com static.ads-twitter.com cdn.mxpnl.com onesignal.com vk.com web.facebook.com www.google.com apis.google.com accounts.google.com syndication.twitter.com www.facebook.com platform.twitter.com staticxx.facebook.com
script-src 'unsafe-inline' 'unsafe-eval' https://js.pusher.com https://stats.pusher.com *.pusher.com https://bitkong.com https://onesignal.com https://static.ads-twitter.com analytics.twitter.com cdn.mxpnl.com mixpanel.com cdn.bitkong.com vk.com apis.google.com rum-static.pingdom.net cdn.onesignal.com connect.facebook.net www.googleadservices.com www.google-analytics.com www.facebook.com accounts.google.com platform.twitter.com www.gstatic.com widget.intercom.io js.intercomcdn.com www.google.com
connect-src 'self' https://rum-collector-2.pingdom.net https://nexus-long-poller-a.intercom.io https://syndication.twitter.com/ https://www.facebook.com/tr/ *.pusher.com analytics.twitter.com mixpanel.com api.mixpanel.com uploads.intercomcdn.com https://api.bitkong.com vk.com wss://ws-eu.pusher.com wss://api.bitkong.com cdn.bitkong.com onesignal.com api-iam.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io
img-src * data: cdn.bitkong.com vk.com www.facebook.com web.facebook.com staticxx.facebook.com www.google-analytics.com www.google.com www.googleadservices.com googleads.g.doubleclick.net
font-src data:  cdn.mxpnl.com cdn.bitkong.com js.intercomcdn.com
font-src 'self' data: https://fonts.googleapis.com:* https://fonts.gstatic.com:* https://www.googletagmanager.com:* https://www.google-analytics.com:* https://googleads.g.doubleclick.net:* https://maxcdn.bootstrapcdn.com:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com  www.google.com www.youtube.com connect.facebook.net www.facebook.com s.ytimg.com www.gstatic.com unpkg.com www.google-analytics.com  platform.twitter.com www.twitter.com
img-src 'self' https: data: blob: https://humblr.social
media-src 'self' https: data: https://humblr.social
connect-src 'self' blob: https://humblr.social wss://humblr.social
script-src 'self' d37lvg1a3lx4p1.cloudfront.net dh3ffmqb753zk.cloudfront.net apis.google.com is.gd v.gd
"default-src 'self' https://img.youtube.com https://www.instagram.com/ https://fonts.googleapis.com/ https://ssl.google-analytics.com http://www.youtube.com https://www.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.instagram.com/embed.js https://www.google.com/recaptcha/api.js https://www.google.com http://www.google-analytics.com/analytics.js  https://www.gstatic.com/ http://www.google-analytics.com/ga.js https://apis.google.com https://platform.twitter.com http://www.google-analytics.com/plugins/ua/ec.js https://plusone.google.com https://facebook.com https://platform.twitter.com https://ssl.google-analytics.com/ga.js
frame-src 'self' https://www.google.com/ https://w.soundcloud.com https://youtube.com https://www.youtube.com http://youtube.com http://www.youtube.com https://plusone.google.com https://facebook.com https://platform.twitter.com https://bandcamp.com https://platform.instagram.com/  https://www.instagram.com https://fr.pornhub.com/ https://www.reference-sexe.com https://beeg.com https://fr.xhamster.com/ https://cdn-fr605.vporn.com/"
img-src 'self' data: *.remszeitung.de *.stuttgarter-nachrichten.de *.ytimg.com *.ampproject.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.remszeitung.de *.ampproject.org
style-src 'self' 'unsafe-inline' *.googleapis.com *.ampproject.org
img-src 'self' data:  *.tile.openstreetmap.org *.tile.opencyclemap.org
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.com.ge https://*.yandex.com.ge static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.com.ge *.yandex.com.ge
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.com.ge https://passport.yandex.com.ge wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.com.ge *.yandex.com.ge
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.com.ge https://*.yandex.com.ge *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.com.ge *.yandex.com.ge
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.com.ge https://www.yandex.com.ge https://pass.yandex.com.ge https://mc.yandex.com.ge an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.com.ge www.yandex.com.ge suggest.yandex.com.ge
img-src 'self' https: data: blob: https://ichiji.social
media-src 'self' https: data: https://ichiji.social
connect-src 'self' blob: https://ichiji.social wss://ichiji.social
"script-src 'self' https://csgo500.com/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.onesignal.com/ https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://code.jquery.com https://cdn.onesignal.com https://onesignal.com https://vk.com/js/api/ https://cdn.rawgit.com/yahoo/xss-filters/master/dist/xss-filters.js https://www.youtube.com https://s.ytimg.com 'nonce-9ec2c844-879a-4352-b247-f3f2e18ffd83'
img-src 'self' data: https://csgo500.com/ http://csgo500.local/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.pubg500.com https://www.google-analytics.com https://steamcdn-a.akamaihd.net/steamcommunity/public/images/avatars/ https://steamcdn-a.akamaihd.net/apps/730/icons/econ/stickers/ https://steamcommunity-a.akamaihd.net/economy/image/ https://www.google-analytics.com https://vk.com/images/ https://stats.g.doubleclick.net https://files.opskins.media https://chart.googleapis.com https://i.imgur.com *.backblazeb2.com
media-src 'self' data: https://csgo500.com/ http://csgo500.local/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.pubg500.com https://www.google-analytics.com https://steamcdn-a.akamaihd.net/steamcommunity/public/images/avatars/ https://steamcdn-a.akamaihd.net/apps/730/icons/econ/stickers/ https://steamcommunity-a.akamaihd.net/economy/image/ https://www.google-analytics.com https://vk.com/images/ https://stats.g.doubleclick.net https://files.opskins.media https://chart.googleapis.com https://i.imgur.com *.backblazeb2.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com
connect-src 'self' wss://socket.csgo500.com ws://socket.csgo500.com wss://socket.csgo500tr.com ws://socket.csgo500tr.com ws://socket.pubg500.com wss://socket.pubg500.com https://onesignal.com/"
"script-src 'self' 'unsafe-inline' adservice.google.com *.doubleclick.net *.googleadservices.com *.googleanalytics.com *.google-analytics.com apis.google.com https://maps.googleapis.com https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.5.10/angular.min.js https://code.angularjs.org/1.5.10/angular-sanitize.min.js https://www.google.com/js/maia.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.googletagmanager.com tagmanager.google.com https://www.google.co.uk https://www.google.com/insights/consumersurveys/gk/static/hats-integration-release.js https://support.google.com/inapp/api.js https://www.gstatic.com/feedback/js/help/prod/service/screenshot.min.js http://www.google.com/tools/feedback/metric/report 'nonce-msc95affha2v'
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com https://feedback.googleusercontent.com/resources/annotator.css
frame-src 'self' www.google.com www.youtube.com accounts.google.com apis.google.com plus.google.com drive.google.com *.doubleclick.net https://assets.braintreegateway.com https://www.googletagmanager.com https://feedback.googleusercontent.com/
connect-src 'self' plus.google.com www.google-analytics.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' * data:"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: https://js.createsend1.com https://createsend.com https://www.gstatic.com https://e.issuu.com https://js.hs-scripts.com https://snap.licdn.com https://www.facebook.com https://maps.googleapis.com https://ajax.googleapis.com https://fast.fonts.com https://player.vimeo.com https://connect.facebook.net https://static.woopra.com https://www.googletagmanager.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://dmcqaqmkk1tj3.cloudfront.net https://js.hs-analytics.net https://px.ads.linkedin.com https://collector.ontame.io https://www.woopra.com https://track.hubspot.com https://stats.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://www.google.com https://connect.facebook.net https://ajax.aspnetcdn.com/ https://fast.fonts.com https://app.vwo.com/ https://heatmap.visualwebsiteoptimizer.com/ https://www.youtube.com/
font-src 'self' blob: https://app.vwo.com data:
img-src 'self' blob: https://www.facebook.com https://www.google.dk https://www.google.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://collector.ontame.io https://track.hubspot.com https://stats.g.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://maps.gstatic.com https://maps.googleapis.com https://app.vwo.com/
script-src 'self' https://code.jquery.com https://cdn.datatables.net https://mc.yandex.ru https://www.google-analytics.com  http://blueimp.github.io 'unsafe-inline' 'unsafe-eval' http://cdnjs.cloudflare.com
img-src 'self' blob: data: https://mc.yandex.ru https://www.google-analytics.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *
report-uri /admin/config/system/seckit/csp-report, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *
img-src *.doubleclick.net s3.amazonaws.com *.cloudfront.net heapanalytics.com *.google-analytics.com *.facebook.com *.googletagmanager.com
script-src 'self' *.cloudflare.com *.optimizely.com *.google-analytics.com *.heapanalytics.com *.googletagmanager.com *.facebook.net *.stripe.com 'unsafe-inline' 'unsafe-eval'
frame-ancestors 'self' bonacasa.ch *.bonacasa.ch localhost"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.google.com https://ssl.google-analytics.com https://connect.facebook.net https://my.vietnamhost.vn https://code.jquery.com
img-src 'self' data: https://ssl.google-analytics.com https://s-static.ak.facebook.com https://fonts.googleapis.com https://cdn.vietnamhost.vn
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.vietnamhost.vn
font-src 'self' https://themes.googleusercontent.com https://fonts.googleapis.com https://fonts.gstatic.com
frame-src *.vietnamhost.vn *.youtube.com *.google.com *.facebook.com https://s-static.ak.facebook.com
default-src sagiakos.gr *.sagiakos.gr *.sagiakos.gr data: blob: 'unsafe-inline' 'unsafe-eval' unhooked.gr *.unhooked.gr unhooked.co *.unhooked.co gambit.ltd *.gambit.ltd googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com
connect-src sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr unhooked.gr *.unhooked.gr unhooked.co *.unhooked.co gambit.ltd *.gambit.ltd doubleclick.net *.doubleclick.net googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com
script-src sagiakos.gr *.sagiakos.gr *.sagiakos.gr data: blob: facebook.net *.facebook.net facebook.com *.facebook.com doubleclick.net *.doubleclick.net googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com analytics.skroutz.gr cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'
style-src sagiakos.gr *.sagiakos.gr *.sagiakos.gr 'unsafe-inline' facebook.net *.facebook.net facebook.com *.facebook.com doubleclick.net *.doubleclick.net googleadservices.com *.googleadservices.com apis.google.com *.apis.google.com *.googleapis.com www.google.com cdnjs.cloudflare.com
form-action sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr facebook.net *.facebook.net doubleclick.net *.doubleclick.net facebook.com *.facebook.com
frame-ancestors sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr
font-src sagiakos.gr *.sagiakos.gr *.sagiakos.gr gstatic.com *.gstatic.com fonts.googleapis.com apis.google.com *.apis.google.com *.googleapis.com www.google.com
img-src * data: *.piraeusbank.gr *.sagiakos.gr blob: facebook.net *.facebook.net facebook.com *.facebook.com apis.google.com *.apis.google.com *.googleapis.com www.google.com
media-src * data: blob: *.piraeusbank.gr *.sagiakos.gr apis.google.com *.apis.google.com *.googleapis.com www.google.com
object-src sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr facebook.net *.facebook.net facebook.com *.facebook.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net google.com *.google.com youtube.com *.youtube.com vimeo.com *.vimeo.com apis.google.com *.apis.google.com *.googleapis.com www.google.com audiomack.com *.audiomack.com mixcloud.com *.mixcloud.com
worker-src sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr
frame-src sagiakos.gr *.sagiakos.gr *.piraeusbank.gr *.sagiakos.gr facebook.net *.facebook.net facebook.com *.facebook.com doubleclick.net *.doubleclick.net google.com *.google.com youtube.com *.youtube.com vimeo.com *.vimeo.com analytics.skroutz.gr apis.google.com *.apis.google.com *.googleapis.com www.google.com audiomack.com *.audiomack.com mixcloud.com *.mixcloud.com
img-src 'self' https: data: blob: https://niu.moe
media-src 'self' https: data: https://niu.moe
connect-src 'self' blob: https://niu.moe wss://niu.moe
script-src 'self' *.universia.net *.google.com *.gstatic.com *.cloudfront.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' *.universia.net *.googleapis.com *.cloudfront.net 'unsafe-inline' data:
font-src 'self' *.universia.net *.gstatic.com data:
"default-src 'self' 'unsafe-inline' *.arri.de *.arriwebgate.com arrimedia.freshdesk.com
media-src 'self' arri.de *.arri.de *.arriwebgate.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com s3.amazonaws.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com s3.amazonaws.com
frame-ancestors 'self' arri.de *.arri.de yamdu.com *.yamdu.com arriwebgate.com *.arriwebgate.com arriwebgate.de *.arriwebgate.de webgate.media *.webgate.media webgate.de *.webgate.de"
script-src 'self' 'nonce-cf72ed35ffe5e8f266369c963a4ca9a8' https://maps.googleapis.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.box.com  https://www.paypal.com  https://www.paypalobjects.com  https://www.googleadservices.com https://www.googletagmanager.com *.doubleclick.net  https://cdn.jsdelivr.net  www.facebook.com  https://embed.tawk.to  https://bam.nr-data.net  https://js-agent.newrelic.com  https://apis.google.com  https://www.gstatic.com https://appcenter.intuit.com https://www.google.com https://www.google-analytics.com https://ajax.googleapis.com  http://local.saasant.com
img-src 'self' *.doubleclick.net https://cdn.jsdelivr.net/  https://www.sandbox.paypal.com https://www.paypal.com  https://www.google.com https://www.google.co.in  https://*.tawk.to  ssl.comodo.com  https://appcenter.intuit.com https://www.google-analytics.com https://www.sandbox.paypal.com https://www.paypal.com http://local.saasant.com  https://ssl.gstatic.com  data:
frame-src 'self' https://app.box.com/  https://*.facebook.com https://www.sandbox.paypal.com/ https://www.paypal.com/  https://*.tawk.to  https://mp.liferay.com  https://www.google.com https://youtu.be https://www.youtube.com
connect-src 'self' *.doubleclick.net https://www.paypal.com  wss://*.tawk.to https://*.tawk.to https://ssl.google-analytics.com https://appcenter.intuit.com https://local.saasant.com https://www.google.com https://www.google-analytics.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.google-analytics.com *.pinterest.com *.googleadservices.com *.facebook.com *.facebook.net *.myfonts.net *.addthis.com *.googleapis.com *.paypalobjects.com *.flexcom.de cdn.scaledrone.com *.astrogroup.de"
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-znzquglrebfaq+bpzmtwashtblj8mgunbdbynrklk5c='
connect-src 'self' *.pixiv.net *.pawoo.net www.google-analytics.com www.facebook.com connect.facebook.net www.googletagmanager.com www.googleadservices.com www.google.co.jp b92.yahoo.co.jp *.buyee.jp d.line-scdn.net stats.g.doubleclick.net ekr.zdassets.com *.zendesk.com booth.pm *.booth.pm booth.pximg.net
frame-src player.vimeo.com w.soundcloud.com www.slideshare.net www.youtube.com bandcamp.com sketchfab.com *.google.com *.facebook.com *.facebook.net *.twitter.com social-plugins.line.me *.g.doubleclick.net www.googletagmanager.com booth.karakuri.ai booth.pm *.booth.pm factory.pixiv.net booth.pximg.net
style-src 'self' 'unsafe-inline' *.googleapis.com maxcdn.bootstrapcdn.com https://scontent.webcollage.net https://display.ugc.bazaarvoice.com https://tagmanager.google.com https://onesignal.com
img-src 'self' data: csi.gstatic.com lh3.googleusercontent.com https://www.googletagmanager.com https://display.ugc.bazaarvoice.com https://media3.webcollage.net https://photos-us.bazaarvoice.com http://www.farmatodo.com.ve https://network.bazaarvoice.com https://photos-uat-eu.bazaarvoice.com https://network-stg.bazaarvoice.com https://*.googleusercontent.com https://api.poder.io https://www.facebook.com https://match.prod.bidr.io https://www.google-analytics.com https://stats.g.doubleclick.net http://lh3.googleusercontent.com https://www.google.com https://pixel.sitescout.com https://firebasestorage.googleapis.com https://maps.gstatic.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com.co https://scomcluster.cxense.com https://scontent.webcollage.net https://smedia.webcollage.net https://rel.webcollage.net https://pixel-sync.sitescout.com https://*.zopim.com https://*.zopim.io https://cx.atdmt.com https://ssl.gstatic.com https://www.gstatic.com
font-src 'self' https: data: fonts.gstatic.com maxcdn.bootstrapcdn.com https://scontent.webcollage.net https://v2.zopim.io
child-src https://bid.g.doubleclick.net https://www.farmatodo.com.co https://farmatodo.com.co/firebase-messaging-sw.js https://uk.cdn-net.com https://api.bazaarvoice.com https://*.api.bazaarvoice.com https://www.facebook.com https://display.ugc.bazaarvoice.com https://e.issuu.com https://*.firebaseio.com https://*.firebaseapp.com https://*.appspot.com/firebase-messaging-sw.js https://e.issuu.com https://*.firebaseio.com https://stunning-base-164402.firebaseapp.com https://*.firebaseapp.com https://connect.facebook.net https://api.poder.io https://scdn.cxense.com https://tpc.googlesyndication.com https://onesignal.com https://*.appspot.com/onesignalsdkworker.js
connect-src 'self' https://us36.zopim.com https://*.zopim.com https://ccfjzm28s7.execute-api.us-east-1.amazonaws.com https://stats.g.doubleclick.net wss://realtime.farmatodo.com https://realtime.farmatodo.com https://www.google-analytics.com https://secure-ds.serving-sys.com https://api.bazaarvoice.com https://sentry.io https://www.facebook.com/tr/ https://*.api.bazaarvoice.com https://firebasestorage.googleapis.com https://api.mixpanel.com https://cat.poder.io wss://*.firebaseio.com https://api.poder.io https://stunning-base-164402.appspot.com https://*.appspot.com https://fcm.googleapis.com https://www.googleapis.com https://securetoken.googleapis.com https://vcojeyd2po-3.algolianet.com https://vcojeyd2po-2.algolianet.com https://vcojeyd2po-1.algolianet.com https://vcojeyd2po-dsn.algolianet.com https://www.facebook.co https://cdn.poder.io wss://stunning-base-164402.firebaseio.com https://vcojeyd2po-dsn.algolia.net https://sitidata-stdr.appspot.com https://ekr.zdassets.com https://farmatodo.zendesk.com wss://*.zopim.com https://onesignal.com
form-action 'self' https://api.bazaarvoice.com https://uk.cdn-net.com https://*.api.bazaarvoice.com https://www.facebook.com https://connect.facebook.net
media-src 'self' https://smedia.webcollage.net https://smedia3.webcollage.net https://scontent.webcollage.net https://smedia.webcollage.net https://sjson.webcollage.net https://media3.webcollage.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://freegeoip.net https://code.etracker.com https://platform.twitter.com https://static.etracker.com https://fonts.googleapis.com https://connect.facebook.net https://ssl.google-analytics.com https://apis.google.com https://www.etracker.de https://www.facebook.com https://staticxx.facebook.com https://syndication.twitter.com https://wzrd.in
script-src 'self' https://nolt.io www.google-analytics.com *.paddle.com 'nonce-zdrlmdbhmtgtzdkxmi00mjm2lwfhmmutyzrjzwi0y2jkmduy'
"frame-ancestors 'self' *.pxg.com *.bigyam.com *.authorize.net *.googleapis.com"
"frame-ancestors 'self' script-src 'self' 'unsafe-inline' https:
"frame-ancestors *.smilebox.com www.paypal.com *.paymentech.net soap.vindicia.com webapi.mymarketing.co.il www.googletagmanager.com orders2.pniws.com webservices.fujifilmesys.com sqs.us-west-2.amazonaws.com pagead2.googlesyndication.com
script-src 'self' 'nonce-7951fc8f-1d0e-433e-a623-8042371e83e5' 'unsafe-inline' https://www.google.com/ https://www.google.com/recaptcha/api.js cdn.polyfill.io connect.facebook.net/en_us/sdk.js graph.facebook.com apis.google.com https://www.google-analytics.com/analytics.js
script-src 'self' cdnjs.cloudflare.com https://www.google-analytics.com 'unsafe-inline'
font-src 'self' https://fonts.gstatic.com https://djtycazsru18c.cloudfront.net https://maxcdn.bootstrapcdn.com
form-action 'self' https://platform.twitter.com https://syndication.twitter.com *.workvivo.com workvivo.com login.microsoftonline.com *.onelogin.com workvivo.staffs.ac.uk voxpop.voxprogroup.com
frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com https://djtycazsru18c.cloudfront.net
script-src 'self' 'unsafe-inline' 'report-sample' https://djtycazsru18c.cloudfront.net https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' 'report-sample' https://djtycazsru18c.cloudfront.net https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://maxcdn.bootstrapcdn.com
"default-src https: 'unsafe-eval' 'unsafe-inline' data:
"default-src 'self' *.bailliegifford.com https://d2yo5j8385mod6.cloudfront.net http://video.bailliegifford.com                            https://diny04oi6alqe.cloudfront.net https://d1jbu16z788zgx.cloudfront.net https://*.gstatic.com                             data: blob: https://*.googleapis.com https://www.google.com https://servedby.flashtalking.com https://js.maxmind.com https://geoip-js.maxmind.com                                                      https://*.typekit.net https://rs.fullstory.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: *.typekit.net data: https://*.typekit.net                             https://diny04oi6alqe.cloudfront.net www.googletagmanager.com www.google-analytics.com                             https://*.google.com https://www.gstatic.com https://maps.googleapis.com                             https://*.googleapis.com http://4a3dbfdd6470b7f43a03-1ec0805dd88c137a7d9b221342ef4c8b.r63.cf1.rackcdn.com                             http://pixel.quantserve.com https://secure.quantserve.com http://rules.quantcount.com ssl.p.jwpcdn.com https://js.maxmind.com https://geoip-js.maxmind.com                            https://fullstory.com https://js.hs-scripts.com/5368402.js https://js.hs-analytics.net/analytics/
style-src 'self' 'unsafe-inline' https://diny04oi6alqe.cloudfront.net https://*.typekit.net                             https://*.googleapis.com https://tagmanager.google.com
img-src 'self' https://*.typekit.net https://d2yo5j8385mod6.cloudfront.net https://diny04oi6alqe.cloudfront.net https://d1jbu16z788zgx.cloudfront.net                            https://stats.g.doubleclick.net https://*.gstatic.com https://*.googleapis.com *.bailliegifford.com                             data: jwpltx.com www.google-analytics.com https://bglivemedia.blob.core.windows.net https://geo0.ggpht.com/cbk                            http://pixel.quantserve.com https://pixel.quantserve.com https://track.hubspot.com/__ptq.gif
font-src 'self' https://*.typekit.net http://*.typekit.net https://diny04oi6alqe.cloudfront.net https://fonts.gstatic.com ssl.p.jwpcdn.com data:
frame-src https://*.bailliegifford.com http://www.googletagmanager.com https://www.google.com/recaptcha/ https://servedby.flashtalking.com https://5358203.fls.doubleclick.net                            https://9001729.fls.doubleclick.net/ https://d14ed0t47z3981.cloudfront.net
default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:
"default-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:"
"img-src 'self' https://img.overtake.co.za https://www.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-zmnjotfmnzytnwvhny00m2myltgznzmtngmxzda5mda1n2i0'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' * boxtec.ch *.boxtec.ch *.boxtec.shop boxtec.shop *.boxtec.eu boxtec.eu *.tisnet.ch tisnet.ch telemedia.ch *.telemedia.ch
"default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' *.unitedtraders.com *.unitedtraders.ru *.uttoken.io *.unitedtraders.team *.utchallenge.com *.utconf.ru *.auroraplatform.com *.finderby.net *.fvendor.com mc.yandex.ru *.googleapis.com www.google-analytics.com *.facebook.net *.facebook.com stats.g.doubleclick.net www.googletagmanager.com *.gstatic.com vk.com www.google.com
script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'
"frame-ancestors self *.moneyweb.co.za http://preview.moneyweb-2.instantmagazine.com http://moneyweb-2.instantmagazine.com *.instantmagazine.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.lafonline.de code.jquery.com stats.g.doubleclick.net
frame-src 'self' *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com
"default-src 'self' https://fonts.gstatic.com https: 'unsafe-inline' 'unsafe-eval' blob: data:
"style-src 'self' 'unsafe-inline' *.gac.edu *.gustavus.edu tennisandlifecamps.org www.gstatic.com *.googleapis.com www.reservecloud.com *.curator.io
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://travelplanet.in http://*.travelplanet.in
"frame-ancestors 'self' ien.edu.sa ibs.ien.edu.sa vcr.ien.edu.sa mobile.ien.edu.sa auth.ien.edu.sa moelms.ien.edu.sa vlc.ien.edu.sa
"default-src 'self' *.vistana.com https://vistana-web-static.s3.amazonaws.com/ *.salesforce.com 'unsafe-inline'
img-src 'self' *.vistana.com https://ssl.google-analytics.com http://vistana-web-static.s3.amazonaws.com/ www.google-analytics.com https://www.google.com/ads/ https://bat.bing.com/ http://www.googletagmanager.com https://www.googletagmanager.com http://ajax.googleapis.com https://ajax.googleapis.com stats.g.doubleclick.net https://stats.g.doubleclick.net https://vistana-web-static.s3.amazonaws.com/ https://s3.amazonaws.com/vistana-web-static/ https://cdn.jsdelivr.net
style-src 'self' *.vistana.com https://cdn.jsdelivr.net data: 'unsafe-inline' http://ajax.googleapis.com https://ajax.googleapis.com https://s3.amazonaws.com/vistana-web-static/
font-src 'self' *.vistana.com https://cdn.jsdelivr.net data: 'unsafe-inline' https://s3.amazonaws.com/vistana-web-static/
script-src 'self' *.vistana.com https://ssl.google-analytics.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ https://bat.bing.com/ https://ajax.googleapis.com ajax.googleapis.com https://cdn.jsdelivr.net data: 'unsafe-inline' http://cdnjs.cloudflare.com/ https://s3.amazonaws.com/vistana-web-static/ www.google-analytics.com 'unsafe-eval' www.googletagmanager.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.xpressbet.com *.xpressbetonline.com *.xb-online.com *.youtube.com *.kaltura.com *.twitter.com *.paysafecard.com *.facebook.net *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.typekit.net *.countingdownto.com *.livehelpnow.net *.xbselect.com zz.connextra.com wss:
"defaut-src https: data: 'unsafe-inline' 'unsafe-eval'"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://eand.co:443 https://*.eand.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
form-action 'self' platform.twitter.com syndication.twitter.com va.tawk.to
"frame-ancestors 'self' https://customerfinancing.directcapital-sit.com https://customerfinancing.directcapital2.com https://www.customerfinancing.com https://customerfinancing.directcapital-test1.com https://customerfinancing.directcapital-test2.com"
child-src https: http: 'self' *.facebook.com *.facebook.net usersnap.com load.sumome.com *.sumo.com *.twitter.com *.kxcdn.com d3mvnvhjmkxpjz.cloudfront.net/*
connect-src 'self' sumome.com sumo.com api.hubapi.com forms.hubspot.com *.usersnap.com blob:
script-src https: http: 'self' 'unsafe-eval' 'unsafe-inline' d3mvnvhjmkxpjz.cloudfront.net/* *.facebook.net load.sumome.com *.sumo.com *.twitter.com *.kxcdn.com www.google-analytics.com api.usersnap.com/load/fb92bdd3-36ab-42b8-81ac-295a4bf444cb.js cdn.optimizely.com/js/ edge.quantserve.com/quant.js www.google.com/recaptcha/api.js
style-src https: 'self' 'unsafe-inline' d3mvnvhjmkxpjz.cloudfront.net/* *.facebook.net usersnap.com *.twitter.com load.sumome.com *.sumo.com *.kxcdn.com www.google-analytics.com api.usersnap.com *.googleapis.com"
"frame-ancestors http://www.vistaprint.de https://www.vistaprint.de http://vistaprint.de https://vistaprint.de
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.friendsfirst.ie analytics-eu.clickdimensions.com googleads.g.doubleclick.net platform.twitter.com lptag.liveperson.net lo.v.liveperson.net accdn.lpsnmedia.net lpcdn.lpsnmedia.net static.hotjar.com script.hotjar.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com"
style-src 'self' 'unsafe-inline' http://www.humanamarketingresourcecenter.com https://www.humanamarketingresourcecenter.com https://fonts.googleapis.com https://www.google-analytics.com https://api.tiles.mapbox.com https://gitcdn.github.io http://cdnjs.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.humanamarketingresourcecenter.com https://www.humanamarketingresourcecenter.com https://fonts.googleapis.com https://www.google-analytics.com https://api.tiles.mapbox.com https://gitcdn.github.io http://cdnjs.cloudflare.com https://jstest.authorize.net https://js.authorize.net
img-src 'self' data: http://www.direxxis.net https://www.google-analytics.com *.tiles.mapbox.com https://embed-ssl.wistia.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://bar8.com.br:443 https://*.bar8.com.br:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io nexus-long-poller-test.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com static.intercomassets.com *.tiles.mapbox.com api.amplitude.com app.getsentry.com sentry.io js.logentries.com api.giphy.com api.stripe.com heapanalytics.com meet.intercom.com www.google-analytics.com stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com netdna.bootstrapcdn.com heapanalytics.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com"
"script-src 'unsafe-inline' 'unsafe-eval' https://www.doxlife.in http://rtapi.doxlife.in https://www.google.com https://www.gstatic.com"
"script-src https: data: 'unsafe-inline' 'unsafe-eval' https://*.gs1-germany.de https://*.optimizely.com https://*.googletagmanager.com https://apis.google.com https://connect.facebook.net https://fast.fonts.net https://googleads.g.doubleclick.net https://*.google-analytics.com https://www.etracker.de https://*.etracker.com
style-src https: 'unsafe-inline' https://*.gs1-germany.de https://apis.google.com https://connect.facebook.net https://fast.fonts.net https://googleads.g.doubleclick.net https://*.google-analytics.com https://www.etracker.de https://*.etracker.com
script-src 'self' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://code.jquery.com https://cdn.ravenjs.com https://yastatic.net https://cdn.amplitude.com https://api.sumsub.com https://connect.facebook.net 'sha256-difthzkzjvsdbyitjqhywldjshbuyjzmalrsh0rnqws=' 'sha256-rmvvbwqq1povojhtc1tqgwlc1dlp+vlqst1l+zywyr4=' 'sha256-bhtja/0xcwhgm+2uu6nf4t6ckgkibniuld7uf5e9cak=' 'sha256-hv0yprysxi0egoknwfi8o9iflxpuoih8exwrsbheutq=' 'sha256-q234n60mp6hpiayk101om70ts7mrlp3tvoegl5grmmu=' 'sha256-6qkodl6+w+zrjyxwvs/qowhi/nx5u9pzojxapqvfg8g=' 'sha256-g2lpgdoplek1batwkevmhi5tnts2kktezc1jqdfeu1u=' 'sha256-sxhrxzovimz15bvpkn99n2ioa/qgfsd56q0vygitzhi=' 'sha256-9qvxqd7ebbxgoody65vh1q+yep1n+eqqfxdcc9jfnli=' 'sha256-zhxr2nvkefxzvjdd3jotqz+gsqtdyvujehcrqxif97e=' 'sha256-bl0fvlos5oqw6jkrk75l5meidzsahsk1usrzbeh5mgi=' 'sha256-5zo+wr0het+mnll8uudd9nayjd7bncuvllhcmw8v1+a='
child-src 'self' https://www.google.com  https://api.sumsub.com https://docs.google.com https://www.facebook.com  https://mc.yandex.ru tg:
connect-src 'self' https://mc.yandex.ru https://stats.g.doubleclick.net https://www.google-analytics.com https://sentry.io wss://xena.exchange wss://*.yandex.net https://api.amplitude.com https://api.sumsub.com https://www.tradingview.com https://www.facebook.com https://connect.facebook.net"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' data: *.google.co.id *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.google-analytics.com *.pinterest.com *.twitter.com *.youtube.com cdnjs.cloudflare.com *.inews.id *.disqus.com *.disquscdn.com https://disqus.com https://*.disqus.com https://*.okezone.com https://*.metube.id *.metube.id http://*.inews.id http://cdn.viglink.com/ https://stats.g.doubleclick.net http://*.googlesyndication.com https://*.alexametrics.com http://*.alexametrics.com https://www.googletagservices.com https://www.googletagservices.com https://adservice.google.co.id https://googleads.g.doubleclick.net http://cloudfront-labs.amazonaws.com https://*.doubleclick.net http://*.cloudfront.net http://*.doubleclick.net https://*.googlesyndication.com mobileads.google.com https//placehold.it/ http://*.metube.id/ https://*.metube.id/ http://placehold.it/ https://placehold.it/ https://securepubads.g.doubleclick.net/ https://cc.adingo.jp/ https://sb.scorecardresearch.com/ https://cdn.ampproject.org/ https://*.sindonews.com/ https://*.doubleclick.net/ https://*.subscribers.com/ https://nuri.inews.id https://unpkg.com/ https://static.vidy.com/ https://api.vidy.com/"
"default-src franecki.net *.vavaporn.com *.xcvgdf.party reichelcormier.bid 'self'
script-src trfmxt.com *.trfmxt.com xlnuj.com forsiteid6441.tech franecki.net qkffv.com *.xcvgdf.party forsiteid6346.tech mp-https.info 'unsafe-eval' 'unsafe-inline' 'self'
frame-src vk.com kodik.info streamguard.cc coolstory.cc kodik.biz forsiteid6441.tech *.vavaporn.com forsiteid6346.tech qkffv.com *.bongacams.com
"frame-ancestors 'self' staticxx.facebook.com google-analytics.com googletagmanager.com googletagmanager.com
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://140journos.com:443 https://*.140journos.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors 'self' http://claro.com.ec http://www.claro.com.ec http://m.miclaro.com.ec https://m.miclaro.com.ec http://miclaro.com.ec https://miclaro.com.ec http://www.miclaro.com.ec https://www.miclaro.com.ec"
script-src 'self' 'sha256-+vj9qqjb0xai29nikoo4bbx4zlvvgvar7x7sg9sd274=' 'sha256-vwmr4ulas0t0s0aim+nuwuuxeixeqny7ua1ntueos64=' 'sha256-+ytpr+6+ufjx2kg3xy/8rtvus7g6invn3re18qfsyoe=' 'sha256-yyhdam6ncmkxppcvt+v140uvl5ytrv1mehvhikn886s=' 'sha256-dnm6tjvrzf2i9yv87ykarnniyd7e6hfyvdd1dmonmk0=' https://*.kissmetrics.com https://static.olark.com https://nrpc.olark.com https://api.olark.com https://assets.olark.com https://static.hotjar.com https://static.hotjar.com https://script.hotjar.com https://js.stripe.com/v2/ https://connect.facebook.net https://www.google-analytics.com https://cdnjs.cloudflare.com/ajax/libs/es6-shim/0.35.3/es6-shim.min.js https://cdn.auth0.com/w2/auth0-7.4.min.js https://code.jquery.com/jquery-3.1.1.slim.min.js https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js https://widget.trustpilot.com/bootstrap/v5/tp.widget.sync.bootstrap.min.js
frame-src https://static.olark.com https://vars.hotjar.com https://js.stripe.com https://widget.trustpilot.com
style-src 'self' https://static.olark.com https://fonts.googleapis.com 'unsafe-inline'
img-src 'self' https://insights.hotjar.com https://static.hotjar.com https://static.hotjar.com https://www.google-analytics.com * data: https:
font-src 'self' https://static.hotjar.com https://static.hotjar.com themes.googleusercontent.com https://fonts.gstatic.com data:
connect-src 'self' https://nrpc.olark.com https://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com https://*.my-prtg.com https://*.eu.auth0.com https://*.paessler.com https://*.kissmetrics.com https://api.statuspage.io https://sentry.io wss:
script-src 'strict-dynamic' 'nonce-mjrlnwmymdqtzwriny00zwm5lwe3oditmjqwmmi5nmrhmmzk' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.silnet.pl www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.erecruiter.pl *.google.com *.gstatic.com *.facebook.com *.facebook.net *.onesignal.com onesignal.com *.googleapis.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.erecruiter.pl *.onesignal.com onesignal.com ssl.silnet.pl
img-src 'self' data: ssl.silnet.pl *.doubleclick.net www.google-analytics.com *.erecruiter.pl *.google.com *.google.pl *.facebook.com *.gstatic.com *.googleapis.com *.onesignal.com onesignal.com
frame-src 'self' *.google.com google.com *.facebook.com *.onesignal.com onesignal.com *.youtube.com
connect-src 'self' *.onesignal.com onesignal.com *.google-analytics.com"
sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-orientation-lock allow-pointer-lock
"default-src 'unsafe-inline' 'self' https://*.paypal.com https://api.paypal.com https://eu.account.amazon.com https://*.amazon.com
style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://netdna.bootstrapcdn.com
script-src 'unsafe-eval' 'unsafe-inline' 'self' data:  https://payments.amazon.de https://payments-de.amazon.com https://payments-de-sandbox.amazon.com https://static-eu.payments-amazon.com https://api.paypal.com https://www.paypalobjects.com https://api.instagram.com https://scontent.cdninstagram.com https://payments.amazon.de https://static-eu.payments-amazon.com https://googleads.g.doubleclick.net https://forms.aweber.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com
font-src 'self' data: https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://fonts.gstatic.com
img-src 'self' data: https://images-na.ssl-images-amazon.com/ https://images-na.ssl-images-amazon.com https://*.cloudfront.net https://www.it-recht-kanzlei.de https://scontent.cdninstagram.com https://forms.aweber.com https://www.google.com https://www.google.de
connect-src 'self' data: https://coin-eu.amazonpay.com https://payments.amazon.de https://eu.account.amazon.com https://www.paypalobjects.com https://*.paypal.com https://api.paypal.com https://payments.amazon.de
frame-src 'self' data: https://eu.account.amazon.com https://amazon.com https://payments.amazon.de/ https://www.paypalobjects.com https://*.paypal.com"
"script-src 'unsafe-eval' 'unsafe-inline' 'self' https://serverapi.arcgisonline.com *.cornexchangetest.gov.uk *.exetercornexchange.co.uk *.facebook.net *.google-analytics.com *.siteimprove.com https://siteimproveanalytics.com *.spektrix.com *.twitter.com *.twimg.com https://content.govdelivery.com *.whoson.com
style-src 'self' 'unsafe-inline' https://serverapi.arcgisonline.com *.twitter.com
img-src 'self' data: *.twitter.com *.twimg.com *.cornexchangetest.gov.uk *.exetercornexchange.co.uk  *.google-analytics.com https://content.govdelivery.com https://serverapi.arcgisonline.com *.siteimprove.com *.whoson.com
connect-src *.cornexchangetest.gov.uk *.exetercornexchange.co.uk 'self' *.google-analytics.com *.siteimprove.com *.whoson.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.google-analytics.com use.typekit.net
font-src 'self' 'unsafe-inline' use.typekit.net fonts.typekit.net data:
img-src 'self' 'unsafe-inline' p.typekit.net www.google-analytics.com data:
connect-src 'self' 'unsafe-inline' www.google-analytics.com performance.typekit.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.abtasty.com cdnjs.cloudflare.com cdn.lightwidget.com cdn.tinymce.com *.concours-advance.fr *.doubleclick.net dpm.zebestof.com e.issuu.com *.facebook.com *.facebook.net *.google.com *.google.fr *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com ib.adnxs.com *.ionis-group.com *.ionis-group.pro lightwidget.com maxcdn.bootstrapcdn.com onesignal.com *.onesignal.com platform.linkedin.com platform.twitter.com tag.aticdn.net *.tradelab.fr *.twimg.com *.twitter.com use.typekit.net *.sharethis.com *.vine.co wufoo.com *.wufoo.com *.wufoo.eu *.youtube.com *.ytimg.com
child-src https://*.n26.com https://n26.com https://www.youtube.com https://boards.greenhouse.io
img-src 'self' images.ctfassets.net images.contentful.com https://cdn.number26.de https://usage.trackjs.com https://sc-collector.n26.com https://*.greenhouse.io data: *
script-src 'self' 'unsafe-inline' https://n26-trusted.n26.com https://cdn.polyfill.io https://www.youtube.com https://s.ytimg.com https://boards.greenhouse.io *
script-src 'self' 'unsafe-inline' data: *.googleapis.com *.twitter.com *.facebook.net www.googleadservices.com google.com google.co.uk use.fontawesome.com
"script-src 'self' 'unsafe-eval' app.overdrive.io cdn.overdrive.io cdn-use.overdrive.io cdn-euw.overdrive.io cdn.polyfill.io *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.google-analytics.com query.yahooapis.com *.youtube-nocookie.com *.youtube.com platform.twitter.com cdn.syndication.twimg.com cdn.ravenjs.com js.live.net *.zopim.com  'nonce-cca5b15687e9ab88c269ed5e83360f02'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://play2.qbrick.com https://imasdk.googleapis.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://android.com https://windowsphone.com https://qbrick.com https://publisher.qbrick.com https://professional.player.qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk https://www.danskebank.dk https://danid.dk *.danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com https://syndication.twitter.com
frame-src 'self' https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk https://danid.dk *.danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com https://cloud-emea.analytics-egain.com *.investis.com
"default-src 'self' fonts.googleapis.com fonts.gstatic.com piwik.bzga.de www.bzga.de
img-src 'self' www.bzga.de service.bzga.de piwik.bzga.de data:
script-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.optmstr.com https://*.optmnstr.com https://*.onesignal.com https://certify.gpwa.org 'nonce-0cdebc1a52c8519c1f55192e8bc9a94d3eac51b5' 'nonce-e3ce36d2eeecb8d903eeb4be6af815a71f98a9e1' 'nonce-bf37f213128db9d27056d50279045b85c4526013' 'nonce-24ac4e448e44f4727a3c4b663ab87a19c6154f54' 'nonce-bff783cbef0c4342e404e6e4080cb1f1c4d1b47c' 'nonce-2c47bfda44392e3337631bc7696b0cdea6c1800c' 'nonce-4d3759e4471872951829f62f396a447b78f6e05f'
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com loadstart.net:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.google.com www.gstatic.com www.google-analytics.com ajax.aspnetcdn.com cdnjs.cloudflare.com *.zendesk.com *.zopim.com cdn.polyfill.io api.payway.com.au *.zdassets.com wedcrm.com:8080 crm-widgets.easyweddings.com.au easyweddings-framework-v4.s3.amazonaws.com supplier-website-assets.s3.amazonaws.com fast.wistia.net
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com cdnjs.cloudflare.com easyweddings-framework-v4.s3.amazonaws.com supplier-website-assets.s3.amazonaws.com
img-src 'self' data: blob: www.google-analytics.com *.zopim.com *.zopim.io *.zdassets.com stats.g.doubleclick.net easyweddings-framework-v4.s3.amazonaws.com images.easyweddings.com.au ew-image-global.s3.amazonaws.com supplier-website-assets.s3.amazonaws.com easyweddings-framework-v5.s3.amazonaws.com
media-src *.zopim.com *.zdassets.com easyweddings-framework-v4.s3.amazonaws.com supplier-website-assets.s3.amazonaws.com artemisvoicestorage.s3.amazonaws.com
font-src 'self' data: www.google-analytics.com maxcdn.bootstrapcdn.com fonts.gstatic.com cdnjs.cloudflare.com *.zopim.com *.zdassets.com supplier-website-assets.s3.amazonaws.com
connect-src 'self' wedcrm.com:8080 *.zendesk.com wss://*.zopim.com *.zdassets.com
"frame-ancestors 'self' *.vice.com *.viceland.com viceland.com viceland.nl vicesports.nl vicemoney.nl vicebelgique.com"
img-src 'self' *.gstatic.com *.google-analytics.com *.g.doubleclick.net *.googleapis.com data:
default-src 'self' *.google-analytics.com https://stats.g.doubleclick.net *.googleapis.com *.youtube.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'"
"connect-src https://sentry.io https://dokusho-ojikan.jp https://api.dokusho-ojikan.jp https://profile-api.ameba.jp https://payment.amebame.com https://sub.payment.amebame.com https://s.amebame.com https://api.search.ameba.jp https://ssl-stat.amebame.com https://bc.amanad.adtdp.com https://api.agp.amebame.com https://ad.pr.ameba.jp https://ln.ameba.jp https://track.amebame.com https://d-money.jp https://s.point.amebame.com https://ln.ameba.jp/fuse.js https://stat100.ameba.jp https://api.point.amebame.com https://api.om.dokusho-ojikan.jp https://api.ameba-pay.ca-pf.org"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.books24x7.com *.skillport.com *.skillsoft.com *.twitter.com skillsoft.d2cdn.net blob: data: res:
style-src 'self' 'unsafe-inline' *.books24x7.com *.skillport.com *.skillsoft.com *.twitter.com *.fonts.googleapis.com
media-src  'self' *.books24x7.com *.skillport.com *.skillsoft.com *.itpolecat.com blob:
frame-src 'self' *.books24x7.com *.skillport.com *.skillsoft.com *.twitter.com data:
connect-src 'self' *.books24x7.com *.skillport.com *.skillsoft.com data: *.twitter.com skillsoft.d2cdn.net"
"default-src 'self' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
connect-src * 'self' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
img-src data: 'self' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com http://* https://*
style-src 'self' 'unsafe-inline' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
font-src 'self' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com data: https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
frame-src 'self' https://cdn.icoindex.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://rec.smartlook.com https://rec.smartlook.com http://rec2.smartlook.com https://rec2.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com https://www.google.com https://www.gstatic.com https://icoindex.disqus.com https://icoindex1.disqus.com https://icoindex-preview1.disqus.com https://icoindex-dev1.disqus.com https://c.disquscdn.com https://disqus.com https://links.services.disqus.com https://disqusads.com http://www.youtube.com https://www.youtube.com http://player.vimeo.com https://player.vimeo.com http://www.facebook.com https://www.facebook.com http://www.dailymotion.com https://www.dailymotion.com http://player.twitch.tv https://player.twitch.tv http://emb.d.tube https://emb.d.tube http://framatube.org https://framatube.org http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://www.googletagmanager.com https://www.googletagmanager.com http://unpkg.com https://unpkg.com https://icoindex.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://widgets.twimg.com https://platform.twitter.com https://connect.facebook.net https://connect.facebook.com https://ssl.google-analytics.com http://www.google-analytics.com https://js-agent.newrelic.com https://bam.nr-data.net https://use.typekit.com https://manualuploads.s3.amazonaws.com https://oss.maxcdn.com https://apis.google.com https://scontent.xx.fbcdn.net data:
style-src 'self' 'unsafe-inline' https://twibbon.blob.core.windows.net https://manualuploads.s3.amazonaws.com https://netdna.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com
img-src 'self' https://www.facebook.com https://staticxx.facebook.com https://scontent.xx.fbcdn.net https://static.xx.fbcdn.net https://graph.facebook.com https://web.facebook.com https://syndication.twitter.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.gstatic.com https://ssl.gstatic.com https://manualuploads.s3.amazonaws.com https://twibbon.s3.amazonaws.com http://twibbon.s3.amazonaws.com https://coverjunction.s3.amazonaws.com http://coverjunction.s3.amazonaws.com https://twibbon.blob.core.windows.net https://stormideaseu.blob.core.windows.net https://p.typekit.net https://stats.g.doubleclick.net https://*.facebook.com http://*.facebook.com http://*.akamaihd.net https://*.akamaihd.net http://*.fbcdn.net https://*.fbcdn.net https://*.xx.fbcdn.net http://*.xx.fbcdn.net http://*.twimg.com https://*.twimg.com data:
frame-src 'self' https://www.facebook.com http://www.facebook.com https://m.facebook.com http://m.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com https://*.facebook.com http://*.facebook.com https://www.youtube.com https://accounts.google.com https://platform.twitter.com http://platform.twitter.com https://apis.google.com data:
font-src 'self' https://use.typekit.com https://fonts.gstatic.com data
script-src 'self' 'nonce-w6uysawjgwn1xpgscxcat9l6wcjslsgfo6zinkcshis=' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.twitter.com *.facebook.net *.youtube.com s.ytimg.com t.co static.ads-twitter.com analytics.twitter.com www.googleadservices.com bat.bing.com connect.facebook.net www.facebook.com sp.analytics.yahoo.com s.yimg.com *.doubleclick.net www.google.ru alb.reddit.com *.hotjar.com *.opendns.com sjs.bizographics.com *.ads.linkedin.com
script-src 'self' *.getnetset.com https://ajax.googleapis.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://sjs.bizographics.com https://*.linkedin.com https://*.olark.com https://*.pardot.com 'unsafe-inline' 'unsafe-eval' blob:
media-src https https://*.olark.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net blob:
sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals"
"default-src 'self' googleads.g.doubleclick.net analytics.google.com *.sitelock.com
script-src 'self' 'unsafe-inline' data: pagead2.googlesyndication.com storage.googleapis.com googleads.g.doubleclick.net ajax.googleapis.com
img-src 'self' data: storage.googleapis.com pagead2.googlesyndication.com
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.tm https://*.yandex.tm static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.tm *.yandex.tm
font-src 'self' https://yastatic.net zen.yandex.tm static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.tm https://passport.yandex.tm wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.tm *.yandex.tm
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.tm https://*.yandex.tm *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.tm *.yandex.tm
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.tm https://www.yandex.tm https://pass.yandex.tm https://mc.yandex.tm zen.yandex.tm an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.tm www.yandex.tm suggest.yandex.tm
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.tm static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
"frame-ancestors 'self' intertops.eu www.intertops.eu sblp.intertops.eu sports.intertops.eu poker.intertops.eu casino.intertops.eu classic.intertops.eu lobby.intertops.eu:2072"
script-src 'self' 'unsafe-inline' static3.santander.pl static3.bzwbk.pl arka.pl *.googletagmanager.com *.google-analytics.com fundusze.santandertfi.pl
img-src 'self' static3.santander.pl static3.bzwbk.pl arka.pl *.google-analytics.com stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' static3.santander.pl static3.bzwbk.pl fonts.googleapis.com arka.pl fonts.gstatic.com
font-src 'self' fonts.googleapis.com fonts.gstatic.com static3.santander.pl arka.pl
\t\t\tconnect-src 'self' wss://*.intercom.io https://*.intercom.io https://api.amplitude.com https://api.mixpanel.com https://www.google-analytics.com wss://*.zopim.com
\t\t\tfont-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com https://maxcdn.bootstrapcdn.com https://v2.zopim.com
\t\t\tscript-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.adroll.com https://*.linkedin.com https://*.whatfix.com https://whatfix.com https://*.zopim.com https://a.quora.com https://api.mixpanel.com https://cdn.amplitude.com https://cdn.mxpnl.com https://code.jquery.com https://connect.facebook.net https://dnn506yrbagrg.cloudfront.net https://googleads.g.doubleclick.net https://js.intercomcdn.com https://px.ads.linkedin.com https://richhollis.github.io https://snap.licdn.com https://widget.intercom.io https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com
\t\t\tstyle-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com
\t\t\tframe-src https://*.whatfix.com https://whatfix.com https://bid.g.doubleclick.net https://player.vimeo.com https://www.dailymotion.com https://www.youtube.com https://www.surveymonkey.com"
"script-src 'strict-dynamic' 'nonce-rand0m123' 'unsafe-inline' http: https:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://brightthemag.com:443 https://*.brightthemag.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
object-src 'self' blob: https://*.doubleclick.net https://*.hotjar.com https://*.bazaarvoice.com https://*.worldpay.com/
frame-src 'self' blob: https://*.doubleclick.net https://*.hotjar.com https://*.bazaarvoice.com https://*.worldpay.com https://*.trustarc.com https://*.facebook.com https://*.devatics.io https://*.addthis.com https://*.google.com https://*.youtube.com https://fragrance-finder.mesh.mx https://*.tradedoubler.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.googleapis.com https://*.feefo.com https://*.doubleclick.net https://*.googletagmanager.com https://*.googleadservices.com https://*.peerius.com https://*.hotjar.com https://*.google-analytics.com https://*.truste.com https://*.trustarc.com https://*.facebook.net https://*.facebook.com https://*.bazaarvoice.com https://*.worldpay.com  https://*.google.com https://*.devatics.io https://*.devatics.com https://*.cloudflare.com https://*.addthis.com https://*.addthisedge.com https://*.zendesk.com https://*.zdassets.com https://*.gstatic.com https://*.zopim.com https://*.aswatson.net https://*.serving-sys.com https://*.adform.net https://*.ads-twitter.com https://*.newrelic.com https://*.bing.com https://*.ascend.ai https://cdn.optimizely.com https://*.nr-data.net https://*.twitter.com https://*.co-buying.com
connect-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.feefo.com https://*.hotjar.com https://*.bazaarvoice.com https://*.worldpay.com https://*.justshoutgfs.com https://*.addthis.com https://*.fragrancesoftheworld.com https://*.ovolab.com https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.serving-sys.com https://*.facebook.com https://*.twitter.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://*.bazaarvoice.com https://*.worldpay.com https://*.revieve.com https://*.fontawesome.com
font-src 'self' data: https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.hotjar.com https://*.theperfumeshop.com https://*.zopim.com https://*.fontawesome.com https://*.uk.aswatson.net https://*.tradedoubler.com
img-src 'self' https: data: blob: https://*.theperfumeshop.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dev.reconyx.com *.reconyx.com *.jquery.com *.googleapis.com *.bootstrapcdn.com www.gstatic.com *.google.com *.vimeo.com *.vimeocdn.com www.google-analytics.com *.authorize.net ws://localhost:*
default-src 'self' 'unsafe-inline' 'unsafe-eval' wss://localhost:8181 ws://localhost:* https://localhost:41951 *.dev.reconyx.com *.reconyx.com *.googleapis.com *.bootstrapcdn.com *.gstatic.com *.google.com *.vimeo.com *.vimeocdn.com www.google-analytics.com *.authorize.net *.jquery.com
img-src 'self' * blob: data: images.reconyx.com *.reconyx.com *.authorize.net *.gstatic.com *.googleapis.com *.google.com *.google-analytics.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://stats.spdns.de
img-src 'self' data: https://ssl.gstatic.com/ https://stats.spdns.de
frame-src 'self' https://ssl.gstatic.com https://www.google.com https://www.youtube.com"
"default-src 'self' wss://*.hotjar.com *.learningtree.com *.learningtree.ca *.learningtree.co.uk *.learningtree.se js.calltrk.com *.hotjar.com www.facebook.com prezi.com www.youtube.com *.reembed.com privacyportal.onetrust.com www.google-analytics.com www.google.com www.google.se
font-src 'self' fonts.googleapis.com fonts.gstatic.com cdn.reembed.com
img-src 'self' data: ltre-web.azureedge.net www.googletagmanager.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net www.google.com ltre-web-img.azureedge.net img.youtube.com i.ytimg.com cdn.cookielaw.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.calltrk.com *.hotjar.com *.incontact.com s.reembed.com www.googletagmanager.com www.google-analytics.com connect.facebook.net s.ytimg.com *.reembed.com cdn.cookielaw.org www.googleadservices.com googleads.g.doubleclick.net ajax.googleapis.com bat.bing.com sjs.bizographics.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.reembed.com cdn.cookielaw.org
script-src 'self' https: https://code.jquery.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cdn.fontawesome.com 'sha256-vunusj59bpcpw62hm2jg/hcygiqopn3nqgvnxqpu+ry=' 'nonce-mbeujeldy1axwbtju3rec6iezhg9yy3no12bspmlnzy=' 'unsafe-inline'
style-src 'self' https: *.ebarnehage.no https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.googleapis.com 'nonce-mbeujeldy1axwbtju3rec6iezhg9yy3no12bspmlnzy='
img-src 'self' https: data: blob: https://rubber.social
media-src 'self' https: data: https://rubber.social
connect-src 'self' blob: https://rubber.social wss://rubber.social
"default-src 'self' https://www.google-analytics.com www.youtube.com fonts.gstatic.com https://storage.googleapis.com fonts.googleapis.com lh3.googleusercontent.com
img-src 'unsafe-inline' 'self' https://storage.googleapis.com lh3.googleusercontent.com https://www.google-analytics.com data:
script-src 'self' 'unsafe-inline' https://s.ytimg.com https://www.google-analytics.com/analytics.js https://www.youtube.com/iframe_api https://www.googletagmanager.com/gtag/js ajax.googleapis.com www.gstatic.com
"child-src *.criteo.com *.doubleclick.net *.dynad.net *.facebook.com *.hotjar.com *.kissmetrics.com *.marketo.com *.omniture.com *.pagseguro.uol.com.br *.rm.uol.com.br *.tailtarget.com *.uol.com *.uol.com.br *.youtube.com https://www.google.com *.blip.ai data: 'self'
connect-src *.hotjar.com *.pagseguro.com.br *.uol.com.br wss://ws.0mn.io https: wss: 'self'
media-src *.uol.com.br *.pagseguro.com.br data: 'self'
object-src *.uol.com.br *.pagseguro.com.br data: 'self'
font-src *.pagseguro.uol.com.br *.pagseguro.com.br *.uol.com *.uol.com.br *.imguol.com.br *.gstatic.com *.hotjar.com https://imguol.com.br data: 'self'
img-src *.google.com *.google-analytics.com *.google.com.br *.facebook.com *.imguol.com *.uol.com *.uol.com.br *.pagseguro.com.br *.turn.com *.atdmt.com *.scorecardresearch.com *.ytimg.com *.triggit.com *.doubleclick.net *.googleadservices.com *.xg4ken.com *.youtube.com *.hotjar.com *.kissmetrics.com *.tailtarget.com *.bing.com https://imguol.com https://imguol.com.br trg.adilligo.com takenetomni.blob.core.windows.net data: 'self'
script-src *.jsuol.com.br *.googleadservices.com *.googletagmanager.com *.ampproject.org *.ytimg.com *.google-analytics.com *.google.com *.doubleclick.net *.simg.uol.com.br *.uol.com *.uol.com.br *.pagseguro.com.br *.facebook.net *.criteo.net *.criteo.com *.xg4ken.com *.dynad.net *.marketo.com *.hotjar.com *.jsdelivr.net *.kissmetrics.com *.tailtarget.com *.bing.com https://pagseguro.info https://pag.ae https://imguol.com.br https://www.gstatic.com about: 'self' 'unsafe-inline' 'unsafe-eval'
style-src *.uol.com *.pagseguro.uol.com.br *.pagseguro.com.br *.simg.uol.com.br *.ytimg.com *.marketo.com https://imguol.com.br 'self' *.google.com 'unsafe-inline'"
connect-src https://trc.taboola.com https://sockjs.pusher.com https://*.pinterest.com wss://ws.pusherapp.com wss://*.intercom.io https://*.intercom.io https://api-iam.intercom.io http://*.hotjar.com  ws://*.hotjar.com wss://*.hotjar.com https://wikibuy.zendesk.com https://*.doubleclick.net https://apps.rokt.com https://trk.shophermedia.net https://*.fullstory.com https://api.segment.io https://nrpc.olark.com wss://ws.ivf-dev.com wss://ws.wikibuy.com https://*.ivaws.com https://*.ivf-dev.com https://*.wikibuy.com https://ivf-dev.com https://wikibuy.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://*.akamaihd.net
script-src https://stats.pusher.com https://*.gstatic.com https://*.stripe.network https://roktcdn1.akamaized.net   data: blob: 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypalobjects.com https://*.criteo.com https://*.braintreegateway.com https://*.quora.com https://*.getvero.com http://*.hotjar.com https://*.hotjar.com https://*.outbrain.com https://*.cloudfront.net https://apps.rokt.com https://adservice.google.com https://*.yahoo.com https://www.fullstory.com https://www.googleadservices.com https://www.google-analytics.com https://s.yimg.com https://trc.taboola.com https://cdn.taboola.com https://cstpersle.com https://s.pinimg.com https://*.googlesyndication.com https://*.hotjar.com https://*.olark.com https://*.google.com https://*.stripe.com https://js.intercomcdn.com https://assets.customer.io https://*.ivaws.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://*.segment.com https://maps.googleapis.com https://static.criteo.net https://widget.intercom.io https://*.wistia.com https://*.wistia.net https://*.litix.io
img-src 'self' https://*.googleapis.com https://themoneymanual.servecvr.com https://*.taboola.com https://apps.rokt.com http://t.thepennyhoarder.com https://*.go2cloud.org https://*.intercomcdn.com https://*.cloudfront.net https://*.paypal.com https://static.intercomassets.com https://cvs.com https://*.kohlsimg.com data: https://*.medium.com https://*.macysassets.com https://help.wikibuy.com https://trk.shophermedia.net https://*.ytimg.com https://*.pinterest.com https://*.quora.com https://*.google.com https://*.doubleclick.net https://www.google-analytics.com https://log.olark.com http://*.hotjar.com https://*.hotjar.com https://www.facebook.com https://t.afftrackr.com/ https://*.gstatic.com http://*.images-amazon.com https://q.stripe.com https://track.customer.io https://logo.clearbit.com http://*.ssl-images-amazon.com https://*.ssl-images-amazon.com https://*.amazon.com http://*.amazon.com https://imageproxy.ivaws.com http://imageproxy.ivaws.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://cdn.ivf-dev.com https://cdn.ivaws.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://cstpersle.com http://*.outbrain.com
style-src 'self' 'unsafe-inline' https://static.olark.com https://fonts.googleapis.com https://assets.zendesk.com https://cdn.ivaws.com https://*.wistia.com https://*.wistia.net https://apps.rokt.com https://*.litix.io
font-src 'self' data: https://js.intercomcdn.com https://cdn.ivaws.com https://themes.googleusercontent.com
child-src https://c.paypal.com https://www.youtube.com https://*.criteo.com https://*.doubleclick.net http://*.hotjar.com https://*.hotjar.com https://*.google.com https://static.olark.com https://staticxx.facebook.com https://js.stripe.com https://assets.zendesk.com https://apps.rokt.com https://*.facebook.com https://tautt.zendesk.com https://widget.intercom.io https://*.wistia.com https://*.wistia.net https://*.litix.io
media-src 'self' data: blob: https://*.wistia.com https://*.wistia.net https://apps.rokt.com https://*.litix.io https://*.akamaihd.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.tsviewer.com static.tsviewer.com www.gstatic.com www.google.com www.google-analytics.com
script-src 'nonce-x/mvmopo9jalpaht68myc5mzgn/cpy35idxwmbygpqi=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* ajax.googleapis.com ajax.aspnetcdn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com vjs.zencdn.net www.bvz-frankfurt.info blob:
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com cdnjs.cloudflare.com ajax.googleapis.com vjs.zencdn.net
img-src 'self' data: *.bvz-frankfurt.info *.dmde.info cdnjs.cloudflare.com ajax.googleapis.com www.google-analytics.com
script-src 'self' 'nonce-jx3gb1h9c+vuscq8ul4m' www.google-analytics.com www.google.com www.gstatic.com cdnjs.cloudflare.com az416426.vo.msecnd.net
img-src 'self' www.google-analytics.com stats.g.doubleclick.net www.gstatic.com
connect-src 'self' api.pwnedpasswords.com api.haveibeenpwned.com www.google-analytics.com stats.g.doubleclick.net dc.services.visualstudio.com
script-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://ajax.googleapis.com https://www.google-analytics.com https://*.crazyegg.com https://s3.amazonaws.com https://content.govdelivery.com 'nonce-52a58c7fadc04f249db7371bf035de3b' https://eastsussex.gov.uk
"default-src 'self' *.azku.ru *.googlesyndication.com *.doubleclick.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru yandex.ru yandex.st *.yandex.st *.yandex.net *.yastatic.net yastatic.net *.yandex.fr *.yandex.ua *.yandex.by *.yandex.kz *.yandex.com yandex.com ymetrica.com ymetrica1.com ymetrica2.com ymetrica3.com *.jsdelivr.net *.webvisor.com *.webvisor.org *.yadro.ru d31j93rd8oukbv.cloudfront.net *.google.ru *.googleapis.com *.google.com *.doubleclick.net *.googlesyndication.com *.gstatic.com gstatic.com *.google-analytics.com google-analytics.com *.googletagservices.com *.googleadservices.com *.facebook.com ok.ru *.ok.ru vk.com userapi.com *.vk.com googletagmanager.com *.googletagmanager.com *.google.com.ua *.google.by *.google.lv *.google.de *.google.fi *.google.ee *.google.com.ie *.google.co.in *.google.com.tj *.google.com.br *.google.com.tm *.google.hu *.google.mn *.google.ch *.google.se *.google.it *.google.be *.google.com.th *.google.no *.google.at *.google.pt *.google.ae *.google.com.sg *.google.com.eg *.google.dk *.google.cz *.google.gr *.google.fr *.google.ie *.google.lt *.google.kz *.google.tm *.google.am *.google.ca *.google.ge *.google.nl *.google.pl *.google.bg *.google.com.cy *.google.az *.google.md *.google.co.uk *.google.com.tr *.google.es *.google.co.uz *.google.co.il *.google.co.th *.google.kg
frame-src 'self' *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st yastatic.net ymetrica.com ymetrica1.com ymetrica2.com ymetrica3.com d31j93rd8oukbv.cloudfront.net yandex.fr yandex.ua yandex.by yandex.kz *.google.com *.google.ru *.gstatic.com gstatic.com *.googleapis.com accounts.goolgle.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com youtube.com *.youtube.com *.yandexadexchange.net *.googletagservices.com *.yahoo.com *.facebook.com ok.ru *.ok.ru vk.com userapi.com *.vk.com
style-src 'self' 'unsafe-inline' *.yandex.net *.yandex.ru *.doubleclick.net *.googleapis.com *.gstatic.com *.googlesyndication.com
object-src 'self' *.azku.ru *.doubleclick.net *.gstatic.com *.googlesyndication.com *.yastatic.net yastatic.net *.googleapis.com *.macromedia.com
font-src 'self' data: *.yastatic.net yastatic.net *.googleapis.com *.gstatic.com *.googlesyndication.com *.googleadservices.com themes.googleusercontent.com
connect-src 'self' *.azku.ru wss://azku.ru yandex.ru *.yandex.ru *.yandex.net *.yandex.ua *.yandex.by *.yandex.kz *.yandex.fr *.yandex.com.tr yandex.com.tr *.yandex.com yandex.com yandex.fr yandex.ua yandex.by yandex.kz ymetrica.com ymetrica1.com ymetrica2.com ymetrica3.com d31j93rd8oukbv.cloudfront.net yandex.st *.yandex.st yastatic.net *.webvisor.com *.webvisor.org *.google-analytics.com google-analytics.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.doubleclick.net youtube.com *.youtube.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://onesignal.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.onesignal.com/ https://onesignal.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://4vpr.ru https://www.googletagservices.com https://adservice.google.ru yastatic.net vk.com userapi.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru yandex.net *.yandex.net
object-src 'self' https://4vpr.ru https://*.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.yandex.ru https://*.yandex.ru yandex.ru
style-src 'self' 'unsafe-inline' https://4vpr.ru *.googleapis.com *.gstatic.com https://fonts.googleapis.com https://yastatic.net/ https://*.gstatic.com google.com *.google.com
img-src * data: https://4vpr.ru https://*.2mdn.net *.2mdn.net https://*.doubleclick.net https://*.googleapis.com *.googleapis.com https://*.googlesyndication.com https://*.gstatic.com awaps.yandex.ru *.gstatic.com
frame-src 'self' https://yastatic.net www.youtube.com https://*.yandexadexchange.net yandexadexchange.net *.yandex.ru yandex.ru https://vk.com https://*.vk.com https://www.youtube.com *.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com http://*.googleadservices.com https://*.googleadservices.com https://*.googlesyndication.com *.vk.com vk.com
font-src 'self' https://4vpr.ru * data: https://*.googleapis.com https://*.gstatic.com *.gstatic.com *.googleapis.com
connect-src 'self' https://pagead2.googlesyndication.com  https://4vpr.ru https://www.youtube.com *.googlevideo.com https://*.gstatic.com google-analytics.com *.google-analytics.com yandex.ru *.yandex.ru
script-src 'self' 'unsafe-eval' www.googletagmanager.com www.gstatic.com https://www.google.com/recaptcha/api.js ajax.googleapis.com www.google-analytics.com apis.google.com d2vqbs7xgyce6n.cloudfront.net js.recurly.com api.recurly.com platform.twitter.com syndication.twitter.com *.twimg.com static.ads-twitter.com analytics.twitter.com *.intercom.io js.intercomcdn.com cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net www.googleadservices.com googleads.g.doubleclick.net 'unsafe-inline' 'sha384-mns2hxtrw1r/kffnoydlx1ao4ore/m/wephxlnatzg3gkivtg9mfyj6t8vu0w2ub' 'sha384-3ffvyw5cnftr0omeyjwckequs8f3g+ukjrv1yqrlt/u2zzdhs5nx8vzpkbiqqbzn'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net ajax.googleapis.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net https://vk.com https://uinames.com http://namey.muffinlabs.com www.google.com google.com www.gstatic.com gstatic.com *.hypercomments.com yandex.ru *.yandex.ru *.yandex.net yandex.st
style-src 'self' 'unsafe-inline' yastatic.net www.google.com cdnjs.cloudflare.com www.tinymce.com maxcdn.bootstrapcdn.com *.cloudfront.net *.hypercomments.com *.googleapis.com
font-src 'self' data: www.tinymce.com maxcdn.bootstrapcdn.com *.cloudfront.net *.gstatic.com *.googleapis.com
img-src 'self' bam.nr-data.net maps.google.com maps.googleapis.com www.google-analytics.com   js-agent.newrelic.com csi.gstatic.com https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com maps.googleapis.com www.google-analytics.com  js-agent.newrelic.com bam.nr-data.net csi.gstatic.com docasap.com https: http:"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://busindre.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://fonts.googleapis.com https://fonts.gstatic.com
"default-src 'self' wibu.com *.wibu.com 'unsafe-inline' 'unsafe-eval' *.brighttalk.com *.adobe.com *.wibu.us *.surveymonkey.com *.brightcove.net *.wibu.com *.typo3.org *.googleapis.com www.google-analytics.com *.google.com *.youtube.com *.youtube.de *.ytimg.com *.baidu.com *.pardot.com *.joomag.com *.cleverreach.de *.cloudfront.net *.amazonaws.com *.hubspot.com *.gstatic.com *.iiconsortium.org data:
font-src 'self' data: *.wibu.com *.gstatic.com
frame-src 'self' *.wibu.com www.wibu.com *.googleapis.com www.google-analytics.com *.google.com *.google.de *.google.fr *.google.co.uk *.youtube.com *.youtube.de *.ytimg.com *.joomag.com *.surveymonkey.com *.brighttalk.com"
"default-src http: data: blob: 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com  https://ssl.google-analytics.com https://google-analytics.com  https://www.google-analytics.com https://www.googletagmanager.com  https://fonts.gstatic.com   http://cdn.onlinesnic.ir  https://themes.googleusercontent.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://rafaelraja.com:443 https://*.rafaelraja.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' https: *
"script-src 'strict-dynamic' 'nonce-+rh1qphtu6fvoqpo2lhk2w==' http: https:
default-src data: blob: https: gap: gap-iab: 'unsafe-inline' 'unsafe-eval'
"default-src * 'unsafe-inline' 'unsafe-eval' blob: data:"
script-src 'unsafe-eval'  'self' 'unsafe-inline' maps.googleapis.com  maxcdn.bootstrapcdn.com fonts.googleapis.com oss.maxcdn.com www.maxcdn.com ajax.googleapis.com cdnjs.cloudflare.com cdn.datatables.net code.jquery.com cdn.jsdelivr.net www.googletagmanager.com www.google.com www.google-analytics.com
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com oss.maxcdn.com www.maxcdn.com ajax.googleapis.com cdnjs.cloudflare.com cdn.datatables.net code.jquery.com cdn.jsdelivr.net www.googletagmanager.com www.google.com www.google-analytics.com
script-src https://developers.google.com https://maps.googleapis.com https://maps.google.com https://offerswidget.visa.com https://platform.twitter.com https://apis.google.com googleads.g.doubleclick.net www.google.com  www.google-analytics.com www.googletagmanager.com www.googleadservices.com connect.facebook.net www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'
style-src https://offerswidget.visa.com 'self' 'unsafe-inline' 'unsafe-eval'
img-src https://www.visa.com https://offerswidget.visa.com http://maps.gstatic.com https://syndication.twitter.com chat.eximb.com www.google.com www.google.com.ua www.facebook.com www.google-analytics.com 'self'
frame-src https://www.youtube.com https://bid.g.doubleclick.net https://www.facebook.com https://accounts.google.com https://platform.twitter.com https://www.google.com https://apis.google.com staticxx.facebook.com 'self'
img-src 'self' http: https: blob: 'unsafe-inline'
"default-src 'self' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com
script-src 'self' 'unsafe-inline' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com 'unsafe-eval'
connect-src * 'self' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com http://uploads.intercomusercontent.com https://uploads.intercomusercontent.com http://app.getsentry.com https://app.getsentry.com
img-src data: 'self' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com http://*.amazonaws.com https://*.amazonaws.com http://a.slack-edge.com https://a.slack-edge.com http://*.googleusercontent.com https://*.googleusercontent.com http://*.filestackcontent.com https://*.filestackcontent.com http://uploads.intercomusercontent.com https://uploads.intercomusercontent.com http://static.intercomassets.com https://static.intercomassets.com http://maps.gstatic.com https://maps.gstatic.com http://assets.survicate.com https://assets.survicate.com http://*.atlassian.com https://*.atlassian.com http://*.ui-avatars.com https://*.ui-avatars.com http://secure.gravatar.com https://secure.gravatar.com
style-src 'self' 'unsafe-inline' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com http://use.fontawesome.com https://use.fontawesome.com http://fast.fonts.net https://fast.fonts.net http://fonts.googleapis.com https://fonts.googleapis.com
font-src 'self' data: blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com
object-src blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com
frame-src 'self' blob: http://*.stripe.com https://*.stripe.com http://sunsama.com https://sunsama.com http://*.sunsama.com https://*.sunsama.com http://static.filestackapi.com https://static.filestackapi.com http://*.intercom.io https://*.intercom.io http://*.intercomcdn.com https://*.intercomcdn.com http://intercom-sheets.com https://intercom-sheets.com http://maps.googleapis.com https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.fullstory.com https://*.fullstory.com http://*.githubusercontent.com https://*.githubusercontent.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.mxpnl.com https://*.mxpnl.com http://*.amplitude.com https://*.amplitude.com http://fullstory.com https://fullstory.com http://www.youtube.com https://www.youtube.com
"style-src 'self' 'unsafe-inline' https://static.floridaescapes.co.uk https://fonts.googleapis.com https://s.ytimg.com https://ajax.googleapis.com
script-src 'self' https://nolt.io www.google-analytics.com *.paddle.com 'nonce-nzlhmjc4yzitmwrmzs00zwnilthkyzytotexmtu5njdkymyx'
script-src 'self' data: teachersammy.com *.amazonaws.com *.googleapis.com cdnjs.cloudflare.com *.google.com 'unsafe-eval' 'nonce-22bbb0bc-201c-4901-b255-4a897bcbb52e'
img-src blob: data: https://*.mixamo.com https://*.cloudfront.net https://*.adobe.com https://*.betrad.com https://*.evidon.com 'self'
font-src data: https://*.bootstrapcdn.com https://*.gstatic.com 'self'
style-src https://*.adobe.com https://fonts.googleapis.com https://*.bootstrapcdn.com 'self'
connect-src https://dpm.demdex.net https://bam.nr-data.net https://*.cloudfront.net https://*.adobe.com https://*.mixamo.com 'self'
script-src https://*.adobe.com https://*.evidon.com https://bam.nr-data.net https://*.newrelic.com https://assets.adobedtm.com https://*.cloudfront.net 'unsafe-eval' 'self'"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_us/sdk.js https://platform.twitter.com https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js https://*.inspectlet.com:* http://*.hotjar.com:* https://*.hotjar.com:*
script-src 'unsafe-eval' 'unsafe-inline'  'self' https://3vizt0th.urjohmgbuuwi.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://www.ingbank.pl https://www.ing.pl https://connect.facebook.net
connect-src 'self' wss://finansowaniefaktur.pl https://68h30sep.urjohmgbuuwi.com/api/ https://3vizt0th.urjohmgbuuwi.com
img-src 'self' https://stats.g.doubleclick.net https://www.facebook.com https://www.google.com https://www.google.pl data: blob: www.google-analytics.com
frame-src 'self' https://www.youtube.com livestream.com mediacapture.e-cast.co.nz iframe.dacast.com https://*.google.co.nz https://*.google.com https://w.soundcloud.com
script-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' https://stats.g.doubleclick.net www.google-analytics.com ssl.gstatic.com www.gstatic.com data:
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.biomimicry.net *.google.com *.typekit.net *.googleapis.com *.gstatic.com *.google-analytics.com https://browser-update.org https://cdn.polyfill.io *.stripe.com *.zohopublic.com https://b38.app.box.com
style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com/ https://bnbank.boost.ai/ https://tagmanager.google.com/
connect-src * 'self' https://bnbank.boost.ai https://vimeo.com/api/ https://in.hotjar.com/ https://data.brreg.no https://www.google-analytics.com https://s3-eu-west-1.amazonaws.com/poc.servicemail.com/rc/ https://d2df291ti5v5sq.cloudfront.net/rc/ https://apil1.spinnaker-js.com/
frame-src   'self' https://optimize.google.com https://*.evry.com https://www.lekalkulator.no https://www.sb1finans.no/ https://nettbank.bnbank.no/ https://www.youtube.com/ https://player.vimeo.com/ https://vars.hotjar.com/ https://track.adform.net/
"frame-ancestors 'self' https://*.leetcode.com https://leetcode.com https://*.leetcode-cn.com https://leetcode-cn.com https://*.lingkou.com https://lingkou.com https://tongji.baidu.com https://www.growingio.com https://*.leetcode.pro https://leetcode.pro"
"default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data:
script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.dropbox.com/static/api/1/dropins.js https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js https://ssl.google-analytics.com/ga.js https://cdn.mxpnl.com/libs/mixpanel-2.1.min.js https://connect.facebook.net/en_us/all.js https://platform.twitter.com/widgets.js https://syndication.twitter.com/ https://gist.github.com/ https://hackpad.tw/ 'nonce-a03ea618252b0187436cf1abe5f00a9a23f4a507'
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.mouseflow.com cdn.polyfill.io connect.facebook.net graph.facebook.com *.youtube.com ajax.googleapis.com code.angularjs.org s.ytimg.com www.google-analytics.com optimize.google.com *.newrelic.com *.nr-data.net
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com optimize.google.com fonts.googleapis.com
img-src 'self' data: dabei.sebastian-kurz.at *.facebook.com *.ytimg.com www.google-analytics.com optimize.google.com scontent.cdninstagram.com *.fbcdn.net
connect-src 'self' dabei.sebastian-kurz.at *.facebook.com o2.mouseflow.com *.newrelic.com www.google-analytics.com
script-src https: http: 'unsafe-eval' 'unsafe-inline'
"default-src 'self' *.youtube.com youtube.com fonts.googleapis.com *.gstatic.com nd.neufund.org *.cloudflare.com *.google-analytics.com platform.neufund.org 'unsafe-inline' 'unsafe-eval'"
"frame-ancestors 'self' *.westcottcourses.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com"
"default-src data: 'self' 'unsafe-inline' 'unsafe-eval' haysite.am *.haysite.am *.googleapis.com *.gstatic.com *.google.com *.google.ru *.rambler.ru *.yadro.ru *.mail.ru
script-src 'unsafe-inline' 'unsafe-eval' haysite.am *.haysite.am *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.ru *.googlesyndication.com https://*.googlesyndication.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.nextgame.ru http://*.nextgame.ru *.mail.ru
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: offers.startstackin.com wp-rocket.me wp-rocket.helpscoutdocs.com cdnjs.cloudflare.com ajax.cloudflare.com *.cloudflare.com *.google.ie *.google.co.uk ajax.googleapis.com wss://*.hotjar.com *.hotjar.com 4svb9wqtsz-dsn.algolia.net *.algolianet.net *.algolianet.com i3w9h5v2.stackpathcdn.com *.convertexperiments.com  legacyshield-content.amp.vg snap.licdn.com px.ads.linkedin.com *.quotacy.com *.myfonts.net *.soundcloud.com code.jquery.com gtrk.s3.amazonaws.com *.googleusercontent.com *.elegantthemes.com www.elegantthemes.com s.w.org fonts.googleapis.com *.trcknow.com https://s3.amazonaws.com https://www.trcknow.com yoast.com cdn.polyfill.io wss://*.intercom.io *.intercom.io *.intercomcdn.com *.intercomassets.com connect.facebook.net s.pinimg.com *.pinterest.com local.quotacy.com *.quotacy.com *.googleapis.com *.google.com *.google-analytics.com cdn.jsdelivr.net www.googleadservices.com *.optimizely.com *.typekit.net widget.trustpilot.com *.youtube.com fonts.gstatic.com i.ytimg.com script.crazyegg.com www.googletagmanager.com *.facebook.com *.doubleclick.net *.cloudfront.net *.gstatic.com affiliate.bbtrcker.com myfinance.go2cloud.org *.myfinance.com secure.gravatar.com *.bootstrapcdn.com cloudfront-labs.amazonaws.com *.cloudflare.com *.joomunited.com"
img-src 'self' https://analytics.tonnygaric.com/ data: https://c.disquscdn.com/next/embed/assets/img/loader-bg.173909e4737a7481df14d5492b5eeb48.png https://referrer.disqus.com/juggler/stat.gif
script-src 'self' https://analytics.tonnygaric.com/piwik.js https://c.disquscdn.com/next/embed/ https://disqus.com/next/config.js https://tonnygaric.disqus.com/embed.js
"script-src https://ssl.google-analytics.com https://twitter.com 'unsafe-eval' https://*.twimg.com https://api.twitter.com 'nonce-rejxcympa6dh3o9rvd+ljg==' https://analytics.twitter.com https://publish.twitter.com https://ton.twitter.com https://syndication.twitter.com https://www.google.com https://platform.twitter.com https://www.google-analytics.com blob: 'self'
font-src https://twitter.com https://*.twimg.com data: https://ton.twitter.com 'self'
media-src https://rmpdhdsnappytv-vh.akamaihd.net https://prod-video-eu-central-1.pscp.tv https://prod-video-ap-south-1.pscp.tv https://v.cdn.vine.co https://dwo3ckksxlb0v.cloudfront.net https://twitter.com https://prod-video-us-east-2.pscp.tv https://prod-video-cn-north-1.pscp.tv https://amp.twimg.com https://smmdhdsnappytv-vh.akamaihd.net https://*.twimg.com https://prod-video-eu-west-1.pscp.tv https://*.video.pscp.tv https://rmmdhdsnappytv-vh.akamaihd.net https://clips-media-assets.twitch.tv https://prod-video-ap-northeast-2.pscp.tv https://prod-video-us-west-2.pscp.tv https://prod-video-us-west-1.pscp.tv https://prod-video-ap-northeast-1.pscp.tv https://smdhdsnappytv-vh.akamaihd.net https://ton.twitter.com https://prod-video-eu-west-3.pscp.tv https://rmdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://prod-video-ca-central-1.pscp.tv https://smpdhdsnappytv-vh.akamaihd.net https://prod-video-sa-east-1.pscp.tv https://mdhdsnappytv-vh.akamaihd.net https://prod-video-ap-southeast-2.pscp.tv https://mtc.cdn.vine.co https://prod-video-cn-northwest-1.pscp.tv https://prod-video-eu-west-2.pscp.tv https://canary-video-us-east-1.pscp.tv https://dev-video-us-west-2.pscp.tv https://prod-video-us-east-1.pscp.tv blob: 'self' https://prod-video-ap-northeast-3.pscp.tv https://prod-video-ap-southeast-1.pscp.tv https://mpdhdsnappytv-vh.akamaihd.net https://dev-video-eu-west-1.pscp.tv
connect-src https://rmpdhdsnappytv-vh.akamaihd.net https://prod-video-eu-central-1.pscp.tv https://prod-video-ap-south-1.pscp.tv https://*.giphy.com https://dwo3ckksxlb0v.cloudfront.net https://prod-video-us-east-2.pscp.tv https://prod-video-cn-north-1.pscp.tv https://vmaprel.snappytv.com https://smmdhdsnappytv-vh.akamaihd.net https://*.twimg.com https://embed.pscp.tv https://api.twitter.com https://prod-video-eu-west-1.pscp.tv https://*.video.pscp.tv https://rmmdhdsnappytv-vh.akamaihd.net https://clips-media-assets.twitch.tv https://prod-video-ap-northeast-2.pscp.tv https://prod-video-us-west-2.pscp.tv https://pay.twitter.com https://prod-video-us-west-1.pscp.tv https://analytics.twitter.com https://vmap.snappytv.com https://*.twprobe.net https://prod-video-ap-northeast-1.pscp.tv https://smdhdsnappytv-vh.akamaihd.net https://prod-video-eu-west-3.pscp.tv https://syndication.twitter.com https://sentry.io https://rmdhdsnappytv-vh.akamaihd.net https://media.riffsy.com https://mmdhdsnappytv-vh.akamaihd.net https://prod-video-ca-central-1.pscp.tv https://embed.periscope.tv https://smpdhdsnappytv-vh.akamaihd.net https://prod-video-sa-east-1.pscp.tv https://vmapstage.snappytv.com https://upload.twitter.com https://proxsee.pscp.tv https://mdhdsnappytv-vh.akamaihd.net https://prod-video-ap-southeast-2.pscp.tv https://prod-video-cn-northwest-1.pscp.tv https://prod-video-eu-west-2.pscp.tv https://canary-video-us-east-1.pscp.tv https://dev-video-us-west-2.pscp.tv https://prod-video-us-east-1.pscp.tv blob: 'self' https://prod-video-ap-northeast-3.pscp.tv https://vmap.grabyo.com https://prod-video-ap-southeast-1.pscp.tv https://mpdhdsnappytv-vh.akamaihd.net https://dev-video-eu-west-1.pscp.tv
style-src https://fonts.googleapis.com https://twitter.com https://*.twimg.com https://translate.googleapis.com https://ton.twitter.com 'unsafe-inline' https://platform.twitter.com 'self'
frame-src https://twitter.com https://*.twimg.com https://player.vimeo.com https://pay.twitter.com https://ton.twitter.com https://syndication.twitter.com https://vine.co twitter: https://www.youtube.com https://platform.twitter.com https://upload.twitter.com 'self'
img-src https://*.giphy.com https://*.pscp.tv https://twitter.com https://*.twimg.com data: https://clips-media-assets.twitch.tv https://lumiere-a.akamaihd.net https://ton.twitter.com https://syndication.twitter.com https://media.riffsy.com https://www.google.com https://platform.twitter.com https://api.mapbox.com https://www.google-analytics.com blob: https://*.periscope.tv 'self'
script-src 'unsafe-eval' 'report-sample' https://twittercommunity.com/logs/ https://twittercommunity.com/sidekiq/ https://twittercommunity.com/mini-profiler-resources/ https://discourse-cdn-sjc1.com/twitter/assets/ https://discourse-cdn-sjc1.com/twitter/brotli_asset/ https://twittercommunity.com/extra-locales/ https://discourse-cdn-sjc1.com/twitter/highlight-js/ https://discourse-cdn-sjc1.com/twitter/javascripts/ https://discourse-cdn-sjc1.com/twitter/plugins/ https://discourse-cdn-sjc1.com/twitter/theme-javascripts/ https://discourse-cdn-sjc1.com/twitter/svg-sprite/ https://www.google-analytics.com/analytics.js https://platform.twitter.com/widgets.js
frame-src 'self' *.g.doubleclick.net *.api.oneall.com *.google.com
style-src 'self' 'unsafe-inline' *.bootstrapcdn.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net www.googleadservices.com zip5.5432.tw *.api.oneall.com *.googleapis.com *.google-analytics.com *.googletagmanager.com
img-src 'self' data profile.prestashop.com *.gstatic.com *.googleapis.com *.g.doubleclick.net *.google.com.tw *.google.com *.google-analytics.com
font-src 'self' *.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.google-analytics.com *.pinterest.com *.googleadservices.com *.facebook.com *.facebook.net *.myfonts.net *.addthis.com *.googleapis.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com maps.googleapis.com www.gstatic.com s3.amazonaws.com wcb.us17.list-manage.com
connect-src 'self' http://www.assembly.ab.ca www.googleapis.com http://servicealberta.ca http://www.finance.alberta.ca
img-src 'self' data: www.google-analytics.com http://chart.apis.google.com maps.googleapis.com maps.gstatic.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn-images.mailchimp.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://androiduipatterns.com:443 https://*.androiduipatterns.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' https://geodata.nationaalgeoregister.nl https://csi.gstatic.com https://www.google-analytics.com data:
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://tagmanager.google.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.uqu.edu.sa *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com *.youtube.com *.twitter.com 'unsafe-inline' 'unsafe-eval' https:
img-src 'self' *.uqu.edu.sa *.google-analytics.com *.google.com *.gstatic.com *.googleapis.com *.twimg.com *.flagcounter.com data: blob: https:"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://chatbotsmagazine.com:443 https://*.chatbotsmagazine.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' data: ssl.google-analytics.com
"default-src 'self' *.buyway.be *.buyway.lu *.carrefourfinance.be
font-src 'self' *.buyway.be *.buyway.lu *.carrefourfinance.be data http://*.hotjar.com https://*.hotjar.com
connect-src 'self' http://*.hotjar.com https://*.hotjar.com ws://*.hotjar.com wss://*.hotjar.com
frame-src 'self' *.youtube.com *.criteo.com *.doubleclick.net staticxx.facebook.com www.facebook.com www.googletagmanager.com *.google.com *.google.be https://*.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com www.googletagmanager.com *.criteo.net *.criteo.com www.googleadservices.com ajax.googleapis.com code.jquery.com connect.facebook.net *.hotjar.com https://googleads.g.doubleclick.net *.google.com *.google.be http://*.dwin1.com https://*.dwin1.com http://*.hotjar.com https://*.hotjar.com
style-src 'self' 'unsafe-inline' *.buyway.be *.buyway.lu *.carrefourfinance.be
img-src 'self' *.buyway.be *.buyway.lu *.carrefourfinance.be *.zetes.be *.doubleclick.net *.google-analytics.com ssl.google-analytics.com www.facebook.com *.zanox.com *.awin1.com www.awin1.com *.bing.com http://googleads.g.doubleclick.net *.google.com *.google.be http://*.hotjar.com https://*.hotjar.com http://*.dwin1.com https://*.dwin1.com *.googletagmanager.com *.googleadservices.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleanalytics.com *.google-analytics.com *.googleapis.com *.youtube.com *.ytimg.com *.gstatic.com cse.google.com www.google.com *.googletagmanager.com tagmanager.google.com survey.g.doubleclick.net *.google.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com storage.googleapis.com www.google.com tagmanager.google.com
default-src 'self' *.gstatic.com g-design.storage.googleapis.com storage.googleapis.com
frame-src 'self' www.google.com *.googleusercontent.com www.youtube.com accounts.google.com apis.google.com plus.google.com cse.google.com survey.g.doubleclick.net
img-src 'self' data: s.ytimg.com *.googleusercontent.com *.gstatic.com www.google-analytics.com storage.googleapis.com www.gravatar.com www.googleapis.com www.google.com clients1.google.com stats.g.doubleclick.net survey.g.doubleclick.net *.google.com
"form-action 'self' https://securestoragetransactions.com https://www.securestoragetransactions.com https://reserve.securestoragetransactions.com https://securestoragesites.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://artplusmarketing.com:443 https://*.artplusmarketing.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://proandroiddev.com:443 https://*.proandroiddev.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' vimeo.com https://gist.github.com www.slideshare.net https://query.yahooapis.com 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://www.dropbox.com https://*.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://js.driftt.com https://embed.small.chat https://static.small.chat https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com 'nonce-9c1643a3-e423-473e-ba0f-0109ba2eb86e' 'sha256-etvssxrwce5clefbzbvzvdrtiroyoxbwwwvevcim5ag=' 'sha256-nzb7w9gyjnurmeidk01d3/detyztrtnxc/dqw7agdy4=' 'sha256-l0tsyaqlac0koby5dcbfawffrs9zxesa+4xg0qdsrdi='
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data:
frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.booking.com *.rentalcars.com *.hotjar.com *.google.com *.youtube.com *.criteo.com *.facebook.com *.facebook.net *.doubleclick.net *.safetypay.com *.e-tsw.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com
img-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.google-analytics.com *.googleapis.com *.fusion.com *.google.com *.google.se *.google.com.mx *.vivaaerobus.com *.facebook.com *.cloudflare.com *.ckeditor.com *.doubleclick.net *.placeholder.com *.googletraveladservices.com *.kayak.com *.criteo.com *.criteo.net *.yldr.io *.cartrawler.com services.paynet.com.mx api.openpay.mx ota-cars.imgix.net *.bing.com platform-api.sharethis.com cdn.apixu.com ts.tradetracker.net ad.soicos.com data:
style-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.fusion.com *.google.com *.google.com.mx maxcdn.bootstrapcdn.com *.vivaaerobus.com *.cloudflare.com *.hotjar.com *.googleapis.com *.ckeditor.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.googletagservices.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com *.google.com cdn.jsdelivr.net *.fusion.com *.google-analytics.com *.google.se *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.hotjar.com *.googleadservices.com *.ckeditor.com *.cloudfront.net *.boxever.com *.cdn.intentmedia.net *.google-analytics.com *.yldr.io *.gstatic.com *.criteo.com *.criteo.net a.intentmedia.net *.google.com.mx *.cartrawler.com bat.bing.com platform-api.sharethis.com cdn.apixu.com tm.tradetracker.net *.intentmedia.net *.viajamas.com 201.131.2.241 *.tradetracker.net
frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.booking.com *.rentalcars.com *.hotjar.com *.google.com *.youtube.com *.criteo.com *.facebook.com *.facebook.net *.doubleclick.net *.safetypay.com *.e-tsw.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com
font-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.bootstrapcdn.com *.gstatic.com *.cartrawler.com
connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.fusion.com *.facebook.com *.google-analytics.com *.viajamas.com *.intentmedia.net
form-action 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com data: *.vivaaerobus.com *.facebook.net *.facebook.com *.e-tsw.com
"default-src * 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-' 'sha256-' about: data: blob:
script-src 'self' https://www.google.com/recaptcha/ https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/analytics.js https://js-agent.newrelic.com 'unsafe-inline'
img-src 'self' https://ssl.gstatic.com/ www.google-analytics.com www.gravatar.com secure.gravatar.com
connect-src 'self' https://www.facebook.com/ https://github.com/ https://api.twitter.com/
style-src 'unsafe-inline' 'self' blob: *
img-src 'self' https://www.google-analytics.com https://*.githubusercontent.com data:
script-src 'self' https://www.google-analytics.com https://api.github.com 'nonce-029f23ddae50864c654bce90fd51ea6861c2bcfc'
"connect-src 'self' wss: https://app.trustev.com https://zpa87232.live.dynatrace.com https://performance.typekit.net
script-src 'self' 'unsafe-inline' https: 'nonce-vlhctwifbza6x0dxfpvhtg8qtvc=' 'strict-dynamic' https://www.google-analytics.com https://app.trustev.com https://www.googletagmanager.com https://connect.facebook.net https://use.typekit.net
style-src 'self' 'unsafe-inline' https://cloud.typography.com https://www.kwikrewards.com
script-src  trix360.com *.vaptcha.com  *.cnzz.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' data: https://fatpay.net https://www.google-analytics.com https://www.gstatic.com https://static.siteheart.com https://s3.amazonaws.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://fatpay.net https://www.gstatic.com https://widget.siteheart.com https://static.siteheart.com
style-src 'self' data: 'unsafe-inline' https://fatpay.net https://www.google-analytics.com https://static.siteheart.com"
"default-src 'self' 'unsafe-inline' *.marketingautomation.services cdn.jsdelivr.net *.gstatic.com *.doubleclick.net *.google.com *.googleadservices.com d3kit5re4lr421.cloudfront.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.marketingautomation.services cdn.jsdelivr.net *.gstatic.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.godaddy.com *.googletagmanager.com *.paypal.com *.google.com
img-src 'self' *.doubleclick.net *.google-analytics.com *.gstatic.com *.godaddy.com *.google.com  data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://chrishutchins.com:443 https://*.chrishutchins.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.stadtwerke-neustadt.de *.wb-neustadt.de *.stadtnetze-neustadt.de *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com
style-src 'self' 'unsafe-inline' *.stadtwerke-neustadt.de *.wb-neustadt.de *.stadtnetze-neustadt.de *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com
frame-src 'self' *.stadtwerke-neustadt.de *.wb-neustadt.de *.stadtnetze-neustadt.de *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com
img-src 'self' data: blob: 'unsafe-inline' *.stadtwerke-neustadt.de *.wb-neustadt.de *.stadtnetze-neustadt.de *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com
font-src 'self' *.stadtwerke-neustadt.de *.wb-neustadt.de *.stadtnetze-neustadt.de *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ipinfo.io af-cdn-v-www.azureedge.net *.inspectlet.com https://js.stripe.com platform.twitter.com https:
frame-src 'self' https: https://www.paypal.com https://js.stripe.com player.vimeo.com
connect-src 'self' https://api.stripe.com https://*.paypal.com https://www.facebook.com https://www.google-analytics.com *.inspectlet.com mc.yandex.ru wss://ws.inspectlet.com dc.services.visualstudio.com
child-src 'self' https: https://www.paypal.com https://js.stripe.com player.vimeo.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.book.fr www.google-analytics.com connect.facebook.net www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net tpc.googlesyndication.com
style-src 'self' 'unsafe-inline' www.book.fr fonts.googleapis.com
"style-src 'self' 'unsafe-inline' https://webcdn.streamtest.net https://fonts.googleapis.com fonts.googleapis.com https://fonts.gstatic.com fonts.gstatic.com *.flowplayer.org
frame-src 'self' *.facebook.com *.twitter.com https://www.youtube.com http://www.youtube.com https://bid.g.doubleclick.net https://*.hotjar.com/ awaps.yandex.ru googleads.g.doubleclick.net www.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com
script-src 'self' 'nonce-62b20d243cb3d920e213dc19f7d383094534be6e5b86a146f5de382cac7b1fa8' 'nonce-a5035588bd7fbc681de320921455dec3367dab31cad89b408088830b7eedaabe' 'nonce-145a4d0fa7ce7286b4399ec400fc646e745ebe2acb4849d72c4e92df29b8fa03' https://cdn.ravenjs.com cdnjs.cloudflare.com http://connect.facebook.net *.facebook.net http://platform.twitter.com *.twitter.com https://webcdn.streamtest.net http://sp.analytics.yahoo.com/ https://sp.analytics.yahoo.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.yimg.com bat.bing.com *.hotjar.com http://yapi.zoomsupport.com https://yapi.zoomsupport.com https://*.stopad.io *.stopad.io https://www.google-analytics.com www.google-analytics.com https://www.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com www.googleadservices.com https://*.googleapis.com *.googleapis.com https://mc.yandex.ru mc.yandex.ru trk.cetrk.com https://dnn506yrbagrg.cloudfront.net dnn506yrbagrg.cloudfront.net https://*.newrelic.com *.newrelic.com https://s3.amazonaws.com s3.amazonaws.com https://seal.websecurity.norton.com https://gstatic.com *.gstatic.com https://google.com *.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com https://googleads.g.doubleclick.net
"frame-ancestors 'self' https://google.com/maps https://fast.wistia.net/embed/iframe https://webto.salesforce.com https://go.pardot.com https://docs.google.com/viewer https://static.olark.com/"
"default-src 'self' *.google-analytics.com *.gstatic.com *.googleapis.com *.zopim.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com *.zopim.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.zopim.com
font-src 'self' https://fonts.gstatic.com *.zopim.com data:
"frame-ancestors 'self' https://www.360coveragepros.com https://www.napa-benefits.org https://www.bcs-eo.com https://www.mga-eo.com https://www.aip-benefits.org"
"frame-ancestors https://www.matrabike.nl http://www.matrabike.nl http://matrabike.test01.netivity.nl https://matrabike.test01.netivity.nl http://www.google.com"
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdn.livechatinc.com/ *.hotjar.com https://aleo.com data:
script-src 'self' https://stackpath.bootstrapcdn.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com stats.g.doubleclick.net https://*.googleapis.com https://www.google.com https://*.gstatic.com https://dnn506yrbagrg.cloudfront.net https://s3.amazonaws.com googleads.g.doubleclick.net https://cdn.livechatinc.com/ https://secure.livechatinc.com/ https://tagmanager.google.com/ *.hotjar.com https://cloud.webankieta.pl/ https://optimize.google.com/ https://connect.facebook.net/ https://code.jquery.com/jquery-1.9.0.min.js https://code.jquery.com/ui/1.9.2/jquery-ui.min.js https://aleo.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' https://*.googleapis.com https://www.google.com https://fonts.googleapis.com https://tagmanager.google.com/ https://optimize.google.com/ https://aleo.com 'unsafe-inline'
frame-src https://forms.freshmail.io/ www.youtube.com/embed/ www.google.pl www.google.com googleads.g.doubleclick.net https://maps.google.com https://maps.google.pl https://wnioski.ingbank.pl https://wnioski.aleo.com https://ent.activeforms.com https://cloud.webankieta.pl https://secure.livechatinc.com/ https://api.livechatinc.com/ https://e.ingbank.pl *.hotjar.com *.aleo.com www.webankieta.pl https://optimize.google.com/ https://www.facebook.com/ https://docs.google.com/ https://aleo.com
img-src 'self' www.google-analytics.com https://googleads.g.doubleclick.net tbl.tradedoubler.com stats.g.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://www.google.com https://www.google.pl https://s3.amazonaws.com https://www.googleadservices.com/ https://cdn.livechatinc.com/ https://tagmanager.google.com/ https://optimize.google.com/ https://secure.livechatinc.com https://www.facebook.com/ https://aleo.com data: blob:
connect-src 'self' https://plugin.epointlp.com https://plugin-a4l.ext.e-point.pl https://a4l.ext.e-point.pl *.hotjar.com ws://*.hotjar.com https://graylog.hotjar.com https://aleo.com wss://aleo.com/ws/
script-src 'self' cdn.polyfill.io *.google-analytics.com *.googleapis.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io *.prismic.io 'sha256-0bwkgjxcjy4cvhubjkluedp1lojnc5zldkuqftuktum=' 'sha256-r0kk6vehfbhc2xeuby6gm7/rqoadzpkmbxmswor952g=' 'sha256-f14tbhjv5kogwkg9ojkkjyzg9g36ybusbvl3xkjettc=' 'sha256-+/nklwv7sjjtyusgnj0nh7cwawutp98j4udfgdypmru=' 'sha256-/kwcqajyex68fuxbdls8ezb6lj3sgonsnoqzljxxspe=' 'sha256-xt0uapyon0ce/mhllnlnl+5/z7i3z0is1e3xuwdgvyg=' 'sha256-pbaxdbt0w139l7bvwdnvg8rq9cz2njldqwqadhnapzs='
img-src data: blob: about: 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com webselfstorage.com *.webselfstorage.com *.virtualearth.net *.bing.com www.google.com www.googletagmanager.com *.doubleclick.net www.bingmapsportal.com *.google-analytics.com movinginsider.com
frame-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com *.youtube.com *.doubleclick.net *.addthis.com apis.google.com accounts.google.com www.google.com t.pepperjamnetwork.com r2.dotmailer-surveys.com e.infogram.com
script-src 'self' uhaul.net *.uhaul.net uhaul.com *.uhaul.com 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com ajax.aspnetcdn.com www.bing.com www.googletagmanager.com www.googleadservices.com *.doubleclick.net *.addthis.com *.addthisedge.com code.jquery.com *.virtualearth.net www.gstatic.com *.google.com *.google-analytics.com *.youtube.com *.ytimg.com r2.dotmailer-surveys.com *.twil.io
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.umbraco.org *.umbraco.com *.blob.core.windows.net *.youtube.com youtube.com *.gstatic.com *.googleapis.com html5shiv.googlecode.com cloud.typography.com google-analytics.com *.google.com www.google-analytics.com stats.g.doubleclick.net *.googletagmanager.com *.googleapis.com *.azurewebsites.net addsearch.com milansupply.com *.milansupply.com *.searchcdn.com *.cloudfront.net *.addsearch.com *.jquery.com"
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.riksdagen.se 59b28002cb84d.streamlock.net
worker-src 'self' blob: *.riksdagen.se 59b28002cb84d.streamlock.net
img-src 'self' pbs.twimg.com data: *.riksdagen.se 59b28002cb84d.streamlock.net
media-src 'self' blob: *.riksdagen.se *.readspeaker.com 59b28002cb84d.streamlock.net
connect-src 'self' *.riksdagen.se ws://meta.riksdagen.se wss://meta.riksdagen.se 59b28002cb84d.streamlock.net
"frame-ancestors 'self' online.greatergiving.com joinme.org supporter.greatergiving.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://cdn.jsdelivr.net
img-src 'self' data: https://www.google-analytics.com https://secure.gravatar.com
frame-src 'self' https://www.youtube.com https://jobs.localjobnetwork.com https://www.localjobnetwork.com https://www.google.com https://www.elegantthemes.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.com code.jquery.com secure.adnxs.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net js-agent.newrelic.com static.criteo.net bam.nr-data.net sslwidget.criteo.com maps.google.com maps.googleapis.com www.google.com connect.facebook.net assets.pinterest.com log.pinterest.com platform.twitter.com optanon.blob.core.windows.net cdn.cookielaw.org www.google-analytics.com geolocation.onetrust.com tagmanager.google.com widget.eu.criteo.com
frame-src 'self' dis.eu.criteo.com staticxx.facebook.com www.facebook.com platform.twitter.com syndication.twitter.com gum.criteo.com assets.pinterest.com
img-src * 'self' data: https: www.google.com www.google.fr platform.twitter.com assets.pinterest.com
style-src 'self' 'unsafe-inline' cdn.cookielaw.org optanon.blob.core.windows.net fonts.googleapis.com www.google-analytics.com tagmanager.google.com
form-action 'self' platform.twitter.com syndication.twitter.com  https://payment.sips-atos.com mercanet.bnpparibas.net payment-web.mercanet.bnpparibas.net"
img-src         www.gesundheit.gv.at secure.gesundheit.gv.at data: www.spitalskompass.at rehakompass.goeg.at www.help.gv.at *.gstatic.com *.googleapis.com developers.google.com
style-src       www.gesundheit.gv.at secure.gesundheit.gv.at fonts.googleapis.com 'unsafe-inline'
form-action     www.gesundheit.gv.at secure.gesundheit.gv.at www.a-trust.at 127.0.0.1:3495 127.0.0.1:3496 www.elga-online.gv.at vollmachten.stammzahlenregister.gv.at
child-src       www.gesundheit.gv.at secure.gesundheit.gv.at www.a-trust.at 127.0.0.1:3495 127.0.0.1:3496 www.elga-online.gv.at vollmachten.stammzahlenregister.gv.at www.youtube.com www.youtube-nocookie.com
"script-src 'self' *.googleanalytics.com *.google-analytics.com ajax.googleapis.com www.google.com *.doubleclick.net adservice.google.com adservice.google.co.uk
img-src 'self' data: s.ytimg.com *.googleusercontent.com *.gstatic.com *.google-analytics.com www.google.com *.doubleclick.net
style-src 'self' fonts.googleapis.com *.gstatic.com *.googleapis.com 'sha256-ti5c1zexlhju/nws3bm4ese4i5ykisicuxzjns8ls2q='
frame-src 'self' www.google.com www.youtube.com accounts.google.com apis.google.com plus.google.com
connect-src 'self' plus.google.com www.google-analytics.com services.google.com
font-src 'self' data: themes.googleusercontent.com *.gstatic.com
style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' webstats.surf.nl code.jquery.com *.bootstrapcdn.com *.cloudflare.com
img-src 'self' 'unsafe-inline' https: data: webstats.surf.nl
"frame-ancestors *.seniorweb.nl desktop.eu2.vanadcimplicity.net seniorweb.crm4.dynamics.com seniorwebtest.crm4.dynamics.com"
"default-src 'self' 'unsafe-inline' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com iec.test.jo *.iec.test.jo
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo iec.test.jo *.iec.test.jo
object-src 'unsafe-inline' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com iec.test.jo *.iec.test.jo
style-src 'self' 'unsafe-inline' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo iec.test.jo *.iec.test.jo
img-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo iec.test.jo *.iec.test.jo
media-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo
frame-src 'self' 'unsafe-inline' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo iec.test.jo *.iec.test.jo
font-src 'self' 'unsafe-inline' *.jsdelivr.net *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.dot.jo *.iec.jo *.entikhabat.jo iec.test.jo *.iec.test.jo
"default-src 'unsafe-inline' 'unsafe-eval' * 'self' data:"
"connect-src 'self' cdn.subscribers.com wss://*.nestaway.com:* *.nestaway.com *.googleapis.com *.razorpay.com us-central1-production-nestaway.cloudfunctions.net www.facebook.com www.google-analytics.com *.mixpanel.com *.freshmarketer.com wss://*.freshmarketer.com cdnjs.cloudflare.com/ajax/libs/knockout/ www.google.com www.google.co.in *.doubleclick.net *.jquery.com *.mouseflow.com *.twitter.com *.qualaroo.com wss://*.qualaroo.com *.nr-data.net wss://*.nr-data.net hooks.zapier.com/hooks/catch/1199663/ wss://production-nestaway.firebaseio.com production-nestaway.firebaseio.com *.ucweb.com *.recruiterbox.com nestaway-assets.akamaized.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' adverto.co *.google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.jquery.com *.dropbox.com *.serving-sys.com *.cloudfront.net *.staticstuff.net *.maxcdn.com cdnjs.cloudflare.com origin2.jsdelivr.net"
img-src https: http: data: 'self' about:
script-src 'unsafe-inline' 'unsafe-eval' https: http: data:
frame-src 'self' https://start.me https://jetpack.wordpress.com https://www.youtube.com https://*.facebook.com https://sorinsfirlogea.onesignal.com https://sorinsfirlogea.os.tc/ https://www.bikemap.net/ https://www.ted.com/ https://embed-ssl.ted.com/ https://embed.ted.com/"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.getgo.com *.google.com *.google-analytics.com *.googleapis.com"
img-src 'self' https: data: blob: https://hodapp.club
media-src 'self' https: data: https://hodapp.club
connect-src 'self' blob: https://hodapp.club wss://hodapp.club
"script-src 'self' http://use.typekit.net/zdl6yak.js http://code.jquery.com/jquery-1.10.2.min.js https://www.google-analytics.com/analytics.js data: 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://djtflbt20bdde.cloudfront.net https://s3.amazonaws.com/luckyorange-clickstream/ https://*.gstatic.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://*.googleapis.com/maps/api/js
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.oswald-lagertechnik.de kaeufersiegel.de *.gstatic.com *.google.com *.google-analytics.com *.amazon.de *.amazon.com *.payments-amazon.com *.abmr.net *.paypalobjects.com *.paypal.com *.adcell.de *.facebook.net
img-src 'self' *.oswald-lagertechnik.de *.leitern.net *.kaeufersiegel.de *.jtl-software.de *.google-analytics.com *.amazon.de *.amazon.com *.ssl-images-amazon.com *.cloudfront.net *.payments-amazon.com *.abmr.net *.mathtag.com *.paypalobjects.com *.gravatar.com *.adcell.de *.facebook.com
frame-src 'self' *.google.com *.paypal.com *.adcell.de *.amazon.de *.amazon.com *.amazonpay.com *.facebook.com
connect-src 'self' *.google-analytics.com *.amazon.de *.amazon.com *.amazonpay.com *.amazonaws.com *.amazonservices.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com http://www.google-analytics.com  http://fonts.googleapis.com/ https://cdnjs.cloudflare.com http://cdn.ckeditor.com https://cdnjs.cloudflare.com  http://svc.webspellchecker.net https://ajax.googleapis.com/ https://maps.google.com/ https://maps.googleapis.com/ https://weatherwidget.io/
style-src 'self' 'unsafe-inline' 'unsafe-eval' http://cdn.ckeditor.com http://fonts.googleapis.com https://cdnjs.cloudflare.com http://svc.webspellchecker.net https://tripura.gov.in
img-src 'self' http://cdn.ckeditor.com http://www.google-analytics.com https://tripura.gov.in https://cbpssubscriber.mygov.in https://w.bookcdn.com https://maps.gstatic.com/ https://maps.gstatic.com/ https://maps.google.com/ https://tripura.gov.in/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com http://164.100.127.45 https://weatherwidget.io
font-src 'self' http://fonts.gstatic.com https://cdnjs.cloudflare.com http://fonts.googleapis.com
"default-src 'self' www.google-analytics.com www.google.com ajax.googleapis.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' www.google-analytics.com apis.google.com www.gstatic.com www.google.com ajax.googleapis.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' www.google-analytics.com www.google.com ajax.googleapis.com 'unsafe-inline'
img-src 'self' www.google-analytics.com www.google.com ajax.googleapis.com data: blob: 'unsafe-inline'
frame-src 'self' www.google-analytics.com apis.google.com www.gstatic.com www.google.com ajax.googleapis.com
style-src 'self' www.google-analytics.com www.google.com ajax.googleapis.com apis.google.com www.gstatic.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.brightcove.com *.brightcove.net *.zencdn.net *.boltdns.net *.brightcovecdn.com *.googletagmanager.com *.google-analytics.com *.msecnd.net  *.visualstudio.com *.bizographics.com *.licdn.com *.ads-twitter.com *.twitter.com *.twimg.com *.addthis.com *.pardot.com *.linkedin.com *.addthisedge.com *.issuu.com
img-src 'self' data: about: t.co *.twitter.com *.google-analytics.com *.brightcove.com *.boltdns.net *.twimg.com *.googletagmanager.com
connect-src 'self' *.addthis.com *.brightcove.com *.boltdns.net *.brightcovecdn.com
frame-src 'self' *.addthis.com *.twitter.com *.issuu.com *.google.com *.pardot.com *.guggenheimpartners.com
form-action 'self' *.twitter.com *.pardot.com *.guggenheimpartners.com"
"default-src 'unsafe-inline' 'unsafe-eval' data: *
"child-src 'self' *.wirelessprovisioning.com https://figgers.com/ https://www.figgers.com/ *.google.com https://shop.flashwireless.com *.wirelessprocess.net wirelessprocess.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.addthis.com https://*.addthisedge.com https://boi-app.ignitionwealth.ie https://boi-app.uat.ignitionwealth.ie https://*.bizographics.com https://*.doubleclick.net https://*.google.com https://*.linkedin.com https://*.pingdom.net https://*.twimg.com https://*.twitter.com https://ajax.googleapis.com https://altocloudcdn.com https://altocloud-sdk.com/ac.js https://app.altocloud.com https://cdn.polyfill.io https://connect.facebook.net https://csi.gstatic.com https://dnn506yrbagrg.cloudfront.net https://i.ytimg.com https://ict.infinity-tracking.net https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com https://pixel.everesttech.net https://pixel.quantserve.com https://rules.quantcount.com https://s.ytimg.com https://s7.addthis.com https://seal.websecurity.norton.com https://secure.adnxs.com https://secure.quantserve.com https://snap.licdn.com https://ssl.google-analytics.com https://t.co https://www.everestjs.net https://www.google.ie https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com/iframe_api https://youtube.com https://sc-static.net https://static.ads-twitter.com https://*.cludo.com https://*.bankofireland.com https://*.getsitecontrol.com https://www.youtube.com http://www.youtube.com http://dnn506yrbagrg.cloudfront.net http://static.ads-twitter.com https://zn8wgbo4r5mxmqzun-bankofireland.siteintercept.qualtrics.com https://cookiepro.blob.core.windows.net https://code.jquery.com https://siteintercept.qualtrics.com https://geolocation.onetrust.com"
"frame-ancestors 'self' http://dds-simplicit-prod.s3-website-ap-southeast-2.amazonaws.com http://dds-simplicit-v2-prod.s3-website-ap-southeast-2.amazonaws.com https://test.salesforce.com
child-src 'self' http://a.rfihub.com/ http://20721439p.rfihub.com/ http://dis.criteo.com/ http://dis.eu.criteo.com/ http://www.youtube.com/ https: twitter:
img-src 'self' http://www.intotheblue.co.uk/register/images/exchange-btn84x32.png http://www.intotheblue.co.uk/register/images/congratullations-banner-930-small.jpg http://www.intotheblue.co.uk/images/googlemapicon.png http://bat.bing.com/ http://www.google-analytics.com http://drs2.veinteractive.com http://www.googletagmanager.com http://widget.criteo.com/pgi/display.js http://rum-collector.pingdom.net http://storage.googleapis.com http://webr.emv2.com/intotheblue/images https: data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://bat.bing.com/bat.js http://platform.twitter.com/oct.js http://config1.veinteractive.com http://www.google-analytics.com/ http://a.rfihub.com/idr.js http://c1.rfihub.net/js/tc.min.js  http://dnn506yrbagrg.cloudfront.net/pages/scripts/0023/5771.js  http://config1.veinteractive.com/vecapture.js http://widget.eu.criteo.com/event http://media.reziew.com/js/i18n/en.js http://widget.criteo.com http://static.hotjar.com/c/hotjar-471901.js http://static.hotjar.com/c/hotjar-471901.js http://script.crazyegg.com/pages/scripts/0051/5263.js http://static.criteo.net/js/ld/ld.js http://commondatastorage.googleapis.com/code.snapengage.com/js/89a15045-e27a-448f-bbc2-52c7eb625336.js http://rum-static.pingdom.net/prum.min.js http://code.jquery.com/ui/1.10.3/jquery-ui.js https:
script-src 'self' 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com site.yandex.net yastatic.net yandex.com clck.yandex.ru ajax.googleapis.com
script-src 'self' 'nonce-e10685bf49b44e6ca38a08d54f4e57c0' https://www.google-analytics.com/ https://maps.googleapis.com/ https://static.getclicky.com/ https://in.getclicky.com/ https://cdn.carbonads.com/ http://srv.carbonads.net/ https://adn.fusionads.net/ https://m.servedby-buysellads.com/ https://srv.buysellads.com/ https://platform.twitter.com/ https://static.ads-twitter.com/ https://analytics.twitter.com/ https://codepen.io/ https://assets.codepen.io/ https://cdn.syndication.twimg.com/
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://edgecoders.com:443 https://*.edgecoders.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"child-src 'self' blob: https://js.stripe.com https://www.google.com https://www.youtube.com https://m.stripe.network https://*.facebook.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://tpc.googlesyndication.com https://static.audienceinsights.net https://secure-assets.rubiconproject.com https://acdn.adnxs.com https://*.sascdn.com https://*.bidswitch.net https://*.adventori.com https://csync.smartadserver.com https://img.mediaplex.com https://*.ad-srv.net https://aka-cdn.adtech.de https://tag.leadplace.fr https://cdn3.doubleverify.com
script-src http: https: 'unsafe-eval' 'unsafe-inline'
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://blowmeuptom.com https://cdn.blowmeuptom.com https://cdn.engine.4dsply.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.youtube.com https://*.facebook.com https://*.twitter.com https://*.twimg.com https://*.amazon-adsystem.com
img-src 'self' https://cdn.blowmeuptom.com https://secure.gravatar.com https://fonts.googleapis.com https://*.doubleclick.net https://www.google-analytics.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com data:
style-src 'self' 'unsafe-inline' https://cdn.blowmeuptom.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://wms-na.amazon-adsystem.com
font-src 'self' https://cdn.blowmeuptom.com https://fonts.googleapis.com https://fonts.gstatic.com data:
child-src 'self' https://cdn.blowmeuptom.com https://www.google.com https://*.amazon-adsystem.com https://*.images-amazon.com https://www.youtube.com https://*.twitter.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: uhaul.net *.uhaul.net *.uhaul.com uhaul.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.bing.com *.virtualearth.net *.datatables.net signalr.net cdnjs.cloudflare.com *.jquery.com jquery.com *.boldchat.com *.youtube.com *.youtube-nocookie.com *.kaltura.com http://uhaul.net http://uhaul.com *.photobucket.com *.deviantart.net i.imgur.com cdn.meme.am tumblr.com *.twilio.com *.twil.io *.aspnetcdn.com https://localhost:9732 http://localhost:8732
"frame-ancestors 'self' http://*.alfakingdom.com https://*.alfakingdom.com http://icomarks.com https://icomarks.com http://*.icomarks.com https://*.icomarks.com http://airdropalert.com https://airdropalert.com http://*.airdropalert.com https://*.airdropalert.com"
"script-src 'self' 'unsafe-eval' app.overdrive.io cdn.overdrive.io cdn-use.overdrive.io cdn-euw.overdrive.io cdn.polyfill.io *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.google-analytics.com query.yahooapis.com *.youtube-nocookie.com *.youtube.com platform.twitter.com cdn.syndication.twimg.com cdn.ravenjs.com js.live.net *.zopim.com  'nonce-e4f8299dc03f494770d67f4eb31716ef'
child-src 'self' *.youtube.com *.google.com player.vimeo.com
img-src 'self' blob: data: *.youtube.com *.google-analytics.com *.gstatic.com *.googleapis.com *.google.com www.gravatar.com placehold.it placeholdit.imgix.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.gstatic.com *.newrelic.com *.nr-data.net *.googletagmanager.com *.google-analytics.com *.googleapis.com *.googlesyndication.com
style-src 'self' 'unsafe-inline' fonts.gstatic.com fonts.googleapis.com *.google.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.ivideon.com https://yastatic.net https://*.yandex.ru https://mc.yandex.ru yandex.ru https://*.yandex.net https://*.gstatic.com http://fonts.gstatic.com https://*.googleapis.com *.i-exam.ru i-exam.ru https://mypage.i-exam.ru http://*.reformal.ru reformal.ru www.slideshare.net www.youtube.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://thebittheories.com:443 https://*.thebittheories.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'
frame-ancestors tweakers.net *.tweakers.net tweakimg.net *.tweakimg.net"
"script-src 'nonce-df74b26c3abce48643ff63c9263ead7034d656ed' 'strict-dynamic' https: http:
script-src 'self' 'nonce-mmqaavseldbxkibtsjfzofeags8mv6zvd8b8ogrzd/4=' 'unsafe-eval' *.vistek.ca ajax.aspnetcdn.com *.klevu.com www.google-analytics.com js.hs-analytics.net js.hs-scripts.com js.hsleadflows.net js.hscollectedforms.net js.hsforms.net forms.hsforms.com forms.hubspot.com www.paypalobjects.com *.paypal.com www.googleadservices.com connect.facebook.net www.facebook.com *.turnto.com *.doubleclick.net maps.googleapis.com www.google.com *.ladesk.com *.iubenda.com *.steelhousemedia.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://play2.qbrick.com https://imasdk.googleapis.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk *.danskebank.se https://danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com
frame-src 'self' https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.dk *.danskebank.se https://danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com bankid://* https://cloud-emea.analytics-egain.com https://logon.danskenet.com
script-src 'self' 'unsafe-inline' *.facebook.net *.goadservices.com *.tinymce.com https://www.google-analytics.com https://www.googletagmanager.com https:
connect-src 'self' *.facebook.com *.tinymce.com https:
style-src 'self' 'unsafe-inline' https://www.tinymce.com https://fonts.googleapis.com *.tinymce.com https:
font-src 'self' https://fonts.gstatic.com *.tinymce.com https:"
connect-src 'self' sentry.io api.sletat.ru leadhub.sletat.ru claims.sletat.ru api-claims-agent.sletat.ru module.sletat.ru ads.sletat.ru ui.sletat.ru graph.sletat.ru currency.sletat.ru spo.sletat.ru modulesettings.sletat.ru aisvg.sletat.ru www.google.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net mc.yandex.ru api-maps.yandex.ru stat.tildacdn.com/event/ app.comagic.ru/ss/settings/
font-src 'self' data: front.sletat.ru frontdebug.sletat.ru markup.sletat.ru ui.sletat.ru fonts.gstatic.com static.tildacdn.com/fonts/
frame-src ui.sletat.ru sletat.ostrovok.ru www.google.com www.youtube.com 8530831.fls.doubleclick.net googleads.g.doubleclick.net api-maps.yandex.ru aviasales.sletat.ru sletat.ostrovok.ru bid.g.doubleclick.net
img-src 'self' data: ui.sletat.ru ads.sletat.ru markup.sletat.ru static.sletat.ru hotels.sletat.ru spo.sletat.ru cms.sletat.ru/api/news/images/ modx.sletat.ru/email/news/ sletat.ru/services/sletatcounter.ashx maps.gstatic.com maps.googleapis.com www.google.com/ads/ga-audiences www.google.ru/ads/ga-audiences www.googletagmanager.com static-maps.yandex.ru counter.yadro.ru stats.g.doubleclick.net *.maps.yandex.net www.google-analytics.com www.google.com www.google.ru ssl.gstatic.com/analytics-suite/  api-maps.yandex.ru mc.yandex.ru yandex.ru/clck/ yandex.st/lego/_/k135qthtokbaaao5kp70lnmnzom.png ssl.gstatic.com/editor/editortoolbar.png ssl.gstatic.com/analytics-suite/header/legacy/v2/ic_tag_manager.svg www.gstatic.com/images/icons/material/system/1x/keyboard_arrow_up_white_48dp.png www.gstatic.com/analytics-suite/header/legacy/v2/favicon_gop_standard_16.png blob:
script-src 'self' front.sletat.ru frontdebug.sletat.ru static.sletat.ru spo.sletat.ru module.sletat.ru claims.sletat.ru ads.sletat.ru ui.sletat.ru markup.sletat.ru graph.sletat.ru aviasales.sletat.ru/iframe.js www.google.com/uds/ www.google.com/jsapi www.google.com/recaptcha/api.js www.gstatic.com maps.googleapis.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com mc.yandex.ru *.maps.yandex.net api-maps.yandex.ru 8530831.fls.doubleclick.net tagmanager.google.com/debug/api/ googleads.g.doubleclick.net code.jquery.com cdn.ravenjs.com ajax.googleapis.com/ajax/libs/jquery/ stat.tildacdn.com/js/tildastat-0.2.min.js app.comagic.ru/static/cs.min.js ssl.google-analytics.com/ga_exp.js 'nonce-aw5pdglhbc1zdgf0zq==' 'nonce-aw5paxrhbc1zdgf0zs1zzwfyy2gtaw5pdc1kyxrh' 'nonce-z29vz2xllwfuywx5dgljcw==' 'nonce-z29vz2xllxrhzy1tyw5hz2vy' 'nonce-ywribg9jay1kzxrly3q=' 'nonce-ewetbwv0cmlrys1jb3vudgvy' 'nonce-z2xvymfslwvtymvkzgvk' 'nonce-z2xvymfslxn2zy1py29u' 'nonce-z2xvymfslxnszxrhdc1ob3n0cw==' 'nonce-nda0lw1lbnu=' 'nonce-nda0lxbhz2utbglua3m=' 'nonce-nda0lwdvb2dszs10ywctbwfuywdlcg==' 'nonce-nda0lxbhz2utbglua3m=' 'nonce-nda0lwdvb2dszs10ywctbwfuywdlcg==' 'nonce-z29vz2xllwv4cgvyaw1lbnrzlw9ulxnpdgu='
style-src 'self' data: 'unsafe-inline' ui.sletat.ru static.sletat.ru front.sletat.ru frontdebug.sletat.ru markup.sletat.ru tagmanager.google.com ajax.googleapis.com fonts.googleapis.com www.google.com tagmanager.google.com/debug/css.css googleads.g.doubleclick.net api-maps.yandex.ru vec01.maps.yandex.net vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net static-maps.yandex.ru counter.yadro.ru static.tildacdn.com/css/fonts-opensans.css static.tildacdn.com/css/fonts-roboto.css
script-src 'strict-dynamic' 'nonce-zmq4mjnkn2ytyzhizs00nmuwltllmmqtmte3mtmwyzbiotuy' 'unsafe-inline' https: http:
"script-src https: data: 'unsafe-inline' 'unsafe-eval' https://*.kisd.de https://kisd.de https://*.typekit.net https://www.google-analytics.com https://*.googleapis.com
style-src https: 'unsafe-inline' https://*.kisd.de https://kisd.de https://*.typekit.net https://*.googleapis.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.researchfish.com fonts.google.com fonts.gstatic.com fonts.googleapis.com rf-downloads.s3.amazonaws.com d1bxh8uas1mnw7.cloudfront.net d1uo4w7k31k5mn.cloudfront.net api.altmetric.com *.google-analytics.com *.gstatic.com *.youtube.com *.tawk.to wss://*.tawk.to cdn.jsdelivr.net rf-beta.s3.amazonaws.com rf-entries.s3.amazonaws.com rfapptest.s3.amazonaws.com *.froala.com blob: self
script-src 'self' www.googletagmanager.com www.google-analytics.com *.fastly-insights.com https://cdn.ravenjs.com
"script-src 'self' https://code.jquery.com/jquery-3.3.1.min.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
frame-src 'self' https://discordapp.com/widget https://kiwiirc.com/client/irc.synirc.net/ https://www.google.com/recaptcha/
"script-src 'self' https: 'unsafe-eval' 'unsafe-inline'"
"script-src 'nonce-5xgvixlww5' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: http:
script-src 'nonce-tfk4rgdysmv59e/9bd/mua==' 'self' https://seal.websecurity.norton.com https://seal.verisign.com stats4.clicktracks.com https://seal.starfieldtech.com www.googletagmanager.com rdi-ga.googlecode.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' gidonline.in reichelcormier.bid *.adbetnet.com json.bannersvideo.com serving.adbetclickin.pink cdn.hdat.xyz hhit.xyz cdn7.rocks hgbn.rocks *.mxttrf.com oconner.link franecki.net *.acdnpro.com *.r.acdnpro.com *.acdnlab.com *.criteo.com https://apis.google.com counter.yadro.ru
frame-src 'self' gidonline.in *.adbetnet.com adbetnet.advertserve.com json.bannersvideo.com https://bannersvideo.com serving.adbetclickin.pink franecki.net *.acdnpro.com *.r.acdnpro.com *.acdnlab.com biocdn.com cdn.hdat.xyz oconner.link *.r.worldssl.net counter.yadro.ru pandastream.cc moonwalk.cc serpens.nl 37.220.36.15 https://trailerclub.me https://streamguard.cc ovva.tv *.youtube.com https://www.youtube.com https://apis.google.com
connect-src 'self' gidonline.in reichelcormier.bid https://xml.bannersvideo.com wss://ws.hghit.com/ws *.onedmp.com wss://oconner.link:804
style-src 'self' 'unsafe-inline' gidonline.in counter.yadro.ru
font-src 'self' gidonline.in counter.yadro.ru fonts.gstatic.com
img-src 'self' data: gidonline.in *.adbetnet.com reichelcormier.bid serving.adbetclickin.pink xml.adbetnet.com *.r.acdnpro.com creatives.adbetclickin.pink hg-bn.com ws.hghit.com c.datpix.net hhit.xyz hgbn.space hgbn1.com hgbnr.com hgbn.rocks cdn7.rocks hghit.com *.deltacdn.net *.mxttrf.com *.r.worldssl.net https://ft.imgsniper.com front.facetz.net *.gstatic.com counter.yadro.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:"
"default-src * 'unsafe-inline' 'unsafe-eval' *.calgaryparking.com *.parkplus.ca
script-src 'unsafe-inline' 'unsafe-eval' *.calgaryparking.com *.parkplus.ca *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googleusercontent.com
img-src data: *.w3.org *.gstatic.com *.calgaryparking.com *.parkplus.ca *.google-analytics.com *.googleapis.com"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.sitecore.net *.youtube.com *.ytimg.com *.facebook.net *.facebook.com *.qq.com *.sharethis.com *.vzaar.com *.mookie1.com *.tiqcdn.com *.akamaihd.net *.adnxs.com *.google.com *.google.com.hk *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.cloudfront.net c.sharethis.mgr.consensu.org *.salecycle.com *.myqcloud.com *.gstatic.com *.recaptcha.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sitecore.net *.youtube.com *.ytimg.com *.facebook.net *.facebook.com *.qq.com *.sharethis.com *.vzaar.com *.mookie1.com *.tiqcdn.com *.akamaihd.net *.adnxs.com *.google.com *.google.com.hk *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.cloudfront.net c.sharethis.mgr.consensu.org *.salecycle.com *.gstatic.com *.recaptcha.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maps.googleapis.com https://www.google-analytics.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://tanketom.no:443 https://*.tanketom.no:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' https: data: blob: https://infosec.exchange
media-src 'self' https: data: https://infosec.exchange
connect-src 'self' blob: https://infosec.exchange wss://infosec.exchange
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help
style-src 'self' 'unsafe-inline' https://fonts.intercomcdn.com https://static.intercomassets.com https://static.intercomcdn.com https://marketing.intercomassets.com https://marketing.intercomcdn.com https://intercom.help
script-src 'self' 'unsafe-inline' 'unsafe-eval' an.yandex.ru yandex.st yastatic.net mc.yandex.ru *.6htb5ck86hk8i9.com *.1g0x09523.com *.dyjdj358q.com *.mf20ovrcc.com *.sw2block.com *.s2normal.com *.sw1block.com *.s1block.com *.s2block.com *.s3block.com *.s4block.com *.s1venus.com *.mediavenus.biz *.s1venus.com *.mediavenus.ru http://yastatic.net/share/share.js https://apis.google.com https://widgets.getpocket.com http://www.google.ru http://top-fwz1.mail.ru http://magicwishes.ru http://magic-7ya.ru/ http://privorot-vsem.ru/ http://darstars.ru http://beautydar.ru http://counter.rambler.ru ajax.googleapis.com www.gstatic.com yandex.st an.yandex.ru pagead2.googlesyndication.com vk.com cdn.connect.mail.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com
object-src 'self' http://yastatic.net/share/share.js https://apis.google.com https://widgets.getpocket.com http://www.google.ru ajax.googleapis.com yastatic.net www.gstatic.com
style-src 'self' 'unsafe-inline' yandex.st yastatic.net
img-src 'self' data: avatars-fast.yandex.net favicon.yandex.net *.6htb5ck86hk8i9.com *.1g0x09523.com *.dyjdj358q.com *.mf20ovrcc.com *.sw2block.com *.s2normal.com *.sw1block.com *.s1block.com *.s2block.com *.s3block.com *.s4block.com  *.s1venus.com *.mediavenus.biz *.s1venus.com *.mediavenus.ru http://yastatic.net/share/share.js https://apis.google.com https://widgets.getpocket.com http://www.google.ru ajax.googleapis.com http://top-fwz1.mail.ru http://magicwishes.ru http://magic-7ya.ru/ http://privorot-vsem.ru/ http://darstars.ru http://beautydar.ru an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com
frame-src awaps.yandex.ru awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru http://yastatic.net/share/share.js https://apis.google.com https://widgets.getpocket.com http://www.google.ru ajax.googleapis.com http://yastatic.net/share yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru googleads.g.doubleclick.net vk.com
connect-src 'self' an.yandex.ru mc.yandex.ru yandex.st yastatic.net http://yastatic.net/share/share.js https://apis.google.com https://widgets.getpocket.com http://www.google.ru ajax.googleapis.com vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru mc.yandex.ru *.gstatic.com"
"frame-ancestors 'self' app-sj04.marketo.com googletagmanager.com fast.wistia.net"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://rominirani.com:443 https://*.rominirani.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'unsafe-eval' 'unsafe-inline' 'self' *.googleapis.com *.google-analytics.com *.twitter.com *.twimg.com cdn.jsdelivr.net/npm/vue
style-src 'unsafe-inline' 'self' *.googleapis.com *.google-analytics.com *.twitter.com
"script-src 'nonce-53c3bb01087cbada6583c263ed07e2251a917bf0' 'strict-dynamic' https: http:
"default-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval'
media-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval'
img-src http: https: data: 'unsafe-inline' 'unsafe-eval'
script-src http: https: data: 'unsafe-inline' 'unsafe-eval'
style-src http: https: data: 'unsafe-inline' 'unsafe-eval'
connect-src http: https: data: 'unsafe-inline' 'unsafe-eval'
worker-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval'
font-src http: https: data: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google.com *.gstatic.com *.googleapis.com stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com cms.mijncarrousel.nl
frame-src 'self' *.hypercomments.com https://boostervideo.ru https://dev.regnets.ru http://*.googleapis.com http://imasdk.googleapis.com https://inter1ads.com https://ymetrica.com https://ymetrica1.com https://*.youtube.com http://127.0.0.1:20489
img-src data: 'self'  *.hypercomments.com http://www.gravatar.com http://*.wp.com https://ymetrica.com https://mc.yandex.ru https://mc.yandex.md https://mc.yandex.by https://mc.yandex.kz ymetrica.com *.yandex.by *.yandex.ru *.yandex.md *.yandex.ua *.yandex.kz *.yandex.com.tr *.ymetrica.com *.yandex.ee ymetrica.com yandex.ru https://ymetrica1.com https://mc.webvisor.org *.novostimira.biz http://tdsy.info https://tdsy.info http://iplog.info https://iplog.info *.mebelok.com https://*.google.ru https://*.gstatic.com https://www.google-analytics.com https://*.googleapis.com https://*.google.com http://*.mgid.com https://*.mgid.com *.scorecardresearch.com *.marketgid.com http://bcp.crwdcntrl.net http://cm.steepto.com vtds.info http://lidn.info http://obcdn.info http://mydn.info http://*.mobilebanner.ru http://*.tlrtb.com https://lyx.guru http://lyx.guru http://mocdn.info https://mocdn.info https://modn.info http://modn.info https://images.gate-cdn.ru https://v6t39t.ru https://dsn-fishki.ru https://rgy1wk.ru https://vt4dlx.ru https://03y60n.ru https://d38dub.ru *.pc1ads.com *.user-api.com *.propellerclick.com *.adskeeper.co.uk http://*.googlesyndication.com https://*.googleusercontent.com https://i.ytimg.com http://s.ytimg.com http://i.ytimg.com *.ytimg.com https://yt3.ggpht.com https://img.youtube.com http://*.imperiya.by http://imperiya.by http://counter.yadro.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com https://ajax.googleapis.com http://*.imperiya.by http://imperiya.by *.hypercomments.com https://cdn.jsdelivr.net https://yastatic.net https://mc.yandex.ru https://ymetrica.com https://ymetrica1.com https://*.google.ru https://*.gstatic.com https://www.google-analytics.com http://www.googletagmanager.com http://eboundservices.com http://*.googleapis.com https://*.2mdn.net https://adservice.google.com http://context-art.ru *.novostimira.biz http://tdsy.info https://tdsy.info http://iplog.info https://iplog.info http://*.mgid.com https://*.mgid.com http://*.scorecardresearch.com http://jsc.mgid.com https://cdn.siteswithcontent.com https://pushance.com http://pushance.com *.propellerclick.com vtds.info http://lidn.info http://obcdn.info http://mydn.info https://lyx.guru http://lyx.guru http://*.mobilebanner.ru http://*.tlrtb.com http://mocdn.info https://mocdn.info https://modn.info http://modn.info
"default-src 'self' https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.authorize.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.authorize.net https://*.google.com https://*.beanstream.com https://*.paypalobjects.com https://*.gstatic.com https://*.convergepay.com
frame-src 'self' https://*.smarterproctoring.com https://*.google.com https://player.vimeo.com/
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: googletagmanager.com google-analytics.com
child-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: youtube.com
script-src 'nonce-tkl2ogsis46y8zavlbaeauv7g58qvdaw' *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com fonts.googleapis.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com platform.twitter.com *.twimg.com *.amazonaws.com
style-src *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test 'unsafe-inline' *.bootstrapcdn.com fonts.googleapis.com *.google.com platform.twitter.com
form-action *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test platform.twitter.com syndication.twitter.com
font-src 'self' *.bootstrapcdn.com data: fonts.gstatic.com
frame-src *.google.com platform.twitter.com syndication.twitter.com *.youtube.com *.facebook.com"
"script-src 'self' 'unsafe-inline' adservice.google.com *.doubleclick.net *.googleadservices.com *.googleanalytics.com *.google-analytics.com apis.google.com https://maps.googleapis.com https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.5.10/angular.min.js https://code.angularjs.org/1.5.10/angular-sanitize.min.js https://www.google.com/js/maia.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.googletagmanager.com tagmanager.google.com https://www.google.co.uk https://www.google.com/insights/consumersurveys/gk/static/hats-integration-release.js https://support.google.com/inapp/api.js https://www.gstatic.com/feedback/js/help/prod/service/screenshot.min.js http://www.google.com/tools/feedback/metric/report 'nonce-v0wjgkyhb8fk'
script-src 'self' https://*.pusher.com https://*.nrk.no https://www.google-analytics.com https://*.chartbeat.com https://*.chartbeat.net https://*.linkpulse.com https://*.lp4.io https://*.scorecardresearch.com https://www.gstatic.com https://cws.conviva.com https://ma93-r.analytics.edgekey.net https://ssl-nrkstream.tns-cs.net blob:
connect-src 'self' wss://*.pusher.com wss://*.pusherapp.com wss://*.nrk.no https://*.nrk.no https://nrk-datahub.appspot.com https://*.qbrick.com https://*.telenorcdn.net https://*.akamaized.net https://*.akamaihd.net https://*.linkpulse.com https://*.lp4.io https://www.google-analytics.com https://*.scorecardresearch.com https://ma93-r.analytics.edgekey.net https://ssl-nrkstream.tns-cs.net https://cws.conviva.com
img-src 'self' https://*.lp4.io https://*.linkpulse.com https://*.tns-cs.net https://*.chartbeat.net https://www.google-analytics.com https://*.nrk.no https://*.akamaized.net https://*.akamaihd.net https://*.scorecardresearch.com https://*.googleusercontent.com https://ma93-r.analytics.edgekey.net https://ssl-nrkstream.tns-cs.net data:
media-src https://*.nrk.no https://*.qbrick.com https://*.telenorcdn.net https://*.akamaized.net https://*.akamaihd.net blob: data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://electricliterature.com:443 https://*.electricliterature.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' data: https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com https://t.co https://analytics.twitter.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://twemoji.maxcdn.com https://twitter.github.io/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vine.co https://*.twitter.com https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co https://platform.vine.co https://stats.g.doubleclick.net https://ssl.google-analytics.com https://ajax.googleapis.com https://connect.facebook.net
style-src 'self' 'unsafe-inline' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co
media-src 'self' blob: https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://*.vncdn.co https://media.vineapp.com
object-src 'self' blob: https://vine.co https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com
connect-src 'self' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com https://graph.facebook.com
font-src 'self' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co
"frame-ancestors 'self' https://buy.adesa.com https://ots.drivindealer.com https://*.iasmarketplace.com"
script-src *.davlenienorm.com davlenienorm.com mc.yandex.ru *.google-analytics.com yandex.ru *.yandex.net yandex.st *.yandex.st yastatic.net https://yastatic.net *.yandex.ru yastatic.net *.yastatic.net https://*.yandex.ru https://vk.com vk.com *.doubleclick.net *.googlesyndication.com *.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com yadro.ru https://yadro.ru *.yadro.ru https://*.yadro.ru https://adservice.google.ru https://adservice.google.com https://www.googletagmanager.com https://pushprofit.ru https://www.googletagservices.com https://ati30re4.ru 'self' 'unsafe-inline' 'unsafe-eval'
style-src *.davlenienorm.com davlenienorm.com *.googleapis.com https://*.googleapis.com data: *.gstatic.com https://*.gstatic.com https://*.yandex.ru 'self' 'unsafe-inline' 'unsafe-eval'
img-src *.davlenienorm.com davlenienorm.com mc.yandex.ru *.gravatar.com http://*.gravatar.com data: *.google-analytics.com https://vk.com vk.com yadro.ru https://yadro.ru *.yadro.ru https://*.yadro.ru yastatic.net *.yastatic.net *.yandex.ru *.yandex.net https://*.yandex.net https://*.yandex.ru *.2mdn.net *.doubleclick.net *.googleapis.com *.googlesyndication.com *.gstatic.com https://*.2mdn.net https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com 'self'
font-src *.davlenienorm.com davlenienorm.com *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru data: 'self'
object-src *.davlenienorm.com davlenienorm.com *.gstatic.com an.yandex.ru https://*.gstatic.com ytimg.com 2mdn.net yt3.ggpht.com https://an.yandex.ru googleads.g.doubleclick.net *.doubleclick.net https://*.doubleclick.net 'self'
frame-src *.davlenienorm.com davlenienorm.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.com https://*.youtube.ru https://*.youtube.com https://youtube.ru ytimg.com https://vk.com https://*.vk.com vk.com *.yandex.ru yandex.ru *.yandex.net yandex.net yandex.st *.yandex.st https://yastatic.net yastatic.net *.yastatic.net https://*.yandex.ru https://*.yandexadexchange.net 'self'
child-src *.davlenienorm.com davlenienorm.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.com https://*.youtube.ru https://*.youtube.com https://youtube.ru ytimg.com https://vk.com https://*.vk.com vk.com *.yandex.ru yandex.ru *.yandex.net yandex.net yandex.st *.yandex.st https://yastatic.net yastatic.net *.yastatic.net https://*.yandex.ru 'self'
connect-src *.davlenienorm.com davlenienorm.com mc.yandex.ru *.yandex.ru https://*.yandex.ru *.google-analytics.com 'self'
"default-src 'self' 'unsafe-eval' https://*.tgdd.vn https://*.thegioididong.com
style-src 'self' 'unsafe-inline' https: data:
frame-src 'self' https://vuivuilocal.firebaseapp.com https://embed.24liveblog.com https://node.24live.co https://googleads.g.doubleclick.net https://static.apester.com https://*.doubleclick.net https://*.thegioididong.com https://*.facebook.com https://*.google.com https://youtube.com https://*.youtube.com https://twitter.com https://*.twitter.com
media-src 'self' https://*.tgdd.vn https://*.thegioididong.com https://*.dienmayxanh.com https://*.vuivui.com
connect-src 'self' https://www.facebook.com wss://socket.24live.co wss://connect.24liveplus.com https://stats.qmerce.com https://api.mixpanel.com https://*.dienmayxanh.com https://*.vuivui.com https://*.twitter.com https://renderer.qmerce.com https://*.apester.com https://display.apester.com https://*.facebook.com https://*.googleapis.com https://*.google-analytics.com https://*.thegioididong.com wss://*.dienmayxanh.com wss://*.thegioididong.com wss://*.vuivui.com
style-src 'self' 'unsafe-inline' https://d144upi4dwbdmm.cloudfront.net/production/ https://api.nextlot.com/v3/assets/1502.css https://fonts.googleapis.com sbauction.com.au sbagriculture.com.au *.gstatic.com
script-src 'self' 'unsafe-inline' *.youtube.com *.ytimg.com https://d144upi4dwbdmm.cloudfront.net/production/ https://connect.facebook.net https://*.facebook.com https://cdnjs.cloudflare.com sbauction.com.au sbagriculture.com.au *.google.com *.gstatic.com  https://cdn.polyfill.io https://www.googletagmanager.com https://www.google-analytics.com  https://cdn.calltrk.com/companies/777275227/  https://js.calltrk.com/group/0/6ed43424785ceeb8783e/
font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com sbauction.com.au sbagriculture.com.au https://d144upi4dwbdmm.cloudfront.net/production/
img-src 'self' https://img.youtube.com https://secure.gravatar.com https://*.facebook.com sbauction.com.au sbagriculture.com.au https://d2wkteasag18mt.cloudfront.net/images/  https://d144upi4dwbdmm.cloudfront.net/images/ https://d144upi4dwbdmm.cloudfront.net/production/ https://www.google-analytics.com
connect-src 'self' https://*.pubnub.com https://api.nextlot.com sbauction.com.au sbagriculture.com.au https://www.google-analytics.com https://stats.g.doubleclick.net  https://js.calltrk.com/group/0/6ed43424785ceeb8783e/"
"connect-src 'self' https://internal-api.monzo.com https://api.s101.nonprod-ffs.io https://www.google-analytics.com https://stats.g.doubleclick.net https://m.stripe.com https://pay.google.com https://play.google.com
img-src 'self' https://q.stripe.com https://stats.g.doubleclick.net https://www.google-analytics.com https://monzo-prod-user-images.imgix.net https://monzo-nonprod-user-images.imgix.net https://internal-api.monzo.com https://api.s101.nonprod-ffs.io data:
script-src 'self' https://cdn.polyfill.io https://js.stripe.com https://storage.googleapis.com https://pay.google.com https://www.gstatic.com https://www.google-analytics.com 'nonce-gd4caykaeel2oml0heegucbr0woxeqic78/faz2c' 'unsafe-inline'
style-src 'self' https://cdnjs.cloudflare.com 'sha256-k4v9dzltf6e0ixp3xosec0riv7u+wgjrjvjwts/dmsw=' 'sha256-c1fu6tgmjwkntgbw8iqz4obbm+hv3zpaley6dkxwxy0=' 'nonce-gd4caykaeel2oml0heegucbr0woxeqic78/faz2c' 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval'  www.google-analytics.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.syndication.twimg.com *.surveygizmo.com *.createsend1.com *.gstatic.com niagararegion.createsend.com *.googleapis.com *.google-analytics.com *.google.com *.siteimprove.com translate.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.google.com https://adservice.google.com https://adservice.google.ru https://pagead2.googlesyndication.com https://www.googletagservices.com https://vk.com https://api-maps.yandex.ru https://*.maps.yandex.net https://clck.yandex.ru https://an.yandex.ru https://mc.yandex.ru https://yandex.st https://yastatic.net
style-src 'self' 'unsafe-inline' https://samozapis-spb.ru https://yandex.st https://yastatic.net https://fonts.googleapis.com
img-src 'self' data: https://pagead2.googlesyndication.com https://csi.gstatic.com https://counter.yadro.ru/ https://vk.com https://samozapis-spb.ru https://*.maps.yandex.net https://api-maps.yandex.ru https://static-maps.yandex.ru https://mc.yandex.ru https://avatars-fast.yandex.net https://favicon.yandex.net https://avatars.mds.yandex.net https://an.yandex.ru
media-src 'self' https://*.yandex.net https://yandex.st https://yastatic.net
child-src 'self' https://googleads.g.doubleclick.net https://api-maps.yandex.ru https://vk.com https://login.vk.com
frame-src 'self' https://googleads.g.doubleclick.net gsa://onpageload https://api-maps.yandex.ru https://vk.com https://login.vk.com https://awaps.yandex.ru https://awaps.yandex.net https://yandexadexchange.net https://*.yandexadexchange.net https://yastatic.net https://*.yandex.ru
font-src 'self' https://yastatic.net yastatic.net https://fonts.gstatic.com fonts.gstatic.com
connect-src 'self' https://an.yandex.ru https://strm.yandex.ru https://csi.gstatic.com https://mc.yandex.ru https://yandex.st https://yastatic.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://gametorrahod.com:443 https://*.gametorrahod.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' blob: https: iefix: *
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: * ajax.googleapis.com w.sharethis.com assets.juicer.io www.google-analytics.com connect.facebook.net facebook.com t.sharethis.com
object-src 'self' https: blob: * www.youtube.com
style-src 'self' https: 'unsafe-inline' * w.sharethis.com
img-src 'self' https: data: iefix: * graph.facebook.com w.sharethis.com l.sharethis.com scontent.xx.fbcdn.net www.google-analytics.com stats.g.doubleclick.net external.xx.fbcdn.net facebook.com
frame-src 'self' https: * w.sharethis.com seg.sharethis.com edge.sharethis.com www.youtube.com t.sharethis.com
connect-src 'self' https: * w.sharethis.com l.sharethis.com
script-src blob: 'unsafe-eval' 'nonce-sjhzq1p2bnbprlq1b3nhcxfanvhrrgjn' *.teknik.io:443 teknik.io:443
img-src 'self' https: data: blob: https://bonn.social
media-src 'self' https: data: https://bonn.social
connect-src 'self' blob: https://bonn.social wss://bonn.social
script-src 'self' www.google-analytics.com tagmanager.google.com www.googletagmanager.com maps.googleapis.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' tagmanager.google.com www.googletagmanager.com 'unsafe-inline'
img-src 'self' data: www.google-analytics.com *.g.doubleclick.net maps.googleapis.com *.gstatic.com
script-src 'self' https://www.google.com https://ajax.googleapis.com https://cdn.inspectlet.com https://cdn.pendo.io https://app.pendo.io https://browser.sentry-cdn.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://www.google.com https://ajax.googleapis.com 'unsafe-inline' blob:
connect-src 'self' http://hn.inspectlet.com wss://ws.inspectlet.com https://antispamcloud.com:443 https://sentry.io
img-src 'self' http://hn.inspectlet.com https://app.pendo.io data:
"font-src 'self' fonts.gstatic.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com
default-src 'self' c.sharethis.mgr.consensu.org l.sharethis.com staticxx.facebook.com
frame-src 'self' maps.google.ie accounts.google.com apis.google.com platform.twitter.com staticxx.facebook.com syndication.twitter.com www.facebook.com www.google.com www.wpzoom.com maps.google.com
img-src 'self' maps.google.com maps.googleapis.com s.w.org secure.gravatar.com l.sharethis.com maps.gstatic.com ps.w.org
script-src 'self' 'unsafe-inline' apis.google.com maps.googleapis.com maps.google.com www.gstatic.com connect.facebook.net platform.twitter.com ws.sharethis.com www.google.com
style-src 'self' fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net 'unsafe-inline'
"frame-ancestors 'self' *.career-inspiration.com *.pathmotion.com *.talent-soft.com
"frame-ancestors 'self' http://webvisor.com http://turbo.az http://*.turbo.az http://tap.az http://*.tap.az turbo.az *.turbo.az tap.az *.tap.az"
"child-src *.vimeo.com *.also.com https://content.copmedia.de *.saferpay.com *.sparkassen-kreditkarten.de *.vimeocdn.com http://files.electronicsales.de https://3dsecure-cardprocess.de *.addthis.com www.google.com masteradmin2.es-shops.de http://*.also.com *.webtrends.com *.youtube-nocookie.com *.dailymotion.com *.hotjar.com *.ytimg.com *.webtrendslive.com 'self' 'unsafe-inline' *.youtube.com *.skrill.com *.facebook.net *.commerzfinanz.com
connect-src wss://*.hotjar.com *.pingdom.net https://graylog.hotjar.com:12443 *.addthis.com https://masteradmin2.es-shops.de *.hotjar.com *.google-analytics.com 'self' *.trustedshops.com
font-src *.cnetcontent.com data: fonts.gstatic.com  *.trustedshops.com 'self'
form-action https://www.paypal.com *.sofort.com https://www.sofortueberweisung.de *.skrill.com http://pay.skrill.com 'self' http://fisherman.es-shops.de
img-src medien.shopwelt.de *.paypalobjects.com http://copsearch.de http://content.copmedia.de http://*.es-shops.de  *.webtrendslive.com *.actebis-images.com *.also.com *.windows.net *.youtube-nocookie.com https://gzhls.at http://*.commercesolution.de  *.webtrends.com *.pingdom.net *.gstatic.com *.copmedia.de actebis-images.com http://cdn.cnetcontent.com images.ep-es.com http://*.electronicsales.de *.geizkragen.de *.trustedshops.com img.idealo.com *.youtube.com *.electronicsales-mediaserver.de *.gzhls.at *.cnetcontent.com http://electronicsales.de/ img.billiger.de *.electronicsales.de 'self' data: 'unsafe-inline' *.google-analytics.com *.facebook.com stats.g.doubleclick.net
script-src https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.webtrends.com https://code.highcharts.com *.addthisedge.com *.webtrendslive.com rum-static.pingdom.net tagmanager.google.com *.saferpay.com *.cnetcontent.com *.googleadservices.com *.hotjar.com *.addthis.com https://code.jquery.com *.sparkassen-kreditkarten.de 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.trustedshops.com *.skrill.com *.facebook.net *.commerzfinanz.com
style-src *.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com *.cnetcontent.com 'self' 'unsafe-inline' *.trustedshops.com"
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.knoxbox.com *.amazonaws.com *.mcafeesecure.com *.googleapis.com *.youtube.com *.crazyegg.com *.visualwebsiteoptimizer.com *.bing.com *.pardot.com *.google.com *.google-analytics.com *.googleadservices.com *.facebook.net *.facebook.com *.wufoo.com *.doubleclick.net *.mouseflow.com *.comm100.com
img-src 'self' data: *.doubleclick.net *.visualwebsiteoptimizer.com *.bing.com *.googleapis.com *.google.com *.google-analytics.com * *.ffbtas.com *.rubiconproject.com acuityplatform.com
frame-src 'self' *.knoxbox.com *.wufoo.com *.youtube.com *.doubleclick.net *.google.com *.facebook.com *.twitter.com  *.pardot.com *.comm100.com *.facebook.net *.mcafeesecure.com
font-src 'self' *.knoxbox.com *.googleapis.com *.google.com *.gstatic.com *.bootstrapcdn.com *.typekit.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.knoxbox.com *.googletagmanager.com *.google.com *.visualwebsiteoptimizer.com *.doubleclick.net *.pardot.com *.crazyegg.com *.google-analytics.com *.googleadservices.com *.bing.com acuityplatform.com *.facebook.net *.facebook.com *.google-analytics.com *.doubleclick.net *.wufoo.com wufoo.com *.googleapis.com *.jsdelivr.net *.ywxi.net *.mouseflow.com *.twitter.com *.linkedin.com *.pinterest.com *.typekit.net *.comm100.com *.licdn.com *.linkedin.com *.bizographics.com *.adnxs.com *.amazonaws.com addsearch.com *.searchcdn.com *.rootbox.host
style-src 'self' 'unsafe-inline' *.knoxbox.com *.google.com *.googleapis.com *.bootstrapcdn.com *.addsearch.com *.cloudfront.net
"frame-src 'self' https://www.google.com https://staticxx.facebook.com https://www.youtube.com https://www.facebook.com http://erp.vkursi.pro https://24b.tascombank.ua https://wdtsearch2.azurewebsites.net"
connect-src ws://localhost:* https://www.google-analytics.com https://fonts.googleapis.com https://api.stripe.com https://*.nebenan.de
script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* https://js.stripe.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com www.googleadservices.com connect.facebook.net platform.twitter.com
img-src 'self' data: https://* www.google-analytics.com
script-src *.scryfall.com checkout.stripe.com www.google-analytics.com 'unsafe-eval'
img-src *.scryfall.com *.stripe.com www.google-analytics.com data:
connect-src api.scryfall.com scryfall.com www.google-analytics.com checkout.stripe.com
script-src 'nonce-x2qqpnheadrcfgnr' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http:"
img-src 'self' veracitystatic.azureedge.net brandcentral.dnvgl.com veracitycdn.azureedge.net veracity.azureedge.net veracitytest.azureedge.net veracityprod.azureedge.net www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.no
media-src 'self' brandcentral.dnvgl.com veracityprod.blob.core.windows.net veracitycdn.azureedge.net veracitystatic.azureedge.net
script-src 'self' veracitycdn.azureedge.net az416426.vo.msecnd.net 'sha256-lwcveidjx05b33xbbbizs8ahhb1nqye8/ttvr7wakjg=' 'sha256-fdggxq5ykqncmxcema0rwc7dav3a5wuvxj5v0gi1ml8='
script-src 'nonce-dg0r96iepnuxy/adf5347zlnmbyzjkhtywdpz6k59hc=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://carthrottle.io:443 https://*.carthrottle.io:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http://*.google-analytics.com http://*.googleapis.com localhost:*
img-src 'self' https: http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com
style-src 'self'  'unsafe-inline' https: http://*.googleapis.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.gatecoin.com *.gtcprojects.com www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com platform.twitter.com cdn.syndication.twimg.com tagmanager.google.com fullstory.com
frame-src 'self' www.google.com www.youtube.com *.twitter.com
img-src https: 'self' data: *.google-analytics.com bam.nr-data.net stats.g.doubleclick.net cdasiaonline.s3-ap-southeast-1.amazonaws.com
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.newrelic.com bam.nr-data.net
frame-src 'self' https://www.youtube.com https://platform.twitter.com https://www.facebook.com https://checkout.stripe.com data:
script-src 'self' https://pfq-static.com https://www.google.com https://platform.twitter.com https://checkout.stripe.com
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-mwfinjg5zwetyjiyni00mtcylwizoditzmewmdrkmtrly2uy'
"frame-ancestors 'self' https://*.fdj.fr https://www.laredoute.fr/ http://clients.sismodesign.com
"default-src http: data: blob: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-xxt1f686qklx6lmmajsswq==' yastatic.net betastatic.yandex.net mc.yandex.ru api-maps.yandex.ru suggest-maps.yandex.ru https://*.maps.yandex.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com  https://d23nd6ymopvz52.cloudfront.net/webengage/ https://c.webengage.com/ https://ssl.widgets.webengage.com/js/webengage-min-v-6.0.js https://ajax.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.google.com https://www.google-analytics.com/ https://twitter.com/  https://connect.facebook.net  https://js.pusher.com https://timeline34-clientstats1.pusher.com https://sockjs-eu.pusher.com https://stats.pusher.com
style-src 'self' 'unsafe-inline' https://use.fontawesome.com/  https://fonts.googleapis.com https://csi.gstatic.com https://fonts.googleapis.com https://csi.gstatic.com
font-src 'self' https://use.fontawesome.com/releases/  https://fonts.googleapis.com https://fonts.gstatic.com https://csi.gstatic.com https://foodle.pro
frame-src 'self' https://player.vimeo.com/  https://www.youtube.com https://vimeo.com https://www.facebook.com https://snapservice.webengage.com/ https://feedback.webengage.com/ https://z9919820b.webengage.co/ https://staticxx.facebook.com/ https://www.google.com http://www.gstatic.com
"form-action *.wildberries.ru *.wbpay.ru *.rsb.ru *.vbrr.ru"
img-src 'self' https: data: blob: https://mstdn.guru
media-src 'self' https: data: https://mstdn.guru
connect-src 'self' blob: https://mstdn.guru wss://mstdn.guru
connect-src 'self' *.instarea.com api.luigisbox.com video.orange.sk analytics.algolia.com *.algolia.net *.algolianet.com onesignal.com orange.livesale.me instarea.com *.orange.sk *.orangeportal.sk sk.hit.gemius.pl *.hotjar.com wss://*.hotjar.com
font-src 'self' data: orange.livesale.me *.googleapis.com *.cloudfront.net *.orange.sk *.hotjar.com
child-src 'self' blob: video.orange.sk *.doubleclick.net pohoda.streaming.sk *.orange-doma.sk orange-doma.sk *.orange.sk *.orangeportal.sk www.googletagmanager.com *.creativecdn.com *.hit.gemius.pl www.youtube.com *.facebook.com creativecdn.com *.hotjar.com optimize.google.com www.google.com
img-src 'self' data: video.orange.sk orange.livesale.me rc-orange.livesale.me *.doubleclick.net *.ctnsnet.com *.google.com *.orange.sk *.orangeportal.sk *.google-analytics.com *.scorecardresearch.com *.adocean.pl img.mobilshow.cz www.osporte.sk www.ohudbe.sk oskole.sk googleads.g.doubleclick.net stats.g.doubleclick.net www.google.sk img.youtube.com www.google.com www.facebook.com *.gstatic.com *.googleapis.com www.googletagmanager.com static.hotjar.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' cdn.luigisbox.com video.orange.sk *.algolia.net *.algolianet.com onesignal.com *.doubleclick.net orange.livesale.me rc-orange.livesale.me *.ctnsnet.com *.amazonaws.com *.adform.net *.orange.sk *.orangeportal.sk *.google-analytics.com www.googletagmanager.com *.googleadservices.com *.scorecardresearch.com *.gemius.pl *.facebook.net completion.ke.orange.fr *.hotjar.com *.google.com www.gstatic.com *.google.sk *.googleapis.com *.arcgisonline.com *.jsdelivr.net *.leady.com *.instarea.com optimize.google.com
style-src 'unsafe-inline' 'self' video.orange.sk onesignal.com orange.livesale.me *.orange.sk *.orangeportal.sk *.google.com optimizely.github.io optimize.google.com *.arcgisonline.com
script-src 'self' 'nonce-2fad3koa31' 'nonce-2fad3koa32' 'nonce-2fad3koa33' 'nonce-2fad3koa34' 'nonce-2fad3koa35' 'nonce-2fad3koa36' 'nonce-2fad3koa37' 'nonce-2fad3koa38' 'nonce-2fad3koa39' 'nonce-2fad3koa40' 'nonce-2fad3koa41' 'nonce-4afg201b10'"
font-src 'self' https://code.ionicframework.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.datatables.net/v/bs/dt-1.10.12/datatables.min.js
style-src 'self' 'unsafe-inline' https://cdn.datatables.net/v/bs/dt-1.10.12/ https://code.ionicframework.com/ionicons/2.0.1/css/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com www.youtube.com player.vimeo.com s.ytimg.com cdn.syndication.twimg.com connect.facebook.net"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.redeem.myrewardsaccess.com *.rtr.redeem.myrewardsaccess.com *.usbank.com usbank1.d2.sc.omtrdc.net
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.redeem.myrewardsaccess.com *.rtr.redeem.myrewardsaccess.com *.rewards.usbank.com usbank1.d2.sc.omtrdc.net
img-src 'self' *.redeem.myrewardsaccess.com *.rtr.redeem.myrewardsaccess.com *.rewards.usbank.com usbank1.d2.sc.omtrdc.net
"default-src 'self' www.blockstream.com piwik.blockstream.io preview.blockstream.com blockstream.com www.youtube.com
script-src 'unsafe-eval' 'report-sample' https://npm.community/logs/ https://npm.community/sidekiq/ https://npm.community/mini-profiler-resources/ https://discourse-cdn-sjc1.com/business6/assets/ https://discourse-cdn-sjc1.com/business6/brotli_asset/ https://npm.community/extra-locales/ https://discourse-cdn-sjc1.com/business6/highlight-js/ https://discourse-cdn-sjc1.com/business6/javascripts/ https://discourse-cdn-sjc1.com/business6/plugins/ https://discourse-cdn-sjc1.com/business6/theme-javascripts/ https://discourse-cdn-sjc1.com/business6/svg-sprite/ https://www.google-analytics.com/analytics.js
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http://w.sharethis.com/ http://t.sharethis.com http://cdnjs.cloudflare.com http://www.google-analytics.com/ http://ajax.webcamp.fr/
"default-src 'self' *.gstatic.com *.web.money *.wmtransfer.com *.webmoney.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.web.money *.wmtransfer.com *.webmoney.ru
frame-src 'self' *.web.money *.wmtransfer.com *.webmoney.ru
connect-src 'self' *.googletagmanager.com *.google-analytics.com *.web.money *.wmtransfer.com *.webmoney.ru
"child-src 'self' js.driftt.com www.youtube-nocookie.com www.youtube.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: mediastream: https://*.brumbrum.it https://*.hotjar.com ws://*.hotjar.com wss://*.hotjar.com https://*.logentries.com https://*.jsdelivr.net *.pinterest.com maps.googleapis.com https://*.gstatic.com *.google-analytics.com https://*.googletagmanager.com https://*.slack.com https://*.cloudfront.net *.freshchat.com https://*.pusher.com https://*.facebook.net https://*.facebook.com wss://*.pusherapp.com https://*.newrelic.com https://*.nr-data.net freegeoip.net https://*.amazonaws.com https://*.youtube.com https://*.pubnub.com https://*.googleapis.com https://cdnjs.cloudflare.com https://*.google.com https://*.google.it https://*.doubleclick.net https://dpdb.webvr.rocks ws://*.freshchat.com wss://*.freshchat.com https://www.googleadservices.com https://*.cookiebot.com https://*.fullstory.com https://fullstory.com https://*.youtube-nocookie.com https://*.criteo.net https://*.criteo.com
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://fonts.googleapis.com/ https://fonts.gstatic.com/ data: http://* https://*"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: maxcdn.bootstrapcdn.com static.issuu.com e.issuu.com docs.google.com www.google-analytics.com *.twitter.com *.twimg.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.disquscdn.com code.jquery.com *.googleapis.com www.votervoice.net www.googletagmanager.com connect.facebook.net www.youtube.com maps.google.com www.google.com www.facebook.com staticxx.facebook.com disqus.com fonts.gstatic.com *.gstatic.com http://www.tnmed.org stats.g.doubleclick.net referrer.disqus.com https://services.texmed.org/45/tma.cspreportapi/api/csp
script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com apis.google.com www.gstatic.com www.google.com www.facebook.com connect.facebook.net use.fontawesome.com www.heureka.cz ssl.heureka.cz im9.cz *.getsmartlook.com *.smartlook.com
img-src 'self' www.google-analytics.com www.google.com www.google.cz/ads/ www.facebook.com csi.gstatic.com stats.g.doubleclick.net ssl.heureka.cz im9.cz sdn.szn.cz d25-a.sdn.szn.cz
style-src 'self' 'unsafe-inline' www.google.com fonts.googleapis.com
frame-src 'self' www.google.com www.facebook.com staticxx.facebook.com ssl.heureka.cz www.zbozi.cz
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://maps.googleapis.com https://fonts.googleapis.com https://www.gstatic.com/ https://www.aexp-static.com  http://www.google-analytics.com https://mc.yandex.ru  https://www.googleadservices.com https://connect.facebook.net https://www.googletagmanager.com"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com connect.facebook.net *.pricespider.com *.google-analytics.com *.googleapis.com *.powerreviews.com *.iesnare.com *.jquery.com *.typekit.net *.revtrax.com *.youtube.com *.pinterest.com *.disqus.com *.adroll.com *.ytimg.com
"default-src 'self' 'unsafe-inline' data: *.voxbeam.com *.voxbeam.co.uk *
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.google.com *.google-analytics.com *.typekit.com *.addthis.com *.addthisedge.com *.chartbeat.com *.infogram.com *.jquery.com unpkg.com
img-src 'self' 'unsafe-inline' data: *.twimg.com *.typekit.net *.google-analytics.com *.doubleclick.net *.chartbeat.net *.tinypic.com *.wmflabs.org
frame-src 'self' 'unsafe-inline' datawrapper.dwcdn.net *.addthis.com *.google.com *.infogram.com *.jquery.com
connect-src 'self' 'unsafe-inline' *.addthis.com *.typekit.net
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com safesurfs.net:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com track.gaconnector.com www.google-analytics.com www.googletagmanager.com track.gaconnector.com api-public.addthis.com graph.facebook.com m.addthis.com m.addthisedge.com s7.addthis.com www.linkedin.com *.iovation.com stats.g.doubleclick.net i.pardot.com go.pardot.com pi.pardot.com tribl.io f.vimeocdn.com player.vimeo.com cdn.cookielaw.org cookies.onetrust.com dyklh89h601oh.cloudfront.net optanon.blob.core.windows.net code.jquery.com d2zi1uus18i57q.cloudfront.net
font-src 'self' dyklh89h601oh.cloudfront.net *.iovation.com data:
script-src 'strict-dynamic' 'nonce-owviywjiyjitzjc3zc00zthklwjjmwytzgu5yzazmznjnzuy' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.googletagmanager.com *.google.com *.google-analytics.com *.akamaihd.net *.pay1.de *.trustedshops.com *.ekomi.de *.facebook.net
img-src 'self' 'unsafe-inline' data: *.google-analytics.com *.doubleclick.net *.idealo.com *.moxiecode.com *.amazonaws.com *.akamaihd.net *.ekomi.de *.facebook.com *.gstatic.com
style-src 'self' 'unsafe-inline' *.fonts.net *.trustedshops.com *.google.com *.googleapis.com
frame-src 'self' *.hotjar.com *.akamaihd.net *.pay1.de *.shopware.de *.trustedshops.com *.ekomi.de *.youtube.com *.youtube-nocookie.com *.google.com *.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com cdnjs.cloudflare.com maps.googleapis.com www.googleadservices.com googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com maxcdn.bootstrapcdn.com npmcdn.com cdnjs.cloudflare.com
img-src 'self' maps.googleapis.com maps.gstatic.com csi.gstatic.com www.google-analytics.com www.google.gr www.google.com data:
"frame-ancestors 'self' https://www.clearslide.com https://www.purdueglobalpresents.com http://upload.clearslide.com"
script-src * data: 'unsafe-inline' 'unsafe-eval' *.platform.twitter.com *.twitter.com *.facebook.com *.gstatic.com *.google-analytics.com *.youtube.com *.googleapis.com *.angelcam.com
frame-src 'self' www.google.com *.youtube.com *.angelcam.com *.twitter.com *.facebook.com
connect-src 'self' http://hn.inspectlet.com wss://ws.inspectlet.com https://spamlogin.com:443 https://sentry.io
"frame-ancestors 'self' https://*.tictochomeloans.com http://*.tictochomeloans.com https://platform.mediamind.com http://platform.mediamind.com
"default-src 'self' 'unsafe-eval' data: bookmate.com *.bookmate.com *.bmstatic.com mc.yandex.ru translate.yandex.net mc.webvisor.org www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net connect.facebook.net api.facebook.com www.facebook.com staticxx.facebook.com urls.api.twitter.com platform.twitter.com vkontakte.ru vk.com www.securitymetrics.com *.amazonaws.com
style-src 'self' 'unsafe-inline' bookmate.com *.bookmate.com *.bmstatic.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com code.jquery.com ajax.aspnetcdn.com www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com www.youtube.com s.ytimg.com maps.googleapis.com s7.addthis.com m.addthisedge.com m.addthis.com
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fast.fonts.net fonts.googleapis.com fonts.gstatic.com
font-src 'self' data: maxcdn.bootstrapcdn.com fast.fonts.net fonts.googleapis.com fonts.gstatic.com
img-src 'self' data: www.gravatar.com dashboard.umbraco.org umbraco.tv csi.gstatic.com maps.gstatic.com maps.googleapis.com mt.google.com www.google-analytics.com
frame-src 'self' www.google.com www.youtube.com s7.addthis.com/"
"script-src 'self' 'unsafe-inline' *.googleanalytics.com *.google-analytics.com ajax.googleapis.com https://www.youtube.com https://s.ytimg.com *.googletagmanager.com apis.google.com storage.googleapis.com 'strict-dynamic' 'sha256-786mzqpkatv3kjd7q8zuwoth4u3/0wnibdyvogzqpv4=' 'sha256-xyk5ei/yh7duzgaxnfbpswkpmmkhk5jy18vkxjfpmj0=' 'sha256-vyh+xisqo4qzosuckjbchdibnnbdxwg2piievxrqeh4=' *.googleapis.com
frame-src 'self' www.google.com *.youtube.com accounts.google.com apis.google.com plus.google.com *.doubleclick.net apis.google.com https://www.youtube.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com storage.googleapis.com
connect-src 'self' plus.google.com www.google-analytics.com apis.google.com
font-src 'self' themes.googleusercontent.com *.gstatic.com https://fonts.gstatic.com storage.googleapis.com fonts.googleapis.com
"default-src * 'unsafe-inline' data: https:"
"frame-ancestors 'self' http://*.sfcs.cc http://*.webvisor.com http://webvisor.com http://dodocontrol.ru http://dodoinvest.com"
"script-src 'self' https://maps.googleapis.com https://rs7yz0gu.jjysjnuego.com https://ajax.googleapis.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://www.googletagmanager.com http://www.googletagmanager.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://stats.g.doubleclick.net https://www.instantor.com https://hosted.paysafe.com https://hosted.test.paysafe.com https://developer.paysafe.com https://cdn.mouseflow.com https://www.afterbanks.com http://www.googleadservices.com http://widget.trustpilot.com http://bat.bing.com/bat.js 'unsafe-inline'
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-nkoresu1zc+b74gy4uqaje9dxz/ptqpfbxkoviuvtrq='
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://browser-update.org https://*.medicosearch.ch https://www.puls-berufe.ch https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://tagboard.com https://*.tagboard.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.twitter.com https://ton.twimg.com https://cdn.syndication.twimg.com https://csi.gstatic.com
frame-src 'self' https://www.google.com https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.ch https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://*.twitter.com https://ton.twimg.com https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://www.facebook.com
"frame-ancestors *.flyscoot.com dev-flyscoot.com uat-flyscoot.com flyscoot-prod.azurewebsites.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api-maps.yandex.ru https://mc.yandex.ru https://www.gosuslugi.ru https://widget.gosuslugi.ru https://enterprise.api-maps.yandex.ru
img-src 'self' https://gu-st.ru https://*.maps.yandex.net https://api-maps.yandex.ru https://lic.rooxcloud.com https://gosuslugi.ru https://*.gosuslugi.ru https://mc.yandex.ru data: blob:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://gosuslugi.ru https://*.gosuslugi.ru
font-src 'self' https://fonts.gstatic.com https://gosuslugi.ru https://*.gosuslugi.ru https://gu-st.ru
connect-src 'self' https://geocode-maps.yandex.ru https://mc.yandex.ru https://www.gosuslugi.ru https://widget.gosuslugi.ru blob:
frame-src 'self' https://widget.gosuslugi.ru  https://api-maps.yandex.ru https://citorus.khv.gov.ru/
"script-src 'self' 'unsafe-inline' https://cdn.ampproject.org https://adservice.google.com https://www.googletagservices.com https://www.google.com https://www.gstatic.com https://verify.authorize.net https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://seal.starfieldtech.com https://secure.quantserve.com https://edge.quantserve.com https://rules.quantcount.com
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdnjs.cloudflare.com https://widgets.kimbia.com https://api.kimbia.com https://krpc.kimbia.com https://www.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://linkhelp.clients.google.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://video.foxnews.com https://d2zah9y47r7bi2.cloudfront.net https://www.googleadservices.com https://www.youtube.com/player_api https://s.ytimg.com https://static.aclj.org https://static.ads-twitter.com https://analytics.twitter.com https://vimeo.com https://www.paypal.com https://chat.aclj.org https://optimize.google.com https://cqrcengage.com https://www.google.com https://www.gstatic.com"
"default-src https://api.sitesearch360.com * http://www.youtube.com https://fast.wistia.net https://m.addthis.com *.siteimprove.com *.siteimproveanalytics.com *.gstatic.com *.doubleclick.net *.adobedtm.com *.google.com *.kchealthcare.com *.youtube.com https://woobox.com *.akamaihd.net 'self' data: blob: *.optimizely.com https://s7.addthis.com *.facebook.com *.wistia.net *.marketo.com *.mktoresp.com https://code.jquery.com https://www.google.com https://3371151137.log.optimizely.com https://798-luk-731.mktoresp.com https://assets.adobedtm.com/  *.g.doubleclick.net *.wistia.com https://api.sitesearch360.com *
script-src https://bat.bing.com https://s3.amazonaws.com https://aframe.io https://fast.wistia.net https://4qinvite.4q.iperceptions.com http://s7.addthis.com *.webtrends.com *.siteimprove.com siteimproveanalytics.com *.gstatic.com *.googleapis.com 'self' https://woobox.com *.litix.io *.litix.io https://fast.wistia.com/assets/external/e-v1.js https://fast.wistia.com/embed/medias/me8proyymp.jsonp *.wistia.com *.addthis.com *.addthisedge.com https://s7.addthis.com 'unsafe-inline' 'unsafe-eval' *.halyardhealth.com  *.marketo.com *.mktoresp.com https://code.jquery.com https://www.google.com https://s.ytimg.com https://fast.wistia.net https://www.youtube.com https://cdn.optimizely.com https://connect.facebook.net *.google-analytics.com https://twitter.com https://www.linkedin.com https://assets.adobedtm.com https://statse.webtrendslive.com https://munchkin.marketo.net https://www.googleadservices.com
img-src https://bat.bing.com *.siteimprove.com *.siteimproveanalytics.com *.googleapis.com *.gstatic.com 'self' https://woobox.com *.litix.io *.wistia.com *.akamaihd.net data: *.marketo.com rum.optimizely.com    *.google-analytics.com https://www.google.com *.webtrendslive.com https://www.facebook.com https://twitter.com https://www.linkedin.com https://stats.g.doubleclick.net
style-src *.myfonts.net *.siteimprove.com *.siteimproveanalytics.com 'self' *.gstatic.com *.googleapis.com https://woobox.com *.litix.io *.marketo.com *.mktoresp.com 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com https://tagmanager.google.com/debug https://tagmanager.google.com/debug/angular-bundle.js https://tagmanager.google.com/debug/debuguiapp.js https://fonts.googleapis.com www.google-analytics.com https://siteimproveanalytics.com https://ssl.google-analytics.com static.hotjar.com script.hotjar.com https://vars.hotjar.com https://ssl.survey.webstatus.v2.userneeds.dk https://code.jquery.com https://f1-eu.readspeaker.com www.riksarkivet.se/administration/css/readspeakerskin https://web103.reachmee.com https://riksarkivet-kundservice.humany.net
style-src 'self' 'unsafe-inline' https://tagmanager.google.com/debug/ https://tagmanager.google.com/debug/css.css https://fonts.googleapis.com https://f1-eu.readspeaker.com www.riksarkivet.se/administration/css/readspeakerskin/readspeaker.styles.css www.riksarkivet.se/administration/css/readspeakerskin/mods/enlargehl/readspeaker.enlargehl.css https://riksarkivet-kundservice.humany.net https://maxcdn.bootstrapcdn.com
img-src 'self' data: https://ssl.gstatic.com/analytics/header/legacy/v1/ic_tag_manager.svg https://www.gstatic.com/images/icons/material/system/1x/keyboard_arrow_up_white_48dp.png www.google-analytics.com https://se1.siteimprove.com https://stats.g.doubleclick.net/r http://xml.ra.se https://f1-eu.readspeaker.com/script/8286/img/rs_button.png https://f1-eu.readspeaker.com/script/8286/img/timeline-anim.gif https://app-eu.readspeaker.com/enterprise/iframeproxy.php https://humany.blob.core.windows.net
child-src 'self' https://vars.hotjar.com https://app-eu.readspeaker.com/enterprise/iframeproxy.php https://rstts-eu.readspeaker.com/cgi-bin/nph-rspeak/ https://web103.reachmee.com
"frame-ancestors https://*.mygreatlakes.org https://*.glhec.org https://*.greatlakeslink.com 'self'"
"default-src     'self'                                      *.mconline.sg *.leadlms.com.sg *.mceapps.com *.mceducation.com
style-src  'self' 'unsafe-inline'                        *.mconline.sg *.google-analytics.com *.google.com *.gstatic.com *.mceapps.com *.mceducation.com
frame-src       'self'                                        *.mconline.sg *.leadlms.com.sg *.google.com *.mceapps.com *.mceducation.com *.googleapis.com *.youtube.com *.vimeo.com *.dailymotion.com *.mindomo.com school.ebonline.com academic.eb.com www.slideshare.net www.authorstream.com *.issuu.com on.aol.com www.howcast.com data.oeconsortium.org
script-src      'self' 'unsafe-inline' 'unsafe-eval'        *.mconline.sg *.google-analytics.com *.google.com *.gstatic.com *.mceapps.com *.mceducation.com apis.google.com *.googleapis.com api.authorstream.com api.5min.com *.youtube.com *.ytimg.com
child-src       'self'                                        *.mconline.sg *.leadlms.com.sg *.google-analytics.com *.google.com *.gstatic.com *.mceapps.com *.mceducation.com
object-src      'self'                                        *.mconline.sg *.leadlms.com.sg *.mceapps.com *.mceducation.com
connect-src  'self'            *.mconline.sg *.leadlms.com.sg *.mceapps.com *.mceducation.com
font-src  'self'            *.mconline.sg *.leadlms.com.sg *.mceapps.com *.mceducation.com
connect-src 'self' ps.bokadoktorn.se sts.bokadoktorn.se wss://bokadoktorn.se wss://ssl.bokadoktorn.se
img-src 'self' blob: data: bdpublicstorage.blob.core.windows.net csi.gstatic.com khms0.googleapis.com khms1.googleapis.com maps.gstatic.com maps.google.com maps.googleapis.com sts.bokadoktorn.se
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com maps.googleapis.com sts.bokadoktorn.se
"default-src https: wss: 'unsafe-eval' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://ajax.googleapis.com http://maxcdn.bootstrapcdn.com https://cdn.userway.org https://code.responsivevoice.org https://cdnjs.cloudflare.com https://cdn.datatables.net http://feather.aviary.com/imaging/v2/editor.js http://feather.aviary.com/csdk/4.2.1.25/js/feathercontrols_en.js mms://streaming.pap.gov.pk
img-src 'self' https://cdn.pullrequest.com https://app.pullrequest.com https://www.facebook.com
script-src 'self' https://js.driftt.com https://hire.withgoogle.com https://cdn.pullrequest.com https://cdn.segment.com https://connect.facebook.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js-agent.newrelic.com https://bam.nr-data.net maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://www.googletagmanager.com https://grmtech.net/ https://cdnjs.cloudflare.com/ https://bat.bing.com https://d22xmn10vbouk4.cloudfront.net https://d3c3cq33003psk.cloudfront.net/ www.gstatic.com
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com
img-src 'self' https://adservice.google.com/ https://www.google.com/ https://www.google.de/ https://ad.doubleclick.net/ https://bat.bing.com/ https://stats.g.doubleclick.net/ maps.gstatic.com www.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com http://via.placeholder.com
connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.froneri-schoeller.de https://opentag-stats.qubit.com/ https://collect.analyze.ly/
child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com qa-shop.froneri-schoeller.de shop.froneri-schoeller.de http://www.froneri-schoeller.de https://opentag-stats.qubit.com/ https://collect.analyze.ly/ https://www.google.com/recaptcha/
script-src 'unsafe-inline' 'unsafe-eval' https://e-services.md https://www.e-services.md
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://indie-authors.com:443 https://*.indie-authors.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' ajax.googleapis.com cdnjs.cloudflare.com oss.maxcdn.com analytics.tideways.io 'unsafe-eval' 'unsafe-inline'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://butikkeier.no:443 https://*.butikkeier.no:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: a.volvelle.tech ajax.googleapis.com *.veinteractive.com *.kpmgcareers.co.uk connect.facebook.net *.cloudfront.net fp.gdmdigital.com go.flx1.com secure.adnxs.com www.facebook.com www.google-analytics.com www.googletagmanager.com x.bidswitch.net ib.adnxs.com *.youtube.com *.doubleclick.net www.pathmotion.com loader.webspellchecker.net"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://c.imedia.cz https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://livehelp.zonercloud.cz https://ssl.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://www.google.com https://assets.zendesk.com https://connect.facebook.net
img-src 'self' data:  https://ssl.gstatic.com  https://www.gstatic.com https://fonts.gstatic.com https://c.imedia.cz https://www.facebook.com  https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.google.cz https://www.google.com/ https://stats.g.doubleclick.net https://livehelp.zonercloud.cz https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.gstatic.com https://fonts.googleapis.com https://assets.zendesk.com
frame-src  https://livehelp.zonercloud.cz https://www.youtube.com https://controlcenter.sslmarket.cz https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.dcom
"default-src 'self' https://*.sbanken.no https://sbanken.no https://*.internbank.no:*
script-src 'self' 'unsafe-eval' https://*.sbanken.no https://www.google-analytics.com https://optimize.google.com https://connect.facebook.net https://js-agent.newrelic.com https://bam.nr-data.net
style-src 'self' 'unsafe-inline' https://*.sbanken.no https://optimize.google.com
img-src 'self' https://*.sbanken.no https://sbanken.no https://*.internbank.no:* https://www.google-analytics.com https://optimize.google.com https://stats.g.doubleclick.net https://finncdn.no https://*.finncdn.no/ https://*.google.com https://*.google.no https://www.facebook.com
font-src 'self' data: https://*.sbanken.no https://optimize.google.com
connect-src 'self' https://*.sbanken.no https://sbanken.no https://*.internbank.no:* https://www.google-analytics.com https://optimize.google.com https://stats.g.doubleclick.net https://online.adservice.com https://js-agent.newrelic.com https://bam.nr-data.net
frame-ancestors 'self' https://*.sbanken.no https://sbanken.no https://*.internbank.no:* https://internbank.no:*
"default-src 'self' 'unsafe-inline' 'unsafe-eval' translate.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com www.gstatic.com translate.google.com translate.googleapis.com 3pea.locatorsearch.com
img-src 'self' www.google-analytics.com www.google.com www.gstatic.com translate.google.com translate.googleapis.com 3pea.locatorsearch.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' translate.google.com translate.googleapis.com"
"script-src 'self' https://csgo500.com/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.onesignal.com/ https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://code.jquery.com https://cdn.onesignal.com https://onesignal.com https://vk.com/js/api/ https://cdn.rawgit.com/yahoo/xss-filters/master/dist/xss-filters.js https://www.youtube.com https://s.ytimg.com 'nonce-ee2daaf4-97df-4c01-ae82-834ba2dec919'
frame-src 'self' oauth.telegram.org www.facebook.com www.google.com connect.trezor.io
"default-src 'self' 'unsafe-inline' chat.uwtservices.com www.uwtservices.com uwtservices.com www.google.com www.gstatic.com yoast.com api.globalcallforwarding.com
\t\tfont-src 'self' 'unsafe-inline' data: use.fontawesome.com maxcdn.bootstrapcdn.com
\t\tscript-src 'unsafe-inline' 'unsafe-eval' chat.uwtservices.com www.unitedworldtelecom.com unitedworldtelecom.com www.uwtcallback.com uwtcallback.com www.uwtservices.com uwtservices.com www.google.com www.google-analytics.com ajax.googleapis.com www.gstatic.com api.globalcallforwarding.comwww.googleadservices.com www.googleadservices.com googleads.g.doubleclick.net
\t\timg-src 'self' 'unsafe-inline' data: chat.uwtservices.com www.uwtservices.com uwtservices.com secure.gravatar.com www.google.com www.google-analytics.com stats.g.doubleclick.net s.w.org
\t\tstyle-src 'self' 'unsafe-inline' www.uwtservices.com uwtservices.com maxcdn.bootstrapcdn.com use.fontawesome.com
"script-src 'unsafe-inline' 'unsafe-eval' * data:"
script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://ad4mat.de https://bid.g.doubleclick.net https://cdn.pboss.de https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://connect.facebook.net https://containertags.belboon.de https://data1.eurosty.com https://data1.mein-bmi.com https://data1.routenplaner-karten.com https://data1.ubersetzung-app.com https://eu5.heatmap.it https://googleads.g.doubleclick.net https://imgsrv.io https://maytrics.marvellousmachine.net https://online.adservicemedia.dk https://optimize.google.com https://orangebuddies.go2cloud.org https://pstatic.davebestdeals.com https://s3.eu-central-1.amazonaws.com https://ssl.google-analytics.com https://static.donation-tools.org https://tagmanager.google.com https://tpc.googlesyndication.com https://translate.googleapis.com https://www.financeads.net https://www.fndsda.net https://www.google-analytics.com https://www.google.com/ads/user-list https://www.googleadservices.com https://www.googletagmanager.com https://www.paypal.com https://www.paypalobjects.com https://www.performancehero.de
style-src 'self' data: 'unsafe-inline' https://cdn.pboss.de https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://fonts.googleapis.com https://optimize.google.com https://translate.googleapis.com https://u.heatmap.it https://www.fndsda.net
style-src 'self' 'unsafe-inline' use.fontawesome.com fonts.googleapis.com maxcdn.bootstrapcdn.com
connect-src 'self' www.googleapis.com www.google-analytics.com adsco.re
script-src 'unsafe-inline' 'unsafe-eval' http: https: data:"
"default-src 'self' *.arnoldbread.com *.brownberry.com *.oroweat.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.econsumeraffairs.com *.consumercare.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com  *.consumercare.net *.econsumeraffairs.com *.google.com cdn.jsdelivr.net *.facebook.net *.likebtn.com *.pinterest.com *.facebook.com *.typekit.com *.trackduck.com *.sharethis.com dnn506yrbagrg.cloudfront.net *.mousestats.com  *.m4dc.com data:
object-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.google.com cdn.jsdelivr.net pages.icpro.co *.trackduck.com *.youtube.com *.facebook.com
style-src 'self' 'unsafe-inline'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.trackduck.com  *.googleapis.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.likebtn.com *.typekit.net *.sharethis.com
img-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.gravatar.com *.google-analytics.com *.trackduck.com *.google.com stats.g.doubleclick.net *.facebook.com  *.googleapis.com cdn.jsdelivr.net *.typekit.net  *.sharethis.com *.blob.core.windows.net *.dev-2.development-preview.com  *.gstatic.com gravatar.com gtrk.s3.amazonaws.com *.google.co.in/ads data:
media-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.google.com cdn.jsdelivr.net pages.icpro.co *.trackduck.com *.youtube.com *.facebook.com
frame-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.google.com cdn.jsdelivr.net pages.icpro.co *.trackduck.com *.youtube.com *.facebook.com *.sharethis.mgr.consensu.org *.sharethis.com *.m4dc.com
font-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com fonts.gstatic.com  maxcdn.bootstrapcdn.com cdn.jsdelivr.net *.typekit.com data: *.typekit.net *.trackduck.com
connect-src 'self'  *.arnoldbread.com *.brownberry.com *.oroweat.com *.facebook.com *.trackduck.com *.sharethis.com wss: data: *.gravatar.com *.g.doubleclick.net
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://mymoneytimes.com http://*.mymoneytimes.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://orders.mccrev.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://ajax.googleapis.com https://ajax.aspnetcdn.com https://www.statcounter.com https://www.google-analytics.com https://player.vimeo.com https://connect.facebook.net https://cdnjs.cloudflare.com https://quick.vidalytics.com https://www.youtube.com https://s.ytimg.com https://trends.revcontent.com https://sdks.shopifycdn.com https://code.jquery.com data: blob:"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://denizirgin.com:443 https://*.denizirgin.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' https: data: blob: https://mastodon.art
media-src 'self' https: data: https://mastodon.art
connect-src 'self' blob: https://mastodon.art wss://mastodon.art
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/
img-src 'self' data: 'unsafe-inline' https://secure.gravatar.com/ https://s.w.org/ https://www.google.com/ http://cdn.publish.macrobond.net/ https://cdn.publish.macrobond.net/ https://stats.g.doubleclick.net/  https://www.google-analytics.com/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' static.addtoany.com s7.addthis.com m.addthis.com m.addthisedge.com
style-src 'unsafe-inline'        https://personalexcellence.co        https://*.googleapis.com        https://*.cloudflare.com        https://*.fontawesome.com        https://*.convertbox.com        http://*.convertbar.com        https://*.disquscdn.com
font-src        data:        https://personalexcellence.co        https://*.fontawesome.com        https://*.convertbox.com        https://app.convertbar.com        https://fonts.gstatic.com
connect-src        https://personalexcellence.co        https://*.convertbox.com        https://app.convertbar.com        https://*.convertkit.com        https://*.fomo.com        http://*.google-analytics.com
frame-src        https://personalexcellence.co        https://*.google.com        https://*.doubleclick.net        https://*.youtube.com        https://*.convertbox.com        https://disqus.com        https://www.speakpipe.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.silnet.pl www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.google.com *.gstatic.com *.facebook.com *.facebook.net *.onesignal.com onesignal.com *.googleapis.com cdnjs.cloudflare.com cdn.ampproject.org
style-src 'self' 'unsafe-inline' fonts.googleapis.com ssl.silnet.pl onesignal.com cdnjs.cloudflare.com
img-src 'self' data: *.profiauto.pl silnet.pl ssl.silnet.pl *.doubleclick.net www.google-analytics.com *.google.com *.google.pl *.facebook.com *.gstatic.com *.googleapis.com cdnjs.cloudflare.com *.openstreetmap.org *.gravatar.com
frame-src 'self' *.google.com google.com *.facebook.com onesignal.com *.youtube.com
connect-src 'self' onesignal.com *.google-analytics.com *.doubleclick.net *.google.com"
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://adservice.google.com https://adservice.google.ru https://www.googletagservices.com https://pagead2.googlesyndication.com https://mixfacts.ru cdn.mixfacts.ru cdn.jsdelivr.net https://cdn.sendpulse.com https://trustedads.adtrustmedia.com http://trustedads.adtrustmedia.com http://vk.com https://vk.com platform.twitter.com *.pinterest.com yastatic.net *.yandex.ru *.yandex.net https://an.yandex.ru https://yastatic.net https://mc.yandex.ru https://pagead2.googlesyndication.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.googleapis.com  *.gstatic.com counter.rambler.ru https://relap.io
script-src 'self' indreams.me *.indreams.me www.youtube.com s.ytimg.com d2wy8f7a9ursnm.cloudfront.net www.google-analytics.com 'nonce-zo0wbwnq3fk' 'nonce-g4aikcnv518'
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://v3toys.ru http://mc.yandex.ru https://mc.yandex.ru http://clck.yandex.ru https://clck.yandex.ru http://yastatic.net https://yastatic.net http://api-maps.yandex.ru https://api-maps.yandex.ru http://pass.yandex.ru https://pass.yandex.ru https://www.googletagmanager.com https://*.google.com https://*.google.ru https://*.gstatic.com https://*.google-analytics.com https://*.doubleclick.net https://connect.facebook.net https://vk.com https://loginza.ru https://livechat.chat2desk.com https://*.jivosite.com
style-src 'unsafe-inline' 'self' https://v3toys.ru http://mc.yandex.ru https://mc.yandex.ru https://fonts.googleapis.com https://livechat.chat2desk.com
img-src data: 'self' https://v3toys.ru http://mc.yandex.ru https://mc.yandex.ru http://yastatic.net https://yastatic.net https://yandex.st https://yandex.ru https://www.yandex.ru https://mdata.yandex.ru https://grade.market.yandex.ru https://clck.yandex.ru https://api-maps.yandex.ru https://static-maps.yandex.ru https://*.maps.yandex.ru https://*.maps.yandex.net https://*.google.com https://*.google.ru https://*.gstatic.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com https://*.doubleclick.net https://www.facebook.com http://vk.com https://vk.com http://www.im-logistics.ru https://www.im-logistics.ru http://counter.yadro.ru https://counter.yadro.ru https://livechat.chat2desk.com
connect-src 'self' https://v3toys.ru http://yandex.ru https://yandex.ru http://mc.yandex.ru https://mc.yandex.ru https://*.google.com https://*.google.ru https://*.google-analytics.com https://ajax.googleapis.com https://youtube.com https://*.youtube.com http://suggestions.dadata.ru https://suggestions.dadata.ru https://livechat.chat2desk.com http://*.jivosite.com https://*.jivosite.com wss://*.jivosite.com
font-src 'self' https://v3toys.ru https://fonts.gstatic.com https://livechat.chat2desk.com
media-src 'self' https://v3toys.ru http://*.jivosite.com https://*.jivosite.com
object-src 'self' https://v3toys.ru https://youtube.com https://*.youtube.com
child-src blob: 'self' https://v3toys.ru https://mc.yandex.ru https://api-maps.yandex.ru https://*.google.com https://*.google.ru https://youtube.com https://*.youtube.com http://vk.com https://vk.com http://login.vk.com https://login.vk.com http://open.ivideon.com https://open.ivideon.com http://loginza.ru https://loginza.ru
frame-src blob: 'self' https://v3toys.ru https://mc.yandex.ru https://api-maps.yandex.ru http://*.google.com https://*.google.com http://*.google.ru https://*.google.ru http://youtube.com https://youtube.com http://*.youtube.com https://*.youtube.com https://www.facebook.com https://www.facebook.net http://vk.com https://vk.com http://login.vk.com https://login.vk.com http://open.ivideon.com https://open.ivideon.com http://loginza.ru https://loginza.ru
img-src 'self' https: data: 'unsafe-inline'"
script-src 'self' 'unsafe-inline' https://use.typekit.net https://cdn.mathkax.org https://connect.facebook.net https://*.twitter.com https://cdn.syndication.twimg.com https://gist.github.com
img-src 'self' https: data: platform.twitter.com
font-src 'self' data: https://use.typekit.net https://cdn.mathjax.org https://fonts.typekit.net
style-src 'self' 'unsafe-inline' https://use.typekit.net platform.twitter.com https://assets-cdn.github.com
frame-src https://www.youtube.com https://www.slideshare.net staticxx.facebook.com www.facebook.com"
script-src 'self' 'unsafe-inline' https: 'nonce-/vquicsdrsbryjbfsi2578kzf3c=' 'strict-dynamic' https://www.google-analytics.com https://app.trustev.com https://www.googletagmanager.com https://connect.facebook.net https://use.typekit.net
connect-src 'self' 'unsafe-inline' https://5carti.ro/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://5carti.ro/ https://www.google-analytics.com
"script-src 'unsafe-inline' 'unsafe-eval' 'self' http://www.google-analytics.com https://www.googletagmanager.com https://jira.flipboard.com https://cdn.flipboard.com https://apis.google.com https://cdn.ampproject.org https://connect.facebook.net https://flapi.flipboard.com https://s.flipboard.com http://ue.flipboard.com https://ue.flipboard.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' static-accept.customersaas.com *.optimizely.com cdn.blueconic.net kpn.blueconic.net assets.adobedtm.com *.kpn.com *.salesforceliveagent.com www.googletagmanager.com tagmanager.google.com invitation.opinionbar.com www.googleadservices.com connect.facebook.net *.doubleclick.net *.mouseflow.com kpn-compleet-fpi-info.fourstack.nl www.pingvp.com kpn.pingvp.com static.customersaas.com www.google-analytics.com maps.googleapis.com kpnarmor.nl w.usabilla.com api.usabilla.com deploy.mopinion.com collect.mopinion.com kpn.mopinion.com kpn-reload.liquix.eu dwin1.com
style-src 'self' 'unsafe-inline' data: *.kpn.com www.pingvp.com kpn.pingvp.com d1r5etm691cejh.cloudfront.net static.customersaas.com d6tizftlrpuof.cloudfront.net kpn.mopinion.com tagmanager.google.com
img-src 'self' data: is-accept.customersaas.com *.kpn.com www.google.nl www.google.com www.facebook.com *.doubleclick.net adservice.google.com invitation.opinionbar.com *.optimizely.com www.pingvp.com kpn.pingvp.com d35v9wsdymy32b.cloudfront.net csi.gstatic.com maps.gstatic.com maps.googleapis.com kpn.com fonts.googleapis.com www.google-analytics.com api.customersaas.com static.customersaas.com d3mwk3f7r8fv9u.cloudfront.net d6tizftlrpuof.cloudfront.net cms-images.s3.amazonaws.com kpncomvod.download.kpnstreaming.nl w.usabilla.com www.telfort.nl
media-src 'self' kpncomvod.download.kpnstreaming.nl *.kpn.com pingmediavod.download.kpnstreaming.nl kpn.pingvp.com
frame-src *.optimizely.com *.doubleclick.net ezpay.liquix.eu callmenow.vanadwfh.nl rpv.reviva.nl *.kpn.com portal.bp.nu www.youtube.com kpngroup.emsecure.net kpn.mopinion.com kpn-mini.speedtestcustom.com www.pingvp.com kpn.pingvp.com
font-src 'self' data: *.kpn.com www.pingvp.com kpn.pingvp.com fonts.gstatic.com static.customersaas.com
connect-src 'self' api-accept.customersaas.com *.optimizely.com kpn.blueconic.net *.kpn.com *.mouseflow.com api.api.ai tracker.customersaas.com kpn.api.ruwido.com api-agendaplanner.kpnretail.nl api.customersaas.com scripts.kpn.nl pastease.mopinion.com kpn.mopinion.com kpn-compleet-fpi-info.fourstack.nl ezpay.liquix.eu wss://*.twilio.com https://*.twilio.com
script-src 'strict-dynamic' 'nonce-nwezzgm3zdutm2i5os00odk1ltlmy2etyti4ztczmmq5n2jj' 'unsafe-inline' https: http:
connect-src 'self' mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org
img-src yastatic.net www.tns-counter.ru data: 'self' *.captcha.yandex.net mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org
script-src yastatic.net 'nonce-z/tmimtrd6zivqaiq+ryfg==' mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org
"default-src 'self' https://widgets.wp.com https://cdn.wpdownloadmanager.com https://akismet.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s0.wp.com https://s1.wp.com https://s2.wp.com https://stats.wp.com https://s0.wp.com https://secure.gravatar.com https://www.google-analytics.com https://widgets.wp.com https://public-api.wordpress.com https://apis.google.com https://cdn.ampproject.org
style-src 'self' 'unsafe-inline' https://s0.wp.com/ https://fonts.googleapis.com https://secure.gravatar.com https://s2.wp.com
font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://wordpress.com https://s0.wp.com
img-src 'self' https://secure.gravatar.com https://pixel.wp.com https://s-ssl.wordpress.com https://s2.wp.com https://s0.wp.com https://s1.wp.com https://s.w.org https://s0.wordpress.com https://www.wpdownloadmanager.com
"default-src 'self' https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.licdn.com https://*.marketo.net https://*.marketo.com https://*.aws.ean http://*.aws.ean https://*.amazonaws.ean http://*.amazonaws.com https://*.amazonaws.com https://d2yeu2mwujl2s5.cloudfront.net https://931-quh-525.mktoresp.com https://*.doubleclick.net https://js-agent.newrelic.com https://*.linkedin.com https://*.nr-data.net https://*.addthis.com https://*.addthisedge.com https://*.issuu.com https://*.google.co.uk https://*.vimeo.com https://*.cloudflare.com https://*.reachforce.com https://*.googleapis.com data: 'unsafe-eval' 'unsafe-inline'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.optimizely.com *.google.com *.gstatic.com www.googletagmanager.com *.google-analytics.com platform.twitter.com *.googleadservices.com bid.g.doubleclick.net googleads.g.doubleclick.net analytics.twitter.com static.ads-twitter.com/ www.fullstory.com d6tizftlrpuof.cloudfront.net js-agent.newrelic.com bam.nr-data.net cdn.wootric.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.gstatic.com
img-src 'self' data: images.thevan.us *.twimg.com www.google-analytics.com stats.g.doubleclick.net t.co www.google.com www.gstatic.com www.googletagmanager.com usabilla-themes.s3-eu-west-1.amazonaws.com ssl.gstatic.com w.usabilla.com d6tizftlrpuof.cloudfront.net
connect-src 'self' accounts.ngpvan.com www.google-analytics.com *.google.com stats.g.doubleclick.net rum.optimizely.com rs.fullstory.com wootric-eligibility.herokuapp.com d8myem934l1zi.cloudfront.net production.wootric.com wss://securevan.com
frame-src 'self' *.securevan.com accounts.ngpvan.com bid.g.doubleclick.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://growthbug.com:443 https://*.growthbug.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://socialrank.blog:443 https://*.socialrank.blog:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' *.antarktis.net antarktis.net *.antarctic.eu *.ithemes.com *.sucuri.net
img-src 'self' *.antarktis.net *.antarctic.eu *.tile.openstreetmap.org ps.w.org s.w.org https://pw.rolf-stange.de *.spitzbergen.de *.spitsbergen-svalbard.com data:
font-src 'self' 'unsafe-inline' *.antarktis.net *.antarctic.eu *.openstreetmap.org *.rolf-stange.de data:
style-src 'self' 'unsafe-inline' *.antarktis.net *.antarctic.eu a.tile.openstreetmap.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.antarktis.net *.antarctic.eu www.openstreetmap.org *.ithemes.com *.sucuri.net s.w.org https://pw.rolf-stange.de
frame-src 'self' *.antarktis.net *.antarctic.eu https://www.youtube-nocookie.com *.rolf-stange.de s.w.org
connect-src *.sucuri.net *.ithemes.com *.antarktis.net *.antarctic.eu *.wpml.org"
"script-src 'self' 'unsafe-eval' app.overdrive.io cdn.overdrive.io cdn-use.overdrive.io cdn-euw.overdrive.io cdn.polyfill.io *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.google-analytics.com query.yahooapis.com *.youtube-nocookie.com *.youtube.com platform.twitter.com cdn.syndication.twimg.com cdn.ravenjs.com js.live.net *.zopim.com  'nonce-683f6a1a878c94452f875f6413182730'
script-src *.livechatinc.com  'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.facebook.net *.yandex.ru googleads.g.doubleclick.net 'self'
img-src 'self' *.livechatinc.com *.google.com *.google.kz *.google-analytics.com *.facebook.com stats.g.doubleclick.net *.yandex.ru
frame-src *.livechatinc.com *.youtube.com bid.g.doubleclick.net *.yandex.ru
"default-src 'self' *.verter.org data: 'unsafe-inline' https://www.youtube.com https://yandex.ru https://market.yandex.ru https://mc.yandex.ru https://yastatic.net https://vk.com https://c.hit.ua https://clck.yandex.ru https://grade.market.yandex.ru *.siteheart.com 'unsafe-eval'"
"script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://www.gstatic.com/ http://www.google-analytics.com https://npmcdn.com https://cdnjs.cloudflare.com/ http://maps.google.com/ https://maps.google.com/ http://maps.googleapis.com/ https://maps.googleapis.com/ https://maxcdn.bootstrapcdn.com https://ssl.google-analytics.com/"
img-src 'self' data: *.egrinf.com:443 egrinf.com:443 *.2mdn.net *.google-analytics.com *.yadro.ru *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googleadservices.com *.gstatic.com *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net www.tns-counter.ru https://*.2mdn.net https://*.google-analytics.com https://*.yadro.ru https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net https://www.tns-counter.ru
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.egrinf.com:443 egrinf.com:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com adservice.google.ru *.google-analytics.com *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://adservice.google.ru https://*.google-analytics.com https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net
frame-src 'self' *.egrinf.com:443 egrinf.com:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net
object-src 'self' *.egrinf.com:443 egrinf.com:443 *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com an.yandex.ru *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://an.yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net
connect-src 'self' *.egrinf.com:443 egrinf.com:443 *.google-analytics.com an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net https://*.google-analytics.com https://an.yandex.ru https://strm.yandex.ru https://mc.yandex.ru https://yandex.st https://yastatic.net
style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.egrinf.com:443 egrinf.com:443 *.googleapis.com *.gstatic.com *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net
font-src 'self' data: *.egrinf.com:443 egrinf.com:443 *.googleapis.com *.gstatic.com *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net
form-action 'self' *.egrinf.com:443 egrinf.com:443 *.yandex.ru https://*.yandex.ru
media-src *.egrinf.com:443 egrinf.com:443 *.yandex.net yandex.st yastatic.net https://*.yandex.net https://yandex.st https://yastatic.net
"script-src 'self' https://*.googleanalytics.com https://*.google-analytics.com https://ajax.googleapis.com https://*.googletagmanager.com
style-src 'self' https://fonts.googleapis.com https://*.gstatic.com https://ajax.googleapis.com 'unsafe-inline'
default-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.googleusercontent.com https://*.google-analytics.com
img-src 'self' data: https://*.googleapis.com  https://www.google.com https://*.googleusercontent.com https://www.google-analytics.com"
"default-src 'self' *.youtube.com *.vimeo.com blob: data: aframe.io 'unsafe-inline'"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://papelenblanco.com:443 https://*.papelenblanco.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.threatpost.ru https://*.youtube.com https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://threatpost.ru
default-src 'self' https://*.threatpost.ru https://4b5cdn3ehl27vid713r9dl9eso-wpengine.netdna-ssl.com https://kasperskycontenthub.com https://threatpost.ru https://www.reddit.com
font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.threatpost.ru https://*.wp.com https://4b5cdn3ehl27vid713r9dl9eso-wpengine.netdna-ssl.com https://assets.kasperskycontenthub.com https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://s0.wp.com https://threatpost.ru
frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.sharethis.com https://*.slideshare.net https://*.threatpost.ru https://*.twitter.com https://*.wp.com https://*.youtube.com https://kasperskycontenthub.com https://platform.twitter.com https://player.vimeo.com https://s-static.ak.facebook.com https://syndication.twitter.com https://threatpost.ru https://tpc.googlesyndication.com https://widgets.wp.com https://www.brighttalk.com https://www.google.com https://www.youtube.com
img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.sharethis.com https://*.staticflickr.com https://*.threatpost.ru https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://4b5cdn3ehl27vid713r9dl9eso-wpengine.netdna-ssl.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://blog.kaspersky.com https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://pixel.wp.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://stats.g.doubleclick.net https://syndication.twitter.com https://t.co https://threatpost.ru https://track.addevent.com https://www.google-analytics.com
object-src 'self' https://*.threatpost.ru https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://threatpost.ru
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.sharethis.com https://*.threatpost.ru https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://4b5cdn3ehl27vid713r9dl9eso-wpengine.netdna-ssl.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://apis.google.com https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://cdn.api.twitter.com https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://graph.facebook.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://platform.twitter.com https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://secure.gravatar.com https://share.yandex.ru/ https://static.ads-twitter.com https://syndication.twitter.com https://threatpost.ru https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://www.linkedin.com
style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.sharethis.com https://*.threatpost.ru https://*.twimg.com https://*.twitter.com https://*.wp.com https://4b5cdn3ehl27vid713r9dl9eso-wpengine.netdna-ssl.com https://assets.kasperskycontenthub.com https://fonts.googleapis.com https://kasperskycontenthub.com https://platform.twitter.com https://secure.gravatar.com https://threatpost.ru"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://cryptocurrencyhub.io:443 https://*.cryptocurrencyhub.io:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src wss://n.block.io/ block.io *.block.io chain.so *.chain.so *.stripe.com *.google-analytics.com
font-src 'self' fonts.gstatic.com *.google.com *.stripe.com
img-src 'self' *.google.com *.gstatic.com *.google-analytics.com *.stripe.com chain.so *.chain.so live-sochain-blockioinc.netdna-ssl.com data: alive-blockioinc.netdna-ssl.com
script-src 'self' *.google.com *.gstatic.com live-sochain-blockioinc.netdna-ssl.com www.google-analytics.com *.stripe.com chain.so *.chain.so ajax.googleapis.com 'unsafe-eval' alive-blockioinc.netdna-ssl.com 'sha256-ludqpdruy5nbjrimeuklvmerdrdxdgwwmrzto68wgzu=' 'sha256-n19flslyhklldgjwhs8wnqialuwbapm+0ycwbkq0v5y=' 'sha256-gfwxv6dhhg/s2lqrlrlutos14wytmsmls86mszcvoya=' 'sha256-bac0r9rszjyw8pvv7ha0dzxdv3pfmj1eosynzylf72o=' 'sha256-eayoivu1esomdszrudelg6r/pbijp3emalqclpfhozy=' 'sha256-ndoqtzunilzyrjvbqkhpjyluo1x6oc6rueslibk69tu=' 'sha256-b5uaww1hqblrpwockac0mgllr6o9tzn8m0x4iuy4/au='
style-src 'self' chain.so *.chain.so live-sochain-blockioinc.netdna-ssl.com fonts.googleapis.com *.stripe.com translate.googleapis.com 'unsafe-inline' alive-blockioinc.netdna-ssl.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.datatables.net cdn.socket.io *.gstatic.com *.google.com *.google-analytics.com connect.facebook.net
img-src 'self' data: *.gstatic.com *.google-analytics.com *.facebook.com cdn.datatables.net twemoji.maxcdn.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.datatables.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://savik.as:443 https://*.savik.as:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://webplus.info https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net
style-src 'self' 'unsafe-inline' https://webplus.info https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net
img-src 'self' https://webplus.info https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net
object-src  'self' https://webplus.info https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net"
connect-src 'self' 'unsafe-inline' https://testing.goinflow.com/geo https://*.affirm.com https://www.google-analytics.com wss://*.hotjar.com https://widget.us.criteo.com https://www.google.com https://ssl.google-analytics.com https://www.google.com https://*.facebook.net https://*.doubleclick.net https://*.typekit.net https://bam.nr-data.net https://*.hotjar.com https://*.pinterest.com
script-src 'self' 'unsafe-inline' https://ttrra1-a.akamaihd.net http://ads-server.adx.tappki.com https://www.google-analytics.com https://mc.yandex.ru
child-src http://www.youtube.com https://www.youtube.com http://awaps.yandex.ru https://everinform.com http://ads-server.adx.tappki.com
connect-src 'self' https://www.google-analytics.com https://mc.yandex.ru https://trk.smi-sl.ru https://sub.smi-sl.ru https://ttrra1-a.akamaihd.net http://ads-server.adx.tappki.com
"default-src 'self' https://www.google.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com https://static.ondmarc.com https://static-preview.ondmarc.com https://js.intercomcdn.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://app.responseiq.com https://wstatic.responseiq.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://app.responseiq.com https://bat.bing.com https://sjs.bizographics.com https://www.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com https://ct.capterra.com https://secure.oita4bali.com https://form.ondmarc.com https://pi.pardot.com http://cdn.pardot.com https://browser.sentry-cdn.com https://www.google.com https://www.google.co.nz https://www.google.co.uk https://www.google.ca https://www.google.de https://www.google.jp https://www.google.fr https://www.google.au https://www.google.ru https://www.google.ch https://www.google.it https://www.google.nl https://www.google.se https://www.google.no https://www.google.es https://www.google.at https://www.google.is https://googleads.g.doubleclick.net https://www.googleadservices.com http://js-agent.newrelic.com https://maps.googleapis.com https://*.google-analytics.com http://bam.nr-data.net https://connect.facebook.net https://static.hotjar.com http://static.hotjar.com https://script.hotjar.com https://js.intercomcdn.com https://widget.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io https://static.ondmarc.com https://static-preview.ondmarc.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://wstatic.responseiq.com
connect-src * 'self' https://www.google.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com https://static.ondmarc.com https://static-preview.ondmarc.com https://js.intercomcdn.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://app.responseiq.com https://wstatic.responseiq.com
style-src 'self' 'unsafe-inline' https://www.google.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com https://static.ondmarc.com https://static-preview.ondmarc.com https://js.intercomcdn.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://app.responseiq.com https://wstatic.responseiq.com
font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com https://www.google.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://static.ondmarc.com https://static-preview.ondmarc.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://app.responseiq.com https://wstatic.responseiq.com
frame-src 'self' https://form.ondmarc.com https://www.youtube.com https://bid.g.doubleclick.net https://www.google.com https://fonts.googleapis.com http://www.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com https://static.ondmarc.com https://static-preview.ondmarc.com https://js.intercomcdn.com http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://app.responseiq.com https://wstatic.responseiq.com
script-src 'self' https://www.google-analytics.com/analytics.js https://www.gstatic.com/external_hosted/gsap/v1_16_1/tweenlite.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.5.9/
frame-src 'self' http://rutube.ru http://*.twitter.com http://twitter.com https://*.twitter.com https://twitter.com  https://*.facebook.net http://*.facebook.net https://*.facebook.com http://*.facebook.com https://*.ok.ru http://*.ok.ru http://*.mail.ru https://*.mail.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru http://vk.com https://vk.com https://*.vk.com http://*.vk.com https://tag.digitaltarget.ru/adcm.js http://youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.googlevideo.com http://*.googlevideo.com https://googlevideo.com http://googlevideo.com http://*.yandex.ru https://*.yandex.ru https://yastatic.net http://yastatic.net http://*.yandex.net https://*.yandex.net http://yandex.st https://yandex.st http://yandexadexchange.net https://yandexadexchange.net http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://*.google-analytics.com  https://*.google-analytics.com
"script-src 'self' *.jwplatform.com *.jwpcdn.com *.jwpsrv.com *.google.com *.gstatic.com
style-src *.google.com *.gstatic.com 'self' cloud.typography.com 'unsafe-inline'
"script-src 'self' *.sdicamps.com  *.heartlandportico.com *.google.com *.googleapis.com *.google-analytics.com *.newrelic.com *.nr-data.net 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.cloudfront.net *.cloudflare.com *.doubleclick.net *.facebook.net *.googletagmanager.com *.google-analytics.com *.googleapis.com *.licdn.com *.intercom.io *.linkedin.com *.loggly.com *.optmstr.com *.optmnstr.com *.intercomcdn.com *.twimg.com *.twitter.com *.typekit.net *.stripe.com *.pardot.com *.visualwebsiteoptimizer.com *.vwo.com *.x.ai
style-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.optmstr.com *.twitter.com *.typekit.net *.vwo.com
connect-src 'self' *.doubleclick.net *.google-analytics.com *.intercomcdn.com *.intercom.io *.loggly.com *.optmnstr.com *.referralsaasquatch.com *.visualwebsiteoptimizer.com wss://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io *.x.ai
font-src 'self' *.typekit.net *.gstatic.com *.ads-twitter.com *.intercomcdn.com data:
script-src 'self' 'unsafe-eval' www.google.com www.googletagservices.com www.google-analytics.com www.gstatic.com maps.googleapis.com securepubads.g.doubleclick.net
"default-src 'self' rufilm.tv rufilmtv.org 6xuar.gdn
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.rufilmtv.club *.gnezdo.ru news.gnezdo.ru news.2xclick.ru smartpush1.info smartpush11.info smartpush10.info smartpush0.info *.q-sht-zidjk.co q-sht-zidjk.co adbetnet.advertserve.com json.bannersvideo.com fcrgzqkbtgu.co octomarket.com adtrak.org adfill.me advmaker.su yt.advmaker.su json.bannersvideo.com bannersvideo.com 1plus1.video *.adbetclickin.pink http://serving.bepolitee.eu adlmerge.com gynax.com bgrndi.com https://fqtag.com osnn.work hydr.work luxup2.ru http://marvin.pw/ https://c.fqtag.com/ rufilm.tv brokeloy.com widefox.ru slowpoker.ru hgbn.network cdn7.network www.resttort.ru resttort.ru deenomo.com lolaken.com lopireto.com roklerok.com am15.net kadanoda.ru vakadiki.ru tozipoto.com zirifaha.ru kibitaqa.ru kiviraha.ru kilisaqa.ru retaraka.ru tisatama.ru tisataga.ru tozimoto.com tozikoto.com toziroto.com tozitoto.com tozipoto.com vogorana.ru vogozaw.ru vogozae.ru uuidksinc.net imdj.3793369.pix-cdn.org rtb.kadam.ru vogozae.ru aurumforyou.com yandex.ru yandex.st mc.yandex.ru www.google-analytics.com vk.com ulogin.ru luxup.ru *.luxup.ru *.am15.net *.thor-media.ru qepath.info zakoofoo.info zoobynu.info hbkii.xyz nucegu.info duxyve.info qezuqa.info cyjycu.info accommon.info samnioc.info dialected.info *.supuv2.com alphamrkt.com 6xuar.gdn mylma.gdn xml.adbetnet.com *.adbetnet.com m-shes.ru adbetnet.com etcxx.com mxccs.com mdapi.ru mdsrc.ru *.rtbsystem.com *.marketgid.com *.adlabs.ru dodrek.com psma01.com psma02.com psma03.com adservone.com *.onedmp.com *.videoviewer.ru bequri.com gotriki.com cdn.hgdat.com hghit.com
frame-src 'self' data: *.videomore.ru videomore.ru samnioc.info https://ad.anistar.me ad.anistar.me *.adbetnet.com t.co ad.anistar.me stream.reyden-x.com tvzvezda.ru 1plus1.video out.pladform.ru https://fqtag.com allmovie.pro http://allmovie.tv http://player.ictv.ua https://kaztube.kz ren.tv m-shes.ru tvc.ru www.tvc.ru rufilm.tv rufilmtv.org am15.net advmaker.su yt.advmaker.su my.mail.ru uuidksinc.net *.amazonaws.com ok.ru *.ok.ru vk.com veterok.tv www.youtube.com *.ivi.ru *.vgtrk.com *.1ru.tv *.1tv.ru *.ntv.ru *.gnezdo.ru *.am15.net rutube.ru *.videomore.ru *.my.mail.ru ictv.ua rmbn.net psma01.com psma02.com psma03.com *.onedmp.com ovva.tv cdn7.network www.videokub.net *.adbetclickin.pink
"script-src 'self' 'unsafe-inline' 'nonce-ndrlmtu2zdnlmme3ztqyyzrhndnknwu2ogzkzwy0nji=' 'strict-dynamic'
"default-src 'self' badoo.com eu1.badoo.com us1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com badoocdn.com *.badoocdn.com   *.api.here.com *.paypal.com pagead2.googlesyndication.com api.giphy.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:*
script-src 'self' https://cdn.polyfill.io https://js.stripe.com https://storage.googleapis.com https://pay.google.com https://www.gstatic.com https://www.google-analytics.com 'nonce-e0dmoar+4ubsw5sndxdbw8ddqe19nkrcjyzar0ty' 'unsafe-inline'
style-src 'self' https://cdnjs.cloudflare.com 'sha256-k4v9dzltf6e0ixp3xosec0riv7u+wgjrjvjwts/dmsw=' 'sha256-c1fu6tgmjwkntgbw8iqz4obbm+hv3zpaley6dkxwxy0=' 'nonce-e0dmoar+4ubsw5sndxdbw8ddqe19nkrcjyzar0ty' 'unsafe-inline'
"default-src 'self' www.google-analytics.com recognia.test.bnc.ca recognia.bnc.ca 'unsafe-inline' 'unsafe-eval'
"script-src 'self' https://www.redditstatic.com/ads/pixel.js 'sha256-ubtu/cursanwdhgj2to8yz0cqiew6ev/jeessptc2h8=' https://cdn.dwolla.com/1/dwolla.min.js 'sha256-9d1bt6fn1dwjvlka2ndhyt23fvtvq+ctg7imtimzymu=' https://connect.facebook.net 'sha256-my3ta+hkyxipujsxmzqufjbpnekkm81minxbmjt6jwe=' https://amplify.outbrain.com/cp/obtp.js 'sha256-2pbl7a1hk2kdwj3zqf4tiqn9sduomtweeu4/gkwqnbi=' https://cdn.taboola.com/libtrc/unip/1163850/tfa.js 'sha256-zchqvgt67fs2mewohh0ghjwewmurrioslzinskof/g4=' https://static.ads-twitter.com/uwt.js https://*.twitter.com 'sha256-eimlpch/mwj7nqp/77n4l6kvqw4d25a8kw3+g0nnnb0=' https://cdn.plaid.com/link/v2/stable/link-initialize.js https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.3/jquery.min.js https://www.google.com https://www.gstatic.com https://cdn.mxpnl.com 'sha256-bbl8mpjsk83gmw+z4rktxgdijggh7gdjbdnguoqxxda='
script-src 'unsafe-eval' 'self' *.eastdevon.gov.uk *.google-analytics.com  *.google.com *.gstatic.com *.siteimprove.com *.mxpnl.com https://content.govdelivery.com
img-src 'self' data: *.eastdevon.gov.uk  *.google-analytics.com *.siteimprove.com https://content.govdelivery.com/
child-src 'self' https://new.devon.gov.uk/ https://www.youtube.com/ https://www.google.com/
connect-src  *.eastdevon.gov.uk 'self' *.google-analytics.com *.siteimprove.com http://api.mixpanel.com
"default-src 'self' blob: engasjert.sbm.no dev.sbm.no dev.sbm.no/* old.sbm.no old.sbm.no/* www.sbm.no localhost:* web103.reachmee.com sbm.asp.manamind.com www.youtube.com sbm-demo.manamind.com nettbank-pilot.edb.com nettbank.edb.com nettbedriften-pilot.evry.com nettbedriften.evry.com ebankdemo.evry.com ssl.google-analytics.com competella.sbm.no https://www.google-analytics.com https://stats.g.doubleclick.net gstatic.com www.gstatic.com https://www.google.com/recaptcha/ https://search.atom.no
img-src * data: https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net
frame-ancestors 'self' www.sbm.no dev.sbm.no forvaltning.sbm.no facebook.com web103.reachmee.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* dev.sbm.no/* old.sbm.no old.sbm.no/* https://www.google-analytics.com maps.googleapis.com csi.gstatic.com edialog24.edb.com browser-update.org web103.reachmee.com ssl.google-analytics.com script.crazyegg.com competella.sbm.no www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/api2/r20171212152908/recaptcha__no.js https://www.gstatic.com gstatic.com www.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net
style-src 'self' 'unsafe-inline' https://www.gstatic.com fonts.googleapis.com
connect-src 'self' https://zonky.cz https://googleads.g.doubleclick.net https://*.trackjs.com https://*.facebook.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://*.hotjar.com wss://*.hotjar.com
font-src 'self' https://zonky.cz https://fonts.gstatic.com https://js.intercomcdn.com https://www.planetazonky.cz https://static.hotjar.com https://optimize.google.com
frame-src 'self' https://stags.bluekai.com https://staticxx.facebook.com https://*.doubleclick.net https://vars.hotjar.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://c.imedia.cz https://www.facebook.com https://connect.facebook.net https://c1613.affilbox.cz https://*.hit.gemius.pl https://optimize.google.com https://datastudio.google.com https://player.vimeo.com
script-src 'self' https://www.google-analytics.com https://secure.adnxs.com https://*.ads.linkedin.com https://snap.licdn.com https://sjs.bizographics.com https://*.trackjs.com https://c1613.affilbox.cz https://*.nr-data.net https://*.newrelic.com https://tags.bkrtx.com https://*.bluekai.com https://bluekai.com https://eu.prgmt.com https://spir.hit.gemius.pl https://platform.twitter.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/ https://*.google-analytics.com https://*.gstatic.com https://*.googlesyndication.com https://track.adform.net https://connect.facebook.net https://*.youtube.com https://*.ytimg.com https://www.googleadservices.com https://adservice.google.com https://adservice.google.cz https://googleads.g.doubleclick.net https://c.imedia.cz https://c1819.affilbox.cz https://ajax.googleapis.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.getsmartlook.com ws://*.getsmartlook.com https://static.hotjar.com https://script.hotjar.com https://dnn506yrbagrg.cloudfront.net https://builder-assets.unbounce.com https://d2xxq4ijfwetlm.cloudfront.net https://login.dognet.sk https://optimize.google.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://*.myfonts.net https://tagmanager.google.com https://fonts.googleapis.com https://builder-assets.unbounce.com https://optimize.google.com 'unsafe-inline'
font-src 'self' *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.typekit.net *.webtype.com
frame-src 'self' *.itunes.apple.com *.twitter.com *.youtube.com *.youtube-nocookie.com
img-src 'self' data: 'unsafe-inline' *.google-analytics.com *.googletagmanager.com *.itunes.apple.com *.kvraudio.com *.twimg.com *.twitter.com *.typekit.net u-he.com *.u-he.com *.webtype.com
script-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.doubleclick.net *.feedrapp.info *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.jquery.com *.typekit.net *.twimg.com *.twitter.com *.yahooapis.com *.youtube.com
style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.typekit.net *.twitter.com *.twimg.com *.webtype.com *.youtube.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://datascience.com.co:443 https://*.datascience.com.co:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' cdn.mxpnl.com cdn.quilljs.com csi.gstatic.com fonts.googleapis.com fonts.gstatic.com js.stripe.com maps.google.com maps.googleapis.com api.mixpanel.com www.google-analytics.com cdn.jsdelivr.net data: sentry.espresa.com www.youtube.com maps.gstatic.com www.googletagmanager.com connect.facebook.net www.facebook.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com whatfix.com wss://ws.espresa.com:8080 espresaprod.s3.amazonaws.com"
"default-src data: 'self' 'unsafe-inline' https://vjs.zencdn.net *.blogis.net m-shes.ru buawdshes.ru pornogradus.com
connect-src https: http: mediastream: wss: 'self'
"default-src 'self' golos.io www.youtube.com *.facebook.com vk.com
child-src 'self' www.youtube.com w.soundcloud.com *.facebook.com player.vimeo.com chat.golos.io livejournal.com www.google.com/maps/ app.powerbi.com widget.letitplay.io coub.com vk.com/video_ext.php ok.ru/videoembed/ rutube.ru/play/embed/ yandex.ru/map-widget/ music.yandex.ru www.deezer.com golosioapp:
script-src 'self' 'unsafe-inline' *.facebook.com www.google-analytics.com *.facebook.net cdn.polyfill.io *.metabar.ru mc.yandex.ru chat.golos.io media.reformal.ru cdn.ravenjs.com relap.io cdn.amplitude.com api.amplitude.com
style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com
connect-src 'self' cyber.fund lang.golos.io images.golos.io wss://push.golos.io wss://ws.golos.io wss://ws18.golos.io wss://*.golos.io *.facebook.com www.google-analytics.com mc.yandex.ru stats.g.doubleclick.net coub.com yandex.ru/map-widget/ music.yandex.ru deezer.com relap.io api.amplitude.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' * *.ekranet.com *.google.com *.doubleverify.com *.myvisualiq.net *.gstatic.com wurfl.io *.wurfl.io *.wp.com *.criteo.com *.criteo.net *.googlesyndication.com secure-ds.serving-sys.com *.serving-sys.com *.google.al *.doubleclick.net *.sharethis.com *.google-analytics.com ajax.cloudflare.com  *.cloudflare.com *.vid4u.org *.googletagservices.com *.digitalbee.al *.medium.al *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.google-analytics.com
frame-src 'self'  * *.ekranet.com *.wp.com *.cloudflare.com *.doubleverify.com *.myvisualiq.net *.gstatic.com wurfl.io *.wurfl.io *.serving-sys.com *.doubleclick.net *.vid4u.org *.google-analytics.com *.digitalbee.al *.medium.al *.googletagservices.com *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com
img-src 'self'  * *.cloudflare.com *.doubleclick.net *.digitalbee.al *.medium.al *.googletagservices.com *.vid4u.org *.google-analytics.com *.facebook.com *.sharethis.com *.google.com *.google.al *.serving-sys.com *.googlesyndication.com *.criteo.net *.criteo.com *.wp.com wurfl.io *.wurfl.io *.gstatic.com *.myvisualiq.net *.doubleverify.com *.ekranet.com"
"default-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://reviewsonmywebsite.com https://*.addthis.com https://*.mailmunch.co
frame-src 'self' https://*.mailmunch.co https://www.google.com https://www.facebook.com https://www.youtube.com https://maps.google.com.ar https://docs.google.com https://*.addthis.com
script-src 'self' https://reviewsonmywebsite.com https://connect.facebook.net https://*.googleapis.com https://cdnjs.cloudflare.com https://*.mailmunch.co https://*.ckeditor.com https://*.google-analytics.com https://*.github.io https://*.googleapis.com https://*.wordpress.com https://*.addthis.com https://*.addthisedge.com/ https://maxcdn.bootstrapcdn.com https://cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'
font-src 'self' https://cdnjs.cloudflare.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://s1.wp.com data:
style-src 'self' https://*.googleapis.com https://cdnjs.cloudflare.com https://*.mailmunch.co https://*.ckeditor.com https://*.github.io https://maxcdn.bootstrapcdn.com 'unsafe-inline'
"default-src ajax.googleapis.com www.google-analytics.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data: 'self' https://d3ns5crcgwfodk.cloudfront.net/ https://cdn.vendocdn.com/ https://cdn.vendocdn.com/store/ https://secure.vend-o.com/
frame-src 'self' *.criteo.com *.umbraco.org *.youtube.com *.facebook.com *.addthis.com *.matterport.com
style-src 'self' 'unsafe-inline' https: fonts.googleapis.com
img-src 'self' http: https: data: *.gstatic.com *.googleapis.com placehold.it placeholdit.imgix.net *.google-analytics.com
script-src 'self' *.criteo.net *.criteo.com 'unsafe-eval' 'unsafe-inline' localhost *.addthisedge.com *.youtube.com *.facebook.net *.addthis.com https: *.googleapis.com *.google-analytics.com *.googleadservices.com
connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com www.google-analytics.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com wss://live.github.com
img-src 'self' data: github.githubassets.com assets-cdn.github.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com *.githubusercontent.com
img-src data: https://s-ssl.wordpress.com  *.wp.com  *.google.com *.googleapis.com *.google-analytics.com https://xn--mgbuq0c.net https://*.twitter.com https://*.twimg.com  https://*.flickr.com https://*.staticflickr.com *.gravatar.com https://*.yahoo.com https://*.linksynergy.com https://xn--mgbuq0c.net
script-src 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.wp.com *.addthis.com graph.facebook.com *.pinterest.com *.linkedin.com *.addthisedge.com *.google.com https://xn--mgbuq0c.net https://ajax.googleapis.com https://*.gstatic.com https://*.youtube.com https://*.yahoo.com https://*.twitter.com https://*.flickr.com https://*.twimg.com
style-src 'unsafe-inline' *.wp.com https://maxcdn.bootstrapcdn.com *.google.com https://xn--mgbuq0c.net https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com https://*.youtube.com
frame-src 'self' *.wp.com *.addthis.com https://*.youtube.com https://*.amazon.com https://*.twitter.com
font-src 'self' data: wordpress.com *.wp.com https://maxcdn.bootstrapcdn.com
media-src 'self' *.wp.com *.addthis.com https://*.youtube.com https://*.amazon.com https://*.ssl-images-amazon.com https://*.twitter.com https://*.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.workable.com"
"default-src 'self' http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com https://preprod-slb.au.s522.net:1943 https://prod-slb.au.s522.net:1943
media-src 'self' https://stileapp.com blob: http://localhost:10001 http://localhost:10002 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com http://educationvideo.com.au http://mpegmedia.abc.net.au https://uploads.intercomcdn.com https://js.intercomcdn.com
script-src 'self' https://vimeo.com s.ytimg.com www.youtube.com https://player.vimeo.com 'unsafe-inline' 'unsafe-eval' http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com https://js.live.net https://widget.intercom.io https://js.intercomcdn.com https://api-ping.intercom.io https://static.zdassets.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://cdn.mxpnl.com
style-src 'self' 'unsafe-inline' http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com
img-src 'self' data: blob: i.ytimg.com i.vimeocdn.com http://www.abc.net.au http://localhost:10001 http://localhost:10002 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com http://js.intercomcdn.com https://js.intercomcdn.com https://static.intercomassets.com https://uploads.intercomcdn.com https://media.tenor.co https://gifs.intercomcdn.com https://p.sfx.ms https://www.google-analytics.com help.stileapp.com http://static1.squarespace.com
frame-src 'self' https://stileapp.com www.youtube.com vimeo.com player.vimeo.com https://online.clickview.com.au https://online.clickview.co.uk https://online.clickview.co.nz http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com iframesandbox.stileapp.com https://onedrive.live.com https://fast.wistia.com https://fast.wistia.net
child-src 'self' https://stileapp.com www.youtube.com vimeo.com player.vimeo.com https://online.clickview.com.au https://online.clickview.co.uk https://online.clickview.co.nz http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com iframesandbox.stileapp.com https://onedrive.live.com https://fast.wistia.com https://fast.wistia.net
connect-src 'self' data: vimeo.com gdata.youtube.com http://localhost:10001 http://localhost:10002 https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://api-iam.intercom.io https://uploads.intercomcdn.com https://ekr.zdassets.com https://help.stileapp.com https://stileapp.zendesk.com https://stile-testing.zendesk.com https://preprod-slb.au.s522.net:1943 https://prod-slb.au.s522.net:1943 https://graph.microsoft.com https://login.microsoftonline.com https://api.onedrive.com https://stileapp.com
font-src 'self' data: about: http://localhost:10001 www01.stileapp.com www02.stileapp.com www03.stileapp.com www04.stileapp.com www05.stileapp.com www06.stileapp.com www07.stileapp.com www08.stileapp.com www09.stileapp.com www10.stileapp.com https://js.intercomcdn.com
"default-src 'self' *.cloudfront.net *.sheetmusicplus.com widget.trustpilot.com *.bronto.com *.facebook.com docs.google.com www.youtube.com bid.g.doubleclick.net t.pepperjamnetwork.com
script-src 'self' *.sheetmusicplus.com *.cloudfront.net *.pbbl.co widget.trustpilot.com *.bronto.com pippio.com pv-p.alcmpn.com static.traversedlp.com widget.privy.com optimize.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net sp.analytics.yahoo.com seal.digicert.com membrain.getsidecar.com js-agent.newrelic.com connect.facebook.net cdn.optimizely.com reporting.singlefeed.com bat.bing.com bam.nr-data.net ajax.googleapis.com request.eprotect.vantivcnp.com payments.vantivcnp.com assets.adobedtm.com request.eprotect.vantivpostlive.com cdn3.optimizely.com s.yimg.com flex.msn.com flex.atdmt.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.sheetmusicplus.com *.cloudfront.net www.googletagmanager.com optimize.google.com www.google.com www.google.com.hk *.pbbl.co www.emjcd.com *.facebook.com ssl.google-analytics.com www.google-analytics.com google-analytics.com ap.lijit.com io.narrative.io api.privy.com events.privy.com assets.privy.com privymktg.com *.bronto.com seal.digicert.com bat.bing.com googleads.g.doubleclick.net stats.g.doubleclick.net tracking.searchmarketing.com
connect-src 'self' *.sheetmusicplus.com widget.trustpilot.com api.traversedlp.com tri.privy.com api.privy.com events.privy.com *.bronto.com logx.optimizely.com a1281752415.cdn.optimizely.com *.doubleclick.net paypal.com *.paypal.com payments.vantivcnp.com freeshipping.com *.vantivpostlive.com themoneyconverter.com apilayer.net adn.16e4f.betacdn.net youtube.com browse-endpoint.brontops.com www.google.com www.google.com.hk www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.jquery.com *.webspellchecker.net *.addtoany.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com 91.121.113.128:8080 *.bankofjordan.com bankofjordan.com *.exchange.jo track.adform.net img04.en25.com
style-src 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.ckeditor.com exchange.jo *.local *.dotdemos.com  *.pex.ps 91.121.113.128:8080 bankofjordan.com.ps *.bankofjordan.com bankofjordan.com track.adform.net track.adform.net
img-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.googleapis.com *.google-analytics.com *.gstatic.com *.local *.dotdemos.com *.pex.ps 91.121.113.128:8080 bankofjordan.com.ps *.bankofjordan.com bankofjordan.com track.adform.net
media-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.googleapis.com *.gstatic.com *.google-analytics.com *.local *.dotdemos.com 91.121.113.128:8080 bankofjordan.com.ps *.bankofjordan.com bankofjordan.com
frame-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.gstatic.com *.addtoany.com *.local *.dotdemos.com 91.121.113.128:8080 bankofjordan.com.ps *.bankofjordan.com bankofjordan.com c1.adform.net
font-src 'self' 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.local *.dotdemos.com 91.121.113.128:8080 *.bankofjordan.com bankofjordan.com track.adform.net
connect-src 'self' 'unsafe-inline' https://cartiminunate.ro/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://cartiminunate.ro/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com pym.nprapps.org *.marketo.com *.cloudflare.com www.google-analytics.com cdn.optimizely.com www.bugherd.com sjrtp4-cdn.marketo.com www.googletagmanager.com cdn.callrail.com cdn-akamai.mookie1.com secure-ds.serving-sys.com munchkin.marketo.net *.calltrk.com tags.tiqcdn.com bs.serving-sys.com *.marketo.com app.callrail.com p.jwpcdn.com www.youtube.com *.addthis.com m.addthisedge.com maps.googleapis.com s.ytimg.com graph.facebook.com widgets.pinterest.com *.googleapis.com use.typekit.net *.northwell.edu video.limelight.com *.delvenetworks.com static.addtoany.com malihu.github.io ajax.aspnetcdn.com s.gravatar.com *.wp.com calltrk-production.s3.amazonaws.com *.bootstrapcdn.com *.googleadservices.com ajax.microsoft.com code.jquery.com api.html5media.info *.cloudfront.net *.jwpcdn.com *.google.com
object-src 'self' assets.delvenetworks.com *.delvenetworks.com video.limelight.com assets.delvenetworks.com assets.delvenetworks.com
style-src 'self' 'unsafe-inline' *.googleapis.com *.ajax.googleapis.com ajax.googleapis.com *.marketo.com rtp-static.marketo.com *.bootstrapcdn.com *.northwell.edu malihu.github.io static.addtoany.com s.gravatar.com code.jquery.com  *.cloudfront.net *.google.com
img-src 'self' media.npr.org data: *.google-analytics.com *.g.doubleclick.net *.google.com jwpltx.com api.nslijweb.com csi.gstatic.com *.googleapis.com maps.gstatic.com img.delvenetworks.com *.llnw.net m.addthis.com *.northwell.edu northwellhealt.wpengine.com *.gravatar.com *.wp.com *.northwell.io *.cloudfront.net *.amazonaws.com www.bugherd.com
frame-src 'self' *.marketo.com cdn-akamai.mookie1.com tags.tiqcdn.com s7.addthis.com www.youtube.com static.addtoany.com googleads.g.doubleclick.net *.google.com
font-src 'self' data: *.joinhoney.com themes.googleusercontent.com fonts.gstatic.com *.bootstrapcdn.com www.bugherd.com
connect-src 'self' 'unsafe-inline' *.serving-sys.com 309-lvl-470.mktoresp.com sjrtp4.marketo.com m.addthis.com *.pusherapp.com *.pusher.com www.bugherd.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://writingcooperative.com:443 https://*.writingcooperative.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.xing-share.com *.xing.com *.hotjar.com *.optmnstr.com *.youtube.com s.ytimg.com *.syncfusion.com  *.google.com maps.googleapis.com ajax.googleapis.com www.gstatic.com *.googletagmanager.com cdnjs.cloudflare.com www.googleadservices.com connect.facebook.net use.typekit.net *.google-analytics.com googleads.g.doubleclick.net cdn.swaychat.com serve.albacross.com api.swayio.com *.firebaseio.com verify.authorize.net smarticon.geotrust.com cdn.rawgit.com *.addthis.com m.addthisedge.com
frame-src cdn.swaychat.com *.facebook.com  *.xing-share.com *.xing.com *.hotjar.com *.optmnstr.com *.firebaseio.com *.syncfusion.com bid.g.doubleclick.net *.addthis.com www.youtube.com api.swayio.com *.google.com www.gstatic.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://coletivoux.com:443 https://*.coletivoux.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googleadservices.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com
img-src 'self' data: https://www.google-analytics.com http://c1802182.cdn.cloudfiles.rackspacecloud.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://maps.gstatic.com https://maps.gstatic.com
frame-src 'self' https://www.google.pl https://www.google.com https://sslcharts.forexprostools.com https://sslfxrates.forexprostools.com https://sslecal2.forexprostools.com https://googleads.g.doubleclick.net http://fxrates.pl.forexprostools.com http://fchart.investing.com http://ec.pl.forexprostools.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://be.wizzair.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://connect.facebook.net https://cloudfront.loggly.com https://aff.bstatic.com https://widget.rentalcars.com https://*.hotjar.com https://js-agent.newrelic.com https://bam.nr-data.net *.akamaihd.net https://youtube.com https://www.youtube.com https://*.ytimg.com https://instagram.com https://www.instagram.com https://*.polyfill.io
connect-src 'self' wss: *.wizzair.com *.loggly.com https://waplazrass01.search.windows.net https://bam.nr-data.net https://www.google-analytics.com https://partner.wizzair.com https://widget.rentalcars.com https://*.hotjar.com https://api.instagram.com https://www.facebook.com https://stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.rentalcars.com https://cars.wizzair.com
font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com
frame-src https://5308433.fls.doubleclick.net https://www.booking.com https://secure.rentalcars.com https://www.facebook.com https://connect.facebook.net https://*.hotjar.com https://www.youtube.com https://www.google.com https://www.instagram.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tawk.to wss://*.tawk.to ssl.silnet.pl *.googletagmanager.com *.google-analytics.com embed.tawk.to static-v.tawk.to *.static-v.tawk.to *.embed.tawk.to va.tawk.to *.motoflota.pl googleadservices.com googleads.g.doubleclick.net *.googleadservices.com google-analytics.com *.facebook.net *.profiauto.silnet.pl profiauto.silnet.pl *.jsdelivr.net *.google.com *.googleapis.com cdnjs.cloudflare.com
style-src 'self' 'unsafe-inline' cdn.jsdelivr.net *.motoflota.pl motoflota.pl profiauto.silnet.pl fonts.googleapis.com ssl.silnet.pl
img-src 'self' silnet.pl data: cdn.jsdelivr.net static-v.tawk.to motoflota.pl google.pl *.google.pl ssl.silnet.pl *.motoflota.pl *.google-analytics.com  *.google.com *.google.com *.profiauto.silnet.pl profiauto.silnet.pl *.doubleclick.net profiauto.pl *.profiauto.pl *.googletagmanager.com
font-src 'self' static-v.tawk.to fonts.gstatic.com *.profiauto.silnet.pl profiauto.silnet.pl
frame-src 'self' va.tawk.to dobrymechanik.pl *.dobrymechanik.pl *.facebook.com google.com *.google.com
connect-src 'self' tawk.to/ profiauto.silnet.pl *.tawk.to wss://*.tawk.to *.tawk.to *.profiauto.silnet.pl va.tawk.to embed.tawk.to static-v.tawk.to *.static-v.tawk.to *.embed.tawk.to"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' oltest.ru https://oltest.ru *.oltest.ru https://*.oltest.ru oltest.kz https://oltest.kz *.oltest.kz https://*.oltest.kz olte.st https://olte.st *.olte.st https://*.olte.st https://yastatic.net https://*.yastatic.net yastatic.net *.yastatic.net https://*.yandex.net *.yandex.net https://*.yandex.ru https://yandex.ru *.yandex.ru yandex.ru https://yandex.by https://*.yandex.by yandex.by *.yandex.by https://yandex.ua https://*.yandex.ua yandex.ua *.yandex.ua https://yandex.fr https://*.yandex.fr yandex.fr *.yandex.fr https://yandex.kz https://*.yandex.kz yandex.kz *.yandex.kz https://yandex.st https://yandexadexchange.net https://*.yandexadexchange.net https://www.google-analytics.com www.google-analytics.com https://*.google.com *.google.com https://vk.com https://*.vk.com
img-src data: 'self' oltest.ru https://oltest.ru *.oltest.ru https://*.oltest.ru oltest.kz https://oltest.kz *.oltest.kz https://*.oltest.kz olte.st https://olte.st *.olte.st https://*.olte.st https://*.yandex.ru https://yandex.ru *.yandex.ru yandex.ru https://yandex.kz https://*.yandex.kz yandex.kz *.yandex.kz https://*.yandex.net *.yandex.net https://yastatic.net https://*.yastatic.net yastatic.net *.yastatic.net https://www.google-analytics.com www.google-analytics.com https://*.google.com *.google.com https://www.googleapis.com www.googleapis.com https://*.gstatic.com *.gstatic.com https://*.doubleclick.net *.doubleclick.net https://vk.com https://*.vk.com
font-src oltest.ru https://oltest.ru *.oltest.ru https://*.oltest.ru oltest.kz https://oltest.kz *.oltest.kz https://*.oltest.kz olte.st https://olte.st *.olte.st https://*.olte.st
"img-src * data: blob: android-webview-video-poster:
default-src 'self' 'unsafe-inline' 'unsafe-eval' http://gateporn.tv http://*.cdna.tv http://*.jwplatform.com https://*.jwplatform.com http://*.jwpsrv.com https://*.jwpsrv.com http://*.jwpcdn.com https://*.jwpcdn.com http://awaps.yandex.ru https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ http://counter.yadro.ru http://*.google-analytics.com http://mc.yandex.ru https://mc.yandex.ru http://xxx-hunt-m.com buawdshes.ru http://*.piguiqproxy.com http://*.amgload.net http://*.smcheck.org https://loadercdn.com https://*.exosrv.com *.clcknads.pro https://*.traffic-media.co https://69i.club blob: data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:"
"script-src 'self' vimeo.com https://gist.github.com www.slideshare.net https://query.yahooapis.com 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://www.dropbox.com https://*.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://js.driftt.com https://embed.small.chat https://static.small.chat https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com 'nonce-75fb6754-255f-4e01-b47b-b18ae5e39ad9' 'sha256-etvssxrwce5clefbzbvzvdrtiroyoxbwwwvevcim5ag=' 'sha256-nzb7w9gyjnurmeidk01d3/detyztrtnxc/dqw7agdy4=' 'sha256-l0tsyaqlac0koby5dcbfawffrs9zxesa+4xg0qdsrdi='
connect-src 'self' 'unsafe-inline' https://cartea-ta.ro/ https://www.google-analytics.com
img-src 'self' http://www.comandacarti.ro https://cartea-ta.ro/ http://*.trafic.ro https://7carti.ro/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://cartea-ta.ro/ https://secure.trafic.ro https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'sha256-tmugjd0birlsl0p96wh13bcwks6bzphi8ogm2mpawyi=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
connect-src 'self' drawesome.uy:* draw.uy:* wss://draw.uy:* wss://drawesome.uy:* wss://s.drawesome.uy:* *.imgur.com imgur.com fonts.gstatic.com fonts.googleapis.com www.google-analytics.com youtube.com www.youtube.com
style-src https 'unsafe-inline' *.atncorp.com *.atncorp.app *.thor-scope.com *.yotpo.com *.jivosite.com *.bootstrapcdn.com *.googleapis.com www.google.com
connect-src *.atncorp.com *.atncorp.app *.thor-scope.com *.yotpo.com wss://*.yotpo.com *.jivosite.com wss://*.jivosite.com *.google-analytics.com *.yandex.ru *.doubleclick.net
script-src 'unsafe-inline' 'unsafe-eval' *.atncorp.com *.atncorp.app *.thor-scope.com *.yotpo.com *.cetrk.com *.amazonaws.com *.crazyegg.com *.jivosite.com *.googleapis.com *.googleadservices.com *.vantivprelive.com *.vantivcnp.com *.online-metrix.net *.yandex.ru *.google-analytics.com *.criteo.net *.criteo.com *.facebook.net *.facebook.com *.crazyegg.com *.googletagmanager.com *.zendesk.com *.avmws.com *.gstatic.com *.youtube.com *.ytimg.com www.google.com
script-src 'self' 'nonce-85345b03-f6f8-4510-a436-2929eac3b59e' 'unsafe-inline' cdn.polyfill.io *.facebook.net *.google.com *.taglr.com *.cloudflare.com http://static.clevertap.com https://d2r1yp2w7bby2u.cloudfront.net https://*.cloudfront.net http://wzrkt.com https://*.amazonaws.com *.hockeycurve.com/taglr-001.js *.googletagmanager.com *.googleadservices.com http://ads.google.com/ *.youtube.com/ http://googleads.g.doubleclick.net/
child-src *.facebook.com platform.twitter.com *.g.doubleclick.net *.google.com
frame-src *.facebook.com platform.twitter.com *.g.doubleclick.net *.youtube.com *.google.com *.paypal.com *.paymentwall.com
img-src 'self' data: *.google.com *.trustzoneurl.com trustzonepost.xyz *.g.doubleclick.net *.facebook.com syndication.twitter.com seal.digicert.com www.google-analytics.com *.cartocdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustzoneurl.com google.com a.trust.zone platform.twitter.com connect.facebook.net www.gstatic.com www.googleadservices.com *.google-analytics.com seal.digicert.com *.paypalobjects.com *.paypal.com
script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-jvkiryktdvjqydc8pxtpvaxe97pq7dj2rze5l0keetg='
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://doublepulsar.com:443 https://*.doublepulsar.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src https: data:  img-src https: data: script-src self: 'unsafe-inline' 'unsafe-eval'"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://flutterdoc.com:443 https://*.flutterdoc.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' sprod.openratings.com app.onelogin.com w3.org dnb.onelogin.com dnbqa.onelogin.com dnbstg.onelogin.com services.dnb.com github.com h5bp.com fonts.googleapis.com docs.dnb.com spreadsheets.google.com export.highcharts.com highcharts.com code.highcharts.com springframework.org java.sun.com maps.google.com learning.dnb.com facebook.com twitter.com youtube.com linkedin.com *.dnb.com srm2.com windows.microsoft.com support.apple.com google.com mozilla.org help.dnb.com html5shim.googlecode.com jakarta.apache.org stubbornella.org cxf.apache.org maven.apache.org schemas.xmlsoap.org jboss.com docs.oasis-open.org openapplications.org service.common.dnb.com xbrl.org richfaces.org people.apache.org repository.jboss.org tiles.apache.org wiki.moxiecode.com tinymce.moxiecode.com iespell.com download.macromedia.com activex.microsoft.com video.google.com player.vimeo.com stream.cz qaprod.openratings.com libs.coremetrics.com ehcache.sf.net esb-bhqa.dnb.com testscorecard.openratings.com esb3-bhqa.dnb.com smetrics.dnb.com developers.google.com supplierriskmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.google.com www.google-analytics.com maps.google.com *.googleapis.com *.akamaihd.net *.dnb.com data: blob: *.coremetrics.com *.cloudfront.net *.altares.com
font-src 'self' cdn.joinhoney.com *.gstatic.com *.akamaihd.net
style-src 'self' 'unsafe-inline' *.googleapis.com *.akamaihd.net *.dnb.com *.cloudfront.net *.altares.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://sprintstories.com:443 https://*.sprintstories.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://oss.maxcdn.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://csi.gstatic.com https://ssl.comodo.com https://sealserver.trustwave.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.bing.com/translator/api/translate https://translate.google.com/ https://translate.googleapis.com https://static.geetest.com https://api-na.geetest.com
style-src 'self' 'unsafe-inline' https://www.google-analytics.com https://oss.maxcdn.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://csi.gstatic.com https://ssl.comodo.com https://sealserver.trustwave.com https://fonts.googleapis.com https://translate.googleapis.com https://static.geetest.com
img-src 'self' https://www.google-analytics.com https://oss.maxcdn.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://csi.gstatic.com https://ssl.comodo.com https://sealserver.trustwave.com https://translate.googleapis.com https://www.gstatic.com https://www.google.com/images/ https://translate.google.com https://static.geetest.com
connect-src 'self' 'unsafe-inline' https://translate.googleapis.com https://www.bing.com/translator/api/translate"
"script-src 'sha256-w8mx4tycmfr6js8o32a9c4ezdhqstmdckgnxbtpscu8=' 'self' https://www.google-analytics.com https://www.googletagmanager.com http://static.hotjar.com https://static.hotjar.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.geetest.com http://api.geetest.com https://static.geetest.com http://static.geetest.com https://www.bitmart.com http://script.hotjar.com/ https://script.hotjar.com/ http://vars.hotjar.com/ https://vars.hotjar.com/ http://dn-staticdown.qbox.me/ https://dn-staticdown.qbox.me/
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.surefirecrm.com cdnjs.cloudflare.com *.trumba.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://secure.insightexpressai.com http://www.millwardbrown.ru
script-src blob: 'unsafe-eval' 'nonce-wmo4rmj5quviaghdmxvqnwlibdrvofja' *.teknik.io:443 teknik.io:443
"default-src 'self' 'unsafe-inline' fonts.gstatic.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com maps.google.com *.googleapis.com sealserver.trustwave.com *.geotrust.com
img-src 'self' data: *.fls.doubleclick.net sealserver.trustwave.com *.geotrust.com maps.google.com maps.googleapis.com maps.gstatic.com
script-src 'self' 'unsafe-inline' static.andigital.com www.jqcdn.download andigital.disqus.com disqus.com c.disquscdn.com player.vimeo.com script.hotjar.com static.hotjar.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com www.google.com www.google.com/recaptcha gstatic.com www.gstatic.com *.gstatic.com
style-src 'self' 'unsafe-inline' static.andigital.com c.disquscdn.com tagmanager.google.com
img-src 'self' data: static.andigital.com stats.g.doubleclick.net www.google-analytics.com gstatic.com www.gstatic.com *.gstatic.com 1.gravatar.com s.w.org secure.gravatar.com and.digital
frame-src 'self' www.jqcdn.download jobs.jobvite.com vars.hotjar.com player.vimeo.com app.jobvite.com and-digital.workable.com www.google.com/recaptcha www.google.com disqus.com
script-src 'nonce-e096d9b648099268135fe90174c0eaa7' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com statpipe.ru adservice.google.ge googletagmanager.com adservice.google.co.uz adservice.google.pl adservice.google.md adservice.google.cz adservice.google.am adservice.google.co.il adservice.google.de adservice.google.kg adservice.google.lt adservice.google.ro adservice.google.ru adservice.google.com.ua adservice.google.kz adservice.google.nl cdn.sendpulse.com yastatic.net cse.google.ru yastatic.net cse.google.ru vk.com *.reformal.ru reformal.ru *.googleadservices.com *.tynt.com *.google.com google.com *.tynt.com share.pluso.ru www.google.ru www.google-analytics.com s7.addthis.com *.wotspeak.org wotspeak.org *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com
frame-src 'self' cdn.steambets.net *.google.com cse.google.ru *.google.ru login.vk.com https://*.reformal.ru *.reformal.ru reformal.ru vk.com www.google.ru s7.addthis.com *.googleadservices.com *.wotspeak.org wotspeak.org *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com
connect-src 'self' cdn.steambets.net statpipe.ru stats.g.doubleclick.net csi.gstatic.com www.google-analytics.com pushdata.sendpulse.com:4434 https://*.reformal.ru *.reformal.ru reformal.ru *.googleadservices.com *.wotspeak.org wotspeak.org mc.yandex.ru https://translate.googleapis.com https://pipe.skype.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.sendpulse.com *.googleadservices.com s7.addthis.com *.wotspeak.org wotspeak.org *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://*.yandex.ru data:
font-src 'self' wotspeak.org *.reformal.ru *.googleadservices.com *.googleapis.com *.gstatic.com *.yandex.ru https://*.googleapis.com https://*.gstatic.com https://fonts.gstatic.com fonts.gstatic.com https://*.yandex.ru data:
img-src 'self' cdn.steambets.net kolobanov.pro cdn.push.expert vk.com www.gravatar.com m.addthis.com *.reformal.ru reformal.ru *.googleadservices.com counter.yadro.ru *.tynt.com share.pluso.ru www.google.ru www.google-analytics.com https://*.google.com *.google.com google.com *.wotspeak.org wotspeak.org *.yandex.net *.yandex.ru yandex.ru yandex.st *.googlesyndication.com *.doubleclick.net *.googleapis.com *.gstatic.com https://*.yandex.net https://*.yandex.ru https://*.googlesyndication.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com data:
object-src 'self' cdn.steambets.net *.googleadservices.com *.reformal.ru reformal.ru *.gstatic.com an.yandex.ru https://*.gstatic.com https://an.yandex.ru
script-src 'unsafe-inline' 'unsafe-eval' 'self' *
"script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://vmeste.eu https://ulogin.ru/js/ulogin.js"
child-src https: http: 'self' *.facebook.com *.facebook.net usersnap.com api.usersnap.com d3mvnvhjmkxpjz.cloudfront.net/*
connect-src 'self' sumome.com *.usersnap.com sumo.com blob:
script-src https: http: 'self' 'unsafe-eval' 'unsafe-inline' d3mvnvhjmkxpjz.cloudfront.net/* *.facebook.net www.google-analytics.com api.usersnap.com/load/fb92bdd3-36ab-42b8-81ac-295a4bf444cb.js cdn.optimizely.com/js/ edge.quantserve.com/quant.js www.google.com/recaptcha/api.js
style-src https: 'self' 'unsafe-inline' d3mvnvhjmkxpjz.cloudfront.net *.facebook.net usersnap.com www.google-analytics.com api.usersnap.com"
script-src 'self' www.google-analytics.com https://js.driftt.com 'nonce-odnlntk3zjgtn2qzns00mjqxlwexndktzddimmm3ngu1owvm' 'unsafe-inline' https://web.autumcdn.com
script-src 'self' 'sha256-hctnlfqzidwwi97xgqmhwxgfyfu4i8djw6yudbcram8=' 'sha256-3hqb2zm3qafbmdbr5vqdde+oc8i+2ggoklq0o775d8g=' https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com http://tagmanager.google.com https://www.paypal.com https://apis.google.com https://sentry.sc-prod.net https://ads-interfaces.sc-cdn.net https://adsapisc.appspot.com
connect-src 'self' https://www.google-analytics.com https://am-api.snapchat.com https://api.braintreegateway.com https://payments.braintree-api.com https://client-analytics.braintreegateway.com https://accounts.snapchat.com https://adsapi.snapchat.com https://adsapisc.appspot.com https://preproduction-dot-softserve-prod.appspot.com wss://*.zopim.com https://*.zopim.com https://snap-web-chat.appspot.com https://googleads.g.doubleclick.net https://web-frontend-dot-sc-analytics.appspot.com https://www.paypal.com https://*.tiles.mapbox.com https://api.mapbox.com https://sentry.sc-prod.net https://ads-interfaces.sc-cdn.net
img-src 'self' data: blob: https://api.mapbox.com https://www.googleadservices.com https://www.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://storage.googleapis.com https://www.google-analytics.com https://v2uploads.zopim.io https://adsapi.snapchat.com https://render.bitstrips.com https://www.paypal.com https://lens-storage.storage.googleapis.com https://snapcodes.storage.googleapis.com https://snapchatpd-a.akamaihd.net https://ads-interfaces.sc-cdn.net
media-src 'self' data: blob: https://storage.googleapis.com https://adsapi.snapchat.com https://ads-interfaces.sc-cdn.net
style-src 'self' 'unsafe-inline' blob: https://ads-interfaces.sc-cdn.net
font-src 'self' data: https://storage.googleapis.com https://ads-interfaces.sc-cdn.net
frame-src 'self' data: https://ads.springboard.la https://accounts.google.com https://accounts.snapchat.com https://creativesuite-prod.appspot.com https://assets.braintreegateway.com https://snappublisher.snapchat.com https://www.paypal.com/ https://ads-interfaces.sc-cdn.net
"connect-src 'self' *.novoresume.com connect.facebook.net https://widget.trustpilot.com
frame-src 'self' *.novoresume.com *.googleapis.com *.google.com https://widget.trustpilot.com https://player.vimeo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' trackcmp.net *.novoresume.com *.google.com *.google-analytics.com *.googleadservices.com connect.facebook.net www.googletagmanager.com *.doubleclick.net www.facebook.com static.ads-twitter.com analytics.twitter.com https://widget.trustpilot.com https://player.vimeo.com
script-src 'self' https://www.google.com https://www.gstatic.com https://www.google-analytics.com 'nonce-8326299a245a322538a27898d377d14b48be70ec' 'unsafe-inline'
img-src 'self' data: https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net
img-src * data: blob: android-webview-video-poster
script-src 'self' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net 'unsafe-inline'
frame-src 'self' https://www.facebook.com https://www.google.com https://www.youtube.com https://connect.facebook.net
connect-src 'self' https://gcs-vimeo.akamaized.net https://fpdl.vimeocdn.com https://www.google-analytics.com
media-src 'self' https://gcs-vimeo.akamaized.net https://fpdl.vimeocdn.com https://player.vimeo.com"
"default-src https://secure.assrt.net https://assrt.net https://2.assrt.net https://changyan.sohu.com
script-src 'unsafe-inline' 'unsafe-eval' blob: https: http://bdimg.share.baidu.com
img-src data: blob: https: http://cdn.xianliao.me http://tva3.sinaimg.cn
"default-src 'self' blob: https://embed-ssl.wistia.com/ https://embedwistia-a.akamaihd.net/ https://*.litix.io/ https://distillery.wistia.com/ https://pipedream.wistia.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pi.pardot.com/ https://connect.facebook.net/ https://www.google-analytics.com/ https://fast.wistia.net/ https://d.adroll.com/ https://s.adroll.com https://www.google-analytics.com https://fast.wistia.com https://www.googletagmanager.com https://go.realassetsoftware.com https://bat.bing.com/ https://www.rating-system.com/
frame-src 'self' https://fast.wistia.com/ https://fast.wistia.net/ https://go.pardot.com/ https://go.realassetsoftware.com https://www.rating-system.com/ https://rating-system.com/
img-src 'self' data: https://go.realassetsoftware.com/ https://storage.pardot.com/ https://fast.wistia.com/ https://www.facebook.com/ https://assets.capterra.com/ https://fast.wistia.net/  https://embedwistia-a.akamaihd.net/  https://stats.g.doubleclick.net/ https://cm.g.doubleclick.net/ https://us-u.openx.net/ https://idsync.rlcdn.com/ https://x.bidswitch.net/ https://ads.yahoo.com/ https://eb2.3lift.com/ https://trc.taboola.com/ https://simage2.pubmatic.com/adserver/ https://pixel.rubiconproject.com/  https://sync.outbrain.com/adroll/ https://dsum-sec.casalemedia.com/ https://pixel.advertising.com/ https://d.adroll.com/ https://ib.adnxs.com/ https://www.google-analytics.com/ https://www.rating-system.com/ https://bat.bing.com/
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/  https://addons.cdn.mozilla.net https://rating-system.com/ http://www.rating-system.com/
"default-src 'self' *.tasonline.com *.tradeareasystems.net *.tasviewer.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.virtualearth.net *.bing.com *.tradeareasystems.net *.tasonline.com *.tasviewer.com *.cloudflare.com *.googleapis.com
connect-src 'self' *.tasonline.com *.tradeareasystems.net *.bing.com *.virtualearth.net *.bingapis.com https://tradeareasystems.zendesk.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://codingpuzzles.com:443 https://*.codingpuzzles.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' googleads.g.doubleclick.net pagead2.googlesyndication.com google.com nrpc.olark.com https://maxcdn.bootstrapcdn.com https://bam.nr-data.net *.youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net https://code.jquery.com https://cdn.optimizely.com https://www.gstatic.com  *.google.com https://www.googletagmanager.com http://www.google-analytics.com https://ssl.google-analytics.com *.olark.com ajax.googleapis.com seal.geotrust.com appcenter.intuit.com pagead2.googlesyndication.com https://js-agent.newrelic.com https://bam.nr-data.net https://maxcdn.bootstrapcdn.com https://cdn.pendo.io *.youtube.com
style-src 'self' 'unsafe-eval' 'unsafe-inline' appcenter.intuit.com static.olark.com https://maxcdn.bootstrapcdn.com
img-src 'self' https://www.facebook.com log.olark.com appcenter.intuit.com https://www.googletagmanager.com https://ssl.google-analytics.com https://seal.geotrust.com https://www.google-analytics.com *.youtube.com
frame-src 'self' googleads.g.doubleclick.net static.olark.com *.google.com https://stage.secure.orders.com/ https://secure.orders.com *.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.c7sky.com cdn.jsdelivr.net hm.baidu.com *.google-analytics.com *.google.com *.googlesyndication.com *.github.com codepen.io *.codepen.io
style-src 'self' 'unsafe-inline' cdn.c7sky.com cdn.jsdelivr.net *.github.com
font-src 'self' data: cdn.c7sky.com cdn.jsdelivr.net
frame-src 'self' codepen.io *.doubleclick.net player.youku.com www.tudou.com
"default-src 'self' localhost:3333 img.manga.kiwi s3-eu-west-1.amazonaws.com
script-src 'self' 'unsafe-inline' localhost:3333 ssl.google-analytics.com www.google-analytics.com ajax.googleapis.com
style-src 'self' localhost:3333 'unsafe-inline' fonts.googleapis.com
img-src 'self' img.manga.kiwi data: blob: s3-eu-west-1.amazonaws.com *.google-analytics.com
"default-src 'self' https://portal.mysupplymanagement.com https://www.mysupplymanagement.com https://www.gstatic.com https://tableau.hilton.com https://translate.googleapis.com
script-src 'self' about: data: https://portal.mysupplymanagement.com https://www.mysupplymanagement.com https://translate.google.com https://translate.googleapis.com https://tableau.hilton.com https://www.google-analytics.com https://s7.addthis.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://portal.mysupplymanagement.com https://www.mysupplymanagement.com https://fonts.googleapis.com https://translate.googleapis.com https://fonts.typotheque.com 'unsafe-inline'
font-src 'self' data: https://portal.mysupplymanagement.com https://www.mysupplymanagement.com https://fonts.gstatic.com https://s3-us-west-1.amazonaws.com https://s3.amazonaws.com
img-src 'self' data: https://portal.mysupplymanagement.com https://www.mysupplymanagement.com https://www.google.com https://translate.google.com https://translate.googleapis.com http://img.youtube.com https://www.google-analytics.com https://www.gstatic.com https://hsm.my.salesforce.com https://hsm--c.na46.content.force.com
frame-src 'self' https://fd.hilton.com https://s7.addthis.com https://tableau.hilton.com https://www.youtube.com https://onqinsider.hilton.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' ipinfo.io maps.googleapis.com www.youtube.com tags.tiqcdn.com www.google-analytics.com www.googleadservices.com snap.licdn.com connect.facebook.net *.leadlab.click *.doubleclick.net *.linkedin.com s.ytimg.com *.wbtrk.net s.stry.tl
connect-src 'self' www.salesviewer.com salesviewer.org *.leadlab.click my.tealiumiq.com
img-src 'self' data: maps.googleapis.com maps.gstatic.com www.google-analytics.com www.google.com www.google.pt www.google.de *.doubleclick.net www.facebook.com ronet01.wt-eu02.net tags.tiqcdn.com http://tags.tiqcdn.com/
style-src 'self' 'unsafe-inline' fonts.googleapis.com stats.g.doubleclick.net www.google.com
child-src www.youtube.com connect.facebook.net e.issuu.com edit.storytile.net e.stry.tl"
"frame-ancestors 'self' *.wonderz.at *.wonderz.com.au *.wonderz.be *.wonderz.ca *.wonderz.ch *.wonderz.cn *.wonderz.de *.wonderz.de.com *.wonderz.dk *.wonderz.es *.wonderz.fi *.wonderz.fr *.wonderz.co.uk *.wonderz.gr *.wonderz.it *.wonderz.jp *.wonderz.lu *.wonderz.nl *.wonderz.pt *.wonderz.ru *.wonderz.se *.wonderz.com"
script-src 'unsafe-eval' 'report-sample' https://circleforum.squarespace.com/logs/ https://circleforum.squarespace.com/sidekiq/ https://circleforum.squarespace.com/mini-profiler-resources/ https://discourse-cdn-sjc1.com/squarespace/assets/ https://discourse-cdn-sjc1.com/squarespace/brotli_asset/ https://circleforum.squarespace.com/extra-locales/ https://discourse-cdn-sjc1.com/squarespace/highlight-js/ https://discourse-cdn-sjc1.com/squarespace/javascripts/ https://discourse-cdn-sjc1.com/squarespace/plugins/ https://discourse-cdn-sjc1.com/squarespace/theme-javascripts/ https://discourse-cdn-sjc1.com/squarespace/svg-sprite/ https://www.google-analytics.com/analytics.js
frame-src 'self' 'unsafe-inline' https://player.vimeo.com https://www.youtube.com https://bam.nr-data.net https://js-agent.newrelic.com https://kendo.cdn.telerik.com https://seal.networksolutions.com https://seal.digicert.com https://platform.twitter.com https://syndication.twitter.com https://performance.typekit.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.airlineapps.com https://bam.nr-data.net https://js-agent.newrelic.com https://kendo.cdn.telerik.com https://seal.networksolutions.com https://seal.digicert.com https://use.typekit.net https://platform.twitter.com https://syndication.twitter.com
font-src 'self' 'unsafe-inline' data: https://www.airlineapps.com https://fonts.googleapis.com https://fonts.gstatic.com https://bam.nr-data.net https://js-agent.newrelic.com https://kendo.cdn.telerik.com https://seal.networksolutions.com https://seal.digicert.com https://use.typekit.net https://platform.twitter.com https://syndication.twitter.com
img-src 'unsafe-eval' data: blob: https://admin.airlineapps.com https://www.airlineapps.com https://kendo.cdn.telerik.com https://seal.digicert.com https://p.typekit.net https://images.scanalert.com https://cdn.ywxi.net
style-src 'self' 'unsafe-inline' *.navigant.com https://cdn.jsdelivr.net https://cloud.typography.com https://www.youtube.com
img-src 'self' *.navigant.com https://static.licdn.com https://i.ytimg.com https://s2090192166.t.eloqua.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.navigant.com https://*.rackcdn.com https://s2090192166.t.eloqua.com https://img.en25.com https://www.google-analytics.com https://www.google.com https://ajax.googleapis.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://www.youtube.com  https://s.ytimg.com https://*.linkedin.com https://*.licdn.com https://*.knowledgevision.com https://*.kvcentralcom https://siteimproveanalytics.com
child-src 'self' *.navigant.com http://sdn.sitecore.net https://www.youtube.com https://navigant.postclickmarketing.com https://www.slideshare.net https://w.soundcloud.com
frame-src 'self' *.navigant.com http://sdn.sitecore.net https://www.youtube.com https://*.knowledgevision.com https://navigant.postclickmarketing.com https://www.slideshare.net https://w.soundcloud.com https://platform.linkedin.com
font-src 'self' *.navigant.com data: https://fonts.gstatic.com
script-src 'self' salesscreen-web.azureedge.net www.googletagmanager.com www.google-analytics.com www.gstatic.com www.google.com fast.fonts.net app.intercom.io widget.intercom.io js.intercomcdn.com pi.pardot.com ct.capterra.com snap.licdn.com px.ads.linkedin.com dc.ads.linkedin.com connect.facebook.net snap.licdn.com dc.ads.linkedin.com tagmanager.google.com sjs.bizographics.com 'sha256-l3+ch1zdcr/0hk8td9h8lldb/pkq474yhzd0mguw2ku=' 'sha256-+r+4ia+fc41tmlkegbmpdlai/hqzy9gvmniko2auijm=' 'sha256-ye/bucd05gw9gxewyrcuzipak85tz2ajgwkjnmz/g4c=' 'sha256-n5zpdh0f632piw3+tw2i2ytxsld2kzxojdd+dxv7y2g=' 'sha256-qlq235xyr6gna0xitriycrcyxqgvpcxaauplgzudfjg=' 'sha256-kwnxi2nfs0qhvfqelu1i+lsbdoiajkxhnbmdei+z4y8=' 'sha256-zef/alwwdyv2nz+rdygh2xpju1lbo3oz2oszayolmpw=' 'sha256-svkx08+sqomnwhiysyk3xc7rdugkyakmbxv2gwts4fo=' 'sha256-catvnm05ia3xqblj+5e4v7vbcqzcjguizc+rtfh0zro=' 'sha256-8oneia7qrjtchizgtbb1qmrn+wketalpfhqwvtjxhb8=' 'sha256-s4umnv3drzxzls5lygc7mdhsfzgft+z+oqbm5gpvl88=' 'sha256-t2zozrwidvc5kdqly3rzfdugvfimqkyuilldrtegbmq='
script-src 'strict-dynamic' 'nonce-mc41mtqyotk=' 'unsafe-inline' https:
connect-src 'self' https://api.joom.com https://api.joompay.tech https://www.google-analytics.com https://fcm.googleapis.com https://www.facebook.com https://api.branch.io https://*.bugsnag.com https://bnc.lt https://joom.test-app.link https://stats.g.doubleclick.net"
connect-src dpm.demdex.net metrics.nationwide.co.uk smetrics.nationwide.co.uk 'self' *.swiftype.com
frame-src fast.nationwide.demdex.net nationwide.demdex.net servedby.flashtalking.com 'self' r1.surveysandforms.com *.youtube.com
img-src dpm.demdex.net cm.everesttech.net metrics.nationwide.co.uk smetrics.nationwide.co.uk data: 'self'
script-src data: 'self' 'unsafe-eval' 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.googletagmanager.com *.gstatic.com *.google-analytics.com siteimproveanalytics.com *.siteimprove.com *.youtube.com *.google.com"
"default-src *.netdna-ssl.com static.nucleus.eu www.nucleus.be *.cloudfront.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.nucleus.be *.polyfill.io *.bizographics.com *.disqus.com *.cloudfront.net *.netdna-ssl.com static.nucleus.eu *.googletagmanager.com trackcmp.net *.adnxs.com *.google-analytics.com *.hotjar.com *.newrelic.com *.nr-data.net *.googleapis.com *.facebook.net *.licdn.com *.linkedin.com *.hs-scripts.com *.hs-analytics.com *.usemessages.net
font-src *.cloudfront.net *.netdna-ssl.com fonts.gstatic.com static.nucleus.eu *.nucleus.be use.fontawesome.com data:
img-src https: data: *.cloudfront.net *.netdna-ssl.com *.google-analytics.com trackcmp.net *.gravatar.com
style-src 'self' 'unsafe-inline' www.nucleus.be *.cloudfront.net *.netdna-ssl.com static.nucleus.eu fonts.googleapis.com use.fontawesome.com
default-src 'unsafe-inline' 'self' data: https://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://masterpass.com https://www.google-analytics.com https://*.alpha.gr"
"script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com 'unsafe-eval'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://www.google.com/jsapi *.comm100.com https://vimeo.com/api/oembed.json"
style-src 'self' https://www.skb.net 'unsafe-inline' fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: edit.co.uk *.cookiebot.com *.allinleeds.com *.googleadservices.com giphy.com www.google-analytics.com www.googletagmanager.com ajax.googleapis.com maps.googleapis.com stats.g.doubleclick.net googleadservices.com px.ads.linkedin.com static.ads-twiter.com facebook.com googleads.g.doubleclick.net t.co google.com googletagmanager.com hotjar.com *.hotjar.com snap.licdn.com *.twitter.com platform.twitter.com analytics.twitter.com connect.facebook.net apis.google.com
style-src 'self' 'unsafe-inline' *.allinleeds.com *.vimeo.com giphy.com latex.codecogs.com platform.twitter.com
frame-src 'self' www.youtube.com *.vimeo.com *.cookiebot.com www.facebook.com *.hotjar.com *.allinleeds.com giphy.com platform.twitter.com syndication.twitter.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com  https://developers.google.com https://www.googletagmanager.com https://maps.google.com https://www.google.com https://www.google-analytics.com https://maps.googleapis.com data:
"default-src 'self' oktajs: blob: https:
font-src 'self' data: fonts.gstatic.com *.cloudflare.com *.cloudfront.net *.googleapis.com *.scienceexchange.com cdn.joinhoney.com use.typekit.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' about: blob: data: *.algolia.net *.algolianet.com *.cloudflare.com *.cloudfront.net *.google.com *.googleapis.com *.googlesyndication.com *.opendns.com *.pardot.com *.scienceexchange.com api.filestackapi.com api.getvero.com api.ipstack.com api.keen.io api.segment.io apm.scoutapp.com assets.customer.io bam.nr-data.net bat.bing.com cdn.jsdelivr.net cdn.mxpnl.com cdn.ravenjs.com cdn.segment.com cdn.walkme.com connect.facebook.net fast.appcues.com gateway.zscaler.net googleads.g.doubleclick.net ipinfo.io js-agent.newrelic.com js.stripe.com notify.bugsnag.com px.ads.linkedin.com rules.quantcount.com secure.quantserve.com sjs.bizographics.com snap.licdn.com use.fontawesome.com use.typekit.net www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.linkedin.com www.gstatic.com
style-src 'self' 'unsafe-inline' *.cloudflare.com *.cloudfront.net *.googleapis.com *.scienceexchange.com apm.scoutapp.com fast.appcues.com www.google.com use.typekit.net p.typekit.net
script-src 'self' https://*.stubbornjava.com https://www.google-analytics.com data:
img-src 'self' https://*.stubbornjava.com https://www.google-analytics.com data: *
"script-src 'self' 'unsafe-inline' 'unsafe-eval'  http://localhost:* https://sitebridge.farmcreditbank.com https://www.google-analytics.com https://maps.googleapis.com https://a.adtpix.com https://ib.adnxs.com https://www.googletagmanager.com https://tagmanager.google.com https://stats.g.doubleclick.net https://www.google.com https://connect.facebook.net https://www.facebook.com  https://www.googleadservices.com
connect-src 'self' https://myownconference.net https://myownconference.net:1935 https://*.zopim.com wss://*.mywebinar.live https://www.google-analytics.com https://*.doubleclick.net https://ymetrica.com https://mc.yandex.ru wss://*.zopim.com https://chimpstatic.com
frame-src 'self' https://www.youtube.com https://www.google.com https://www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://myownconference.cloud https://*.myownconference.cloud https://cp.myownconference.ru https://social.puzz.me https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://ymetrica.com https://mc.yandex.ru https://*.zopim.com https://chimpstatic.com https://connect.facebook.net
media-src 'self' blob: https://myownconference.cloud https://*.myownconference.cloud https://myownconference.net https://js.intercomcdn.com https://*.zopim.com
style-src 'self' 'unsafe-inline' https://myownconference.cloud https://*.myownconference.cloud
font-src 'self' data: https://myownconference.cloud https://*.myownconference.cloud https://js.intercomcdn.com https://*.zopim.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' auth.robokassa.ru yandexadexchange.net st.yandexadexchange.net an.yandex.ru static.addtoany.com my2.imgsmail.ru www.gstatic.com *.yandex.st yastatic.net *.yandex.net bs.yandex.ru adservice.google.ru adservice.google.com pagead2.googlesyndication.com vk.com cdn.connect.mail.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://metrika.yandex.ru https://yastatic.net https://site.yandex.net https://yandex.ru
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.googleapis.com https://static.addtoany.com https://yastatic.net
img-src 'self' data:  informer.yandex.ru avatars.mds.yandex.net an.yandex.ru avatars-fast.yandex.net www.vsrf.ru vk.com yastatic.net bs.yandex.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google-analytics.com https://metrika.yandex.ru https://st.yandexadexchange.net https://site.yandex.net https://favicon.yandex.net
child-src 'self' auth.robokassa.ru yastatic.net yandexadexchange.net st.yandexadexchange.net static.addtoany.com connect.mail.ru securepubads.g.doubleclick.net googleads.g.doubleclick.net vk.com
connect-src 'self' an.yandex.ru mc.yandex.ru www.google-analytics.com *.gstatic.com"
"default-src 'self' https://translate.googleapis.com/ https://translate.google.com/ http://translate.google.com/ https://www.google.com/ http://www.google.com/ http://releases.flowplayer.org/ https://releases.flowplayer.org/ https://www.timevaluecalculators.com/ https://use.fontawesome.com/ https://hewitt.lipperweb.com/ https://sadmin.brightcove.com/ http://admin.brightcove.com/ https://players.brightcove.net/ http://players.brightcove.net/ https://translate.google.com/
script-src 'self' 'unsafe-eval' https://translate.google.com/  https://www.gstatic.com/ https://use.fontawesome.com/ http://www.gstatic.com/ https://www.google.com/ http://www.google.com/ http://releases.flowplayer.org/ https://releases.flowplayer.org/ https://www.timevaluecalculators.com/ https://hewitt.lipperweb.com/ https://sadmin.brightcove.com/ http://admin.brightcove.com/ https://secure.brightcove.com/ https://ssl.bing.com/ http://www.bing.com  http://api.microsofttranslator.com/ https://translate.googleapis.com/ http://www.myfrs.com/ https://www.myfrs.com/ http://myfrs.com/ https://myfrs.com/  http://www.microsofttranslator.com/ https://ssl.microsofttranslator.com/ www.google-analytics.com/ https://ssl.google-analytics.com/  ajax.googleapis.com/ https://www.zazachat.com/ http://www.zazachat.com/ www.jquery.com/ json.org sizzlejs.com https://www.zazamagic.aspx https://translate.google.com/ 'unsafe-inline'
style-src 'self' http://releases.flowplayer.org/ https://use.fontawesome.com/ https://releases.flowplayer.org/ https://www.timevaluecalculators.com/ https://hewitt.lipperweb.com/ https://sadmin.brightcove.com/ http://admin.brightcove.com/ http://api.microsofttranslator.com/ http://www.microsofttranslator.com/ https://translate.googleapis.com/ https://ssl.microsofttranslator.com/ https://translate.google.com/ 'unsafe-inline' 'unsafe-eval'
object-src 'self' http://releases.flowplayer.org/ https://releases.flowplayer.org/ https://www.timevaluecalculators.com/ https://hewitt.lipperweb.com/ https://sadmin.brightcove.com/ http://admin.brightcove.com/ https://secure.brightcove.com/ https://translate.google.com/
img-src https://www.gstatic.com/ https://translate.google.com/ https://translate.googleapis.com/ https://www.zazachat.com/ http://www.zazachat.com/ https://releases.flowplayer.org/ https://www.timevaluecalculators.com/ https://use.fontawesome.com/ https://hewitt.lipperweb.com/ https://ssl.google-analytics.com/ https://sadmin.brightcove.com/ https://secure.brightcove.com/ http://admin.brightcove.com/ http://api.microsofttranslator.com/ http://www.microsofttranslator.com/ https://ssl.microsofttranslator.com/ data: http://www.myfrs.com/ https://www.myfrs.com/ http://myfrs.com/ https://myfrs.com/ https://www.zazachat.zazasoftware.com/ www.google-analytics.com/ http://www.zazachat.com/ http://zazachat.zazasoftware.com/ https://www.google.com/ http://www.google.com/"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://commitocracy.com:443 https://*.commitocracy.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors https://ic-devportal-scratch.ic-ase-internal.p.azurewebsites.net https://ic-devportal-ppe.ic-ase-internal.p.azurewebsites.net https://ic-devportal-local.azurewebsites.net https://dev.botframework.com http://ic-devportal-local.azurewebsites.net https://*.azure.com https://scratch.botframework.com https://ppe.botframework.com"
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *.stripe.com
style-src 'self' data: 'unsafe-inline' https: https: *.stripe.com
connect-src 'self' data: https: *.stripe.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://avtoforex.ru https://*.googlesyndication.com https://doubleclick.net https://*.doubleclick.net https://gstatic.com https://*.gstatic.com https://*.googleapis.com https://google.com https://*.google.com https://google.ru https://*.google.ru https://google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://google.lv https://*.google.lv https://yandex.ru https://*.yandex.ru https://yandex.ua https://*.yandex.ua https://ya.ru https://*.ya.ru https://*.yandex.net https://yandex.net https://*.twitter.com https://*.facebook.com https://*.facebook.net https://ok.ru https://*.ok.ru https://vk.com https://*.vk.com https://youtube.com https://*.youtube.com https://*.amazonaws.com https://*.highcharts.com https://*.jsdelivr.net https://*.webvisor.org https://*.google.am https://google.am https://*.google.bg https://google.bg https://*.google.co.ma https://google.co.ma https://*.google.com.ua https://google.com.ua https://*.forex4you.com https://*.forexprostools.com https://*.rambler.ru https://*.etoro.com https://*.google.fr https://*.google.kz https://ymetrica.com https://*.google.by https://*.google.lt https://*.google.ro/ https://ymetrica1.com https://www.googletagservices.com
frame-src 'self' https://avtoforex.ru https://*.googlesyndication.com https://*.doubleclick.net https://doubleclick.net https://gstatic.com https://*.gstatic.com https://google.ru https://*.google.ru https://*.google.com https://google.com https://*.google.lv https://google.lv https://yandex.ru https://*.yandex.ru https://yandex.ua https://*.yandex.ua https://ya.ru https://*.ya.ru https://*.tradingview.com https://*.etoro.com https://youtube.com https://*.youtube.com https://*.twitter.com https://facebook.com https://*.facebook.com https://*.facebook.net https://vk.com https://*.vk.com https://*.mql5.com https://*.amazonaws.com https://*.cloudfront.net https://*.google.am https://google.am https://*.google.bg https://google.bg https://*.google.co.ma https://google.co.ma https://*.google.com.ua https://google.com.ua https://*.forexprostools.com https://*.instaforex.com https://1popov.ru https://*.1popov.ru
connect-src 'self' https://avtoforex.ru *.avtoforex.ru https://translate.googleapis.com https://translate.googleapis.ru https://translate.googleapis.lv https://*.google-analytics.com https://*.googletagmanager.com https://yandex.ru https://*.yandex.ru https://*.yandex.ua https://*.youtube.com https://*.facebook.com https://*.aforextrading.com https://*.amazonaws.com https://*.amarkets.org https://*.googlesyndication.com https://googlesyndication.com https://*.doubleclick.net https://doubleclick.net https://*.webvisor.org https://*.google.com https://*.google.am https://google.am https://*.google.bg https://google.bg https://*.google.co.ma https://google.co.ma https://*.google.com.ua https://google.com.ua https://ymetrica.com https://ymetrica1.com https://*.gstatic.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://avtoforex.ru https://gstatic.com https://*.gstatic.com https://*.googleapis.com data:
font-src 'self' https://avtoforex.ru https://*.gstatic.com https://google.com https://*.google.com https://google.ru https://*.google.ru https://google.lv https://*.google.lv https://*.google.am https://google.am https://*.google.bg https://google.bg https://*.google.co.ma https://google.co.ma https://*.google.com.ua https://google.com.ua data:
img-src 'self' https://avtoforex.ru https://*.googlesyndication.com https://*.doubleclick.net https://doubleclick.net https://*.gstatic.com https://gstatic.com https://*.2mdn.net https://google.ru https://*.google.ru https://www.adobe.com https://www.google.ru https://www.google-analytics.com https://*.googletagmanager.com https://ymetrica1.com https://*.yandex.ru https://*.twitter.com https://*.google.com https://*.amazonaws.com https://facebook.com https://*.facebook.com https://*.webvisor.org https://*.google.am https://google.am https://*.google.bg https://google.bg https://*.google.co.ma https://google.co.ma https://*.google.com.ua https://google.com.ua https://fxmail.ru https://*.rambler.ru https://rambler.ru https://*.myfxbook.com https://ymetrica.com data:
object-src 'self' https://avtoforex.ru https://*.googlesyndication.com https://*.doubleclick.net https://doubleclick.net https://gstatic.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.youtube.com https://*.instaforex.com https://*.macromedia.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com http://maps.googleapis.com
font-src 'self' 'unsafe-inline' 'unsafe-eval' http://fonts.gstatic.com
frame-src 'self' 'unsafe-inline' 'unsafe-eval' http://widgets.corelogic.com"
"frame-ancestors macrium.000webhostapp.com macrium2.000webhostapp.com northamber.com apps.macrium.com www.macrium.com macrium.com portal.macrium.com"
script-src 'self' www.google-analytics.com cdnjs.cloudflare.com js.pusher.com cdn.transifex.com js.braintreegateway.com api.sandbox.braintreegateway.com api.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analystics.braintreegateway.com connect.facebook.net 'sha256-1ifelpzrhbxzx+sq07ue15t9ec1wdtinv62r7zeyr8y=' 'sha256-lkmlw3v4cfzgen+xyer7jfvacrgc1rfraddkfcv2yjs=' 'sha256-jk9znlpj8bewlgzzfmjk/ccbrqgc7mt18vpbep2llh4=' 'nonce-rg8jajbpqqnveus1te+3hzxbn6wyoxivmlxie/mp/gg='
script-src 'unsafe-eval' 'nonce-mg1ywnv0cgx3swmyuhpuz1pju3k=' https://enjinx.io https://enjinx.cn https://www.googletagmanager.com
"default-src 'self' https://*.muzikair.com https://*.muzik-online.com https: data: wss://ws8.hotjar.com/api/v1/client/ws
script-src 'self' https://cdn.amplitude.com/libs/ 'unsafe-inline' 'nonce-m2irsdeh1j8uasqend/l+zwpg3uxgxppb87n8zauz8n7mvg5'
"default-src  'self' https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.swiftype.com https://*.twitter.com https://*.twimg.com
script-src  'self' https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.swiftype.com https://*.twitter.com https://*.twimg.com 'unsafe-inline'
style-src  'self' https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.swiftype.com https://*.twitter.com https://*.twimg.com 'unsafe-inline'
img-src  'self' https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.swiftype.com https://*.twitter.com https://*.twimg.com data:
frame-src  'self' https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.swiftype.com https://*.twitter.com https://*.twimg.com https://*.youtube.com https://*.serverpilot-phpversions.info
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://munchkin.marketo.net https://www.youtube.com https://s.ytimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://code.jquery.com https://cdn.datatables.net https://connect.facebook.net https://ajax.googleapis.com https://www.dropbox.com https://apis.google.com https://unpkg.com https://maps.googleapis.com
connect-src 'self' https://815-tmy-864.mktoresp.com https://www.facebook.com https://www.youtube.com
frame-src 'self' https://appleone.com https://www.sertifi.com/allin1/ https://sandbox.sertifi.net/allin1/ https://wotcintgsvc.maxinc.com https://s7.addthis.com https://www.youtube.com https://ain1.sharepoint.com
script-src *.davlenienorm.com davlenienorm.com mc.yandex.ru *.google-analytics.com yandex.ru *.yandex.net yandex.st *.yandex.st yastatic.net https://yastatic.net *.yandex.ru yastatic.net *.yastatic.net https://*.yandex.ru https://vk.com vk.com *.doubleclick.net *.googlesyndication.com *.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com yadro.ru https://yadro.ru *.yadro.ru https://*.yadro.ru https://adservice.google.ru https://adservice.google.com https://www.googletagmanager.com https://pushprofit.ru 'self' 'unsafe-inline' 'unsafe-eval'
"default-src 'self' village-luxe-api-production.herokuapp.com village-luxe-api-staging.herokuapp.com *.fullstory.com *.braintreegateway.com www.google-analytics.com *.amazonaws.com *.filestackapi.com *.facebook.com *.mixpanel.com
img-src 'self' data: blob: cdn.filestackcontent.com *.amazonaws.com www.facebook.com www.google-analytics.com *.filestackapi.com dsa8mxkizqa15.cloudfront.net villageluxe.com maps.gstatic.com
script-src 'self' 'unsafe-inline' fullstory.com connect.facebook.net www.google-analytics.com *.mxpnl.com maps.googleapis.com
style-src 'self' 'unsafe-inline' static.filestackapi.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://s7.addthis.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://m.addthisedge.com https://m.addthis.com https://api-public.addthis.com https://pagead2.googlesyndication.com https://adservice.google.co.uk https://adservice.google.com https://www.google.com https://www.gstatic.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' https://html5shim.googlecode.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com
img-src 'self' data: https://www.fotosizer.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdnjs.cloudflare.com
frame-src 'self' https://www.youtube.com https://www.facebook.com https://s7.addthis.com https://googleads.g.doubleclick.net https://www.google.com
connect-src 'self' https://dc.services.visualstudio.com https://m.addthis.com https://csi.gstatic.com"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.ua https://*.yandex.ua static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.ua *.yandex.ua
font-src 'self' https://yastatic.net zen.yandex.ua static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://ok.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.ua https://passport.yandex.ua wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.ua *.yandex.ua
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.ua https://*.yandex.ua awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.ua *.yandex.ua
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.ua https://www.yandex.ua https://pass.yandex.ua https://mc.yandex.ua zen.yandex.ua an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.ua www.yandex.ua suggest.yandex.ua
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.ua static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
script-src 'self' 'nonce-zphysjsnc6jtb2rp593p4x4ae51uzxy0fym2rbdejrq=' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.twitter.com *.facebook.net *.youtube.com s.ytimg.com t.co static.ads-twitter.com analytics.twitter.com www.googleadservices.com bat.bing.com connect.facebook.net www.facebook.com sp.analytics.yahoo.com s.yimg.com *.doubleclick.net www.google.ru alb.reddit.com *.hotjar.com *.opendns.com sjs.bizographics.com *.ads.linkedin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.smartarena.pt services.idpalmeiras.com.br paypalobjects.com *.paypalobjects.com www.gstatic.com http://*.neoassist.com/socket.io/socket.io.js googleads.g.doubleclick.net http://*.futebolcard.com/lib/default/js/msdropdown/jquery.dd.min.js https://pagead2.googlesyndication.com/pub-config/r20160913/ca-pub-8650409797118377.js http://*.futebolcard.com/lib/default/js/msdropdown/jquery.dd.min.js connect.facebook.net *.facebook.com *.visa.com http://pagead2.googlesyndication.com/pagead/js/r20170626/r20170110/show_ads_impl.js http://pagead2.googlesyndication.com/pagead/js/r20170629/r20170110/show_ads_impl.js https://www.google-analytics.com/analytics.js *.atendimen.to http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://www.google.com/recaptcha/api.js https://www.paypalobjects.com/api/checkout.js *.googlesyndication.com https://ajax.cloudflare.com/ adservice.google.com adservice.google.com.br
img-src 'self' https://scontent.xx.fbcdn.net http://cdn-01.neoassist.com/ www.staticv.me futebolcard.neoassist.com *.futebolcard.com s3-sa-east-1.amazonaws.com cdn.atendimen.to *.doubleclick.net rt-c-sp-01-02.neoassist.com shield.sitelock.com secure.checkout.visa.com www.google-analytics.com www.facebook.com http://neoassist.com/clients/neoassist/images/ https://neoassist.com/clients/neoassist/images/ https://*.neoassist.com/clients/neoassist/images/darkbg.png data:
connect-src 'self' https://pagead2.googlesyndication.com wss://*.neoassist.com/socket.io/ futebolcard.neoassist.com paypal.com *.paypal.com https://googleads.g.doubleclick.net/ *.facebook.com
frame-src 'self' avantipalmeiras.neoassist.com futebolcard.neoassist.com https://www.google.com/recaptcha/api2/ secure.checkout.visa.com thm.visa.com https://www.youtube.com/embed/t4mozqp0lqq https://www.youtube.com/embed/pddultdmtkq http://shortem.com/w/adpyt http://shortem.com/w/adpyt/ googleads.g.doubleclick.net paypal.com *.paypal.com static.ak.facebook.com s-static.ak.facebook.com www.facebook.com staticxx.facebook.com
"script-src 'nonce-9ik30rchac' 'unsafe-inline' 'unsafe-eval' https: http:
"default-src * 'self' data: 'unsafe-inline'
"script-src http://52.90.59.206:5000 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://www.googletagmanager.com https://ajax.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js https://unpkg.com/tooltip.js@1.2.0/dist/umd/tooltip.min.js https://unpkg.com/tooltip.js@1.2.0/dist/umd/tooltip.min.js.map"
img-src 'self' tile.openstreetmap.org data: https:
frame-src einskanal.net dietchan.org loadaverage.org 'self' https:
"default-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* https://rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
style-src 'self' 'unsafe-inline' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
img-src 'self' https://*.rakbankonline.ae:*  https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:* data:
font-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
connect-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
media-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
object-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
child-src 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
frame-ancestors 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
form-action 'self' https://*.rakbankonline.ae:* https://*.rakbank.ae:* http://download.macromedia.com:*  http://www.adobe.com:* https://pgt.cbuaepay.ae https://cdn5.vizury.com https://cdn12.vizury.com https://cdn18.vizury.com https://cdn25.vizury.com http:*
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com"
"default-src 'self' *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.objectivity.co.uk *.youtube.com wss://ws2.hotjar.com/ https://www.objectivity.co.uk
font-src 'self' 'unsafe-inline' *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.objectivity.co.uk data: https://www.objectivity.co.uk
img-src 'self' *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.objectivity.co.uk data: https://www.objectivity.co.uk
script-src 'self' 'unsafe-inline' *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.objectivity.co.uk https://www.objectivity.co.uk
style-src 'self' 'unsafe-inline' *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.hotjar.com *.objectivity.co.uk https://www.objectivity.co.uk
script-src 'strict-dynamic' 'nonce-mmiyzwrhmtctotu4oc00ogm5lweyntatyzkyymjindrmotnh' 'unsafe-inline' https: http:
script-src https: data: *.hwcdn.net 'unsafe-inline' 'unsafe-eval'
style-src https: data: *.hwcdn.net 'unsafe-inline'
img-src https: data: *.hwcdn.net s3.amazonaws.com
script-src 'self' 'sha256-8h7jye9+4is/rqxtowavfsk2b2h41x9aru30bhs2g94=' 'sha256-kzkk1xyf4wp15n4eypkzbon7pkk/o5b/94n/xshoy14=' 'sha256-nmu8ybgqv5rcchhd7morw/9smtktv5jljk4m6ounn/o=' 'sha256-kgstqdpifxaxgutfkzzaz35lncyekq/2jdsko4otj7a=' ssl.google-analytics.com
script-src 'self' cdn.polyfill.io *.google-analytics.com *.googleapis.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.amazonaws.com *.fastly.net *.ueno.co *.ueno.io *.prismic.io 'sha256-0bwkgjxcjy4cvhubjkluedp1lojnc5zldkuqftuktum=' 'sha256-abeqrgfkcazgj/yzf9pxdarvjcdoyrfprqvdg/0hn/y=' 'sha256-f14tbhjv5kogwkg9ojkkjyzg9g36ybusbvl3xkjettc=' 'sha256-+/nklwv7sjjtyusgnj0nh7cwawutp98j4udfgdypmru=' 'sha256-/kwcqajyex68fuxbdls8ezb6lj3sgonsnoqzljxxspe=' 'sha256-iuiope/pnvluml8jthgxbvqz/ol5a5u7cqyot2cuzf0=' 'sha256-pbaxdbt0w139l7bvwdnvg8rq9cz2njldqwqadhnapzs='
script-src 'self' https://*.7est.ro https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://cdn.pushalert.co https://www.googletagservices.com https://*.googletagmanager.com  https://*.facebook.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://www.gstatic.com https://code.jquery.com https://*.googleapis.com 'unsafe-inline'
frame-src 'self' https://*.google.com https://www.youtube.com https://*.facebook.com
img-src 'self' filesystem: blob: data: https://*
connect-src 'self'  https://*.yoast.com/ https://yoast.com/feed/widget/ https://www.google-analytics.com/
"style-src 'self' 'nonce-a35c1361-101e-4e50-ba39-304abdde7f6a' https://fonts.googleapis.com/icon https://fonts.googleapis.com/css
script-src https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js 'nonce-9daa3dea-cdea-4b70-8b17-8ec4e8b171ba' https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.6-rc.0/js/select2.min.js https://cdn.jsdelivr.net/npm/marked/marked.min.js https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js https://www.googletagmanager.com/gtag/js https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.google-analytics.com/analytics.js
"script-src 'self' http: 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.google-analytics.com/"
script-src 'self' 'unsafe-inline' https://a.mdeo.co https://www.googletagmanager.com https://www.google-analytics.com https://*.krxd.net
frame-ancestors http://aarth.com http://*.aarth.com http://aarth.net http://*.aarth.net http://cryptopricetrack.com http://*.cryptopricetrack.com
child-src 'self' https://www.youtube.com https://youtube.com https://www.youtu.be https://youtu.be https://player.vimeo.com https://vimeo.com https://*.facebook.com http://*.facebook.com *.facebook.com https://*.akamaihd.net http://*.akamaihd.net *.akamaihd.net https://www.google.com/maps/embed https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://*.google.com
font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://*.myfonts.net/count/2f0f62 http://*.myfonts.net/count/2f0f62 *.myfonts.net/count/2f0f62 https://cdn.saturnme.com https://emaarmallsazuretest.azurewebsites.net https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://*.google.com
frame-src 'self' https://www.youtube.com https://youtube.com https://www.youtu.be https://youtu.be https://player.vimeo.com https://vimeo.com https://*.facebook.com http://*.facebook.com *.facebook.com https://*.akamaihd.net http://*.akamaihd.net *.akamaihd.net https://www.google.com/maps/embed https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://*.google.com https://stags.bluekai.com/
img-src 'self' https://*.akamaihd.net http://*.akamaihd.net *.akamaihd.net https://*.facebook.com http://*.facebook.com *.facebook.com https://*.emaarmalls.com http://*.emaarmalls.com *.emaarmalls.com https://*.thedubaimall.com http://*.thedubaimall.com *.thedubaimall.com https://*.cdninstagram.com http://*.cdninstagram.com *.cdninstagram.com https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://*.doublecllick.com http://*.doublecllick.com *.doublecllick.com http://res.cloudinary.com/ https://res.cloudinary.com/ https://cdn.saturnme.com https://emaarmallsazuretest.azurewebsites.net https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://stats.g.doubleclick.net https://*.google.com http://mena-gmtdmp.mookie1.com https://mena-gmtdmp.mookie1.com https://www.googletagmanager.com https://*.google.ae https://ib.adnxs.com/ https://indect.golemdigital.com data:
script-src 'self' http://www.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/3.2.5/jquery.inputmask.bundle.min.js https://maxcdn.bootstrapcdn.com https://*.facebook.net http://*.facebook.net *.facebook.net https://*.facebook.com http://*.facebook.com *.facebook.com https://*.akamaihd.net http://*.akamaihd.net *.akamaihd.net https://facebook.net https://facebook.com https://akamaihd.net https://*.cloudfront.net http://*.cloudfront.net *.cloudfront.net https://cdn.getlocalmeasure.com/public/688eecba15573692b9329cdc456bcefd4d7486548bf86b32944f42f70af5/data.js https://www.googletagmanager.com/gtm.js https://cdn.saturnme.com https://emaarmallsazuretest.azurewebsites.net https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://*.google.com https://*.google.ae https://i.ctnsnet.com/ https://tags.bluekai.com/ https://tags.bkrtx.com/ 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://maxcdn.bootstrapcdn.com https://code.jquery.com https://fonts.googleapis.com https://*.myfonts.net http://*.myfonts.net *.myfonts.net https://cdn.saturnme.com https://emaarmallsazuretest.azurewebsites.net https://staticassets.azureedge.net https://dynamicassets.azureedge.net https://*.google.com https://*.google.ae 'unsafe-inline'
"default-src 'self' irfarabi.com *.dericoin.com wss://*.dericoin.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com
child-src 'self' www.youtube.com player.vimeo.com staticxx.facebook.com www.facebook.com www.google.com www.google.com.au platform.twitter.com syndication.twitter.com accounts.google.com https://drive.google.com http://broomfield.maps.arcgis.com https://docs.google.com https://app.cityzen.io https://publicinput.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://uploads-ssl.webflow.com https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js https://www.googleadservices.com https://static.ads-twitter.com/uwt.js https://fullstory.com/s/fs.js https://connect.facebook.net https://d1tdp7z6w94jbb.cloudfront.net/js/jquery-3.3.1.min.js https://code.jquery.com/jquery-3.3.1.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery.sticky/1.0.4/jquery.sticky.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.0/jquery.validate.min.js https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js https://analytics.twitter.com/i/adsct https://widget.intercom.io https://js.intercomcdn.com https://player.vimeo.com/api/player.js https://cdnjs.cloudflare.com/ajax/libs/vue/ https://static.hotjar.com/ https://script.hotjar.com/
font-src 'self' data: https://uploads-ssl.webflow.com https://js.intercomcdn.com
img-src 'self' data: https://uploads-ssl.webflow.com https://www.google-analytics.com/collect https://www.google-analytics.com/r/collect https://stats.g.doubleclick.net/r/collect https://www.google.com/ads/ga-audiences https://www.google.co.za/ads/ga-audiences https://www.facebook.com/tr https://www.facebook.com/tr/ https://t.co/i/adsct https://js.intercomcdn.com https://static.intercomassets.com https://googleads.g.doubleclick.net https://www.googletagmanager.com
connect-src 'self' https://rs.fullstory.com https://*.intercom.io wss://*.intercom.io https://webflow.com https://www.google-analytics.com https://api.indiefin.com/ https://api-production.indief.in/ https://stats.g.doubleclick.net/r/collect
child-src 'self' https://*.fls.doubleclick.net https://cdn.embedly.com https://player.vimeo.com https://vars.hotjar.com
frame-src 'self' https://*.fls.doubleclick.net https://cdn.embedly.com https://player.vimeo.com https://vars.hotjar.com
"connect-src 'self' apsona.com checkout.stripe.com *.sitesearch360.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'  cdn.sitesearch360.com  https://service.apsona.com www.googletagmanager.com https://checkout.stripe.com https://cse.google.com https://ssl.google-analytics.com https://ajax.googleapis.com https://www.google.com https://www.google-analytics.com https://www.googleapis.com
style-src 'self' 'unsafe-inline' cdn.sitesearch360.com  https://service.apsona.com https://checkout.stripe.com https://www.google.com https://fonts.googleapis.com
frame-src 'self' checkout.stripe.com https://cse.google.com www.youtube.com cdn.sitesearch360.com"
style-src 'self' 'unsafe-inline' https://prodoctorov.ru https://*.googleapis.com *.googleapis.com https://*.gstatic.com *.gstatic.com yastatic.net yandex.st https://tagmanager.google.com
img-src 'self' data: 'unsafe-inline' https://prodoctorov.ru https://protabletky.ru https://medotvet.me https://*.google-analytics.com *.google-analytics.com yastatic.net https://yastatic.net *.yandex.ru https://*.yandex.ru https://yandex.ru *.yandex.net https://*.yandex.net yandex.st *.google.com  https://*.google.com  *.googleapis.com https://*.googleapis.com *.googlesyndication.com https://*.gstatic.com *.gstatic.com vk.com https://*.vk.com *.youtube.com *.twitter.com https://*.twitter.com *.googlezip.net https://*.ggpht.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.facebook.com https://*.google.ru https://*.mail.ru
connect-src 'self' wss://prodoctorov.ru wss://medotvet.me *.yandex.ru *.google-analytics.com https://*.yandex.ru https://yandex.ru ajax.googleapis.com yandex.st https://yandex.st yastatic.net https://fcm.googleapis.com https://sentry.medrating.org https://stats.g.doubleclick.net https://*.facebook.com
media-src 'self' *.yandex.net yandex.st yastatic.net *.yandex.ru
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://prodoctorov.ru *.google.com https://www.google.com https://*.google-analytics.com *.google-analytics.com *.googlesyndication.com https://*.googlesyndication.com *.googleapis.com https://*.googleapis.com www.google.com https://*.gstatic.com https://*.yandex.net https://yandex.ru https://*.yandex.ru *.yandex.ru *.gstatic.com https://clck.yandex.ru *.twitter.com https://*.twitter.com yandex.st https://yandex.st https://connect.ok.ru vk.com https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://googletagmanager.com https://yastatic.net yastatic.net https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net
frame-src 'self' oauth.telegram.org www.facebook.com www.google.com
img-src 'self' https: data: blob: https://plustodon.net
media-src 'self' https: data: https://plustodon.net
connect-src 'self' blob: https://plustodon.net wss://plustodon.net
script-src 'self' 'nonce-3be9441e88ca7af03d231ef4e337c6d5' https://maps.googleapis.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://translate.google.cn https://translate.google.com https://optimize.google.com d2qmp7jjpd79k7.cloudfront.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com dev.visualwebsiteoptimizer.com www.google.com www.eventim.nl *.stage-entertainment.nl accounts.google.com  az416426.vo.msecnd.net 9292.nl secure-ds.serving-sys.com www.gstatic.com https://bs.serving-sys.com/ s7.addthis.com connect.facebook.net https://service.giosg.com/ https://api.nanigans.com/ https://m.addthisedge.com/ bat.bing.com m.addthisedge.com maps.googleapis.com www.googletagmanager.com www.resengo.com https://m.addthis.com/ wwc.resengo.com edge.addthis.com *.colours.nl
style-src 'self' 'unsafe-inline' https://optimize.google.com tagmanager.google.com fonts.googleapis.com https://fast.fonts.net/ fast.fonts.net service.giosg.com www.resengo.com *.stage-entertainment.nl *.colours.nl
img-src 'self' data:  i9.ytimg.com d.lemonpi.io ssl.gstatic.com trk.tidaltv.com farm-nl.plista.com abs.twimg.com https://scontent.cdninstagram.com/  http://pbs.twimg.com/ dev.visualwebsiteoptimizer.com https://odr.mookie1.com/ https://maps.googleapis.com/ *.colours.nl www.gravatar.com https://secure.adnxs.com/ https://googleads.g.doubleclick.net/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.google.com/ https://www.facebook.com giosg-chat-public-eu.s3.amazonaws.com googleads.g.doubleclick.net m.addthis.com pbs.twimg.com secure-b.vimeocdn.com www.eventim.nl www.facebook.com  www.googleadservices.com www.googletagmanager.com *.stage-entertainment.nl cx.atdmt.com https://www.google.by/ https://maps.gstatic.com/ bat.bing.com i.ytimg.com maps.gstatic.com www.google.co.id www.google.co.nz www.google.com.do www.google.com.tr www.google.dk www.google.es www.google.se www.google.ru www.google.nl www.google.at www.google.cz www.google.ca www.google.ch www.google.com.au www.google.com.br www.google.com.cy www.google.com.eg www.google.com.pa www.google.com.ua www.google.fi www.google.fr www.google.is www.google.it www.google.lk www.google.pl www.google.ro www.google.co.jp www.google.com.ec www.google.com.mx www.google.com.om www.google.com.pe www.google.gm www.google.ie www.google.je  www.google.ae  www.google.co.th  www.google.co.ug www.google.com.ar www.google.com.hk www.google.com.my www.google.com.ph www.google.com.qa www.google.com.tw www.google.com.vn www.google.gg www.google.jo www.google.lt www.google.lu www.google.no www.google.rs www.google.sr  www.metronieuws.nl  www.resengo.com www.gstatic.com
frame-src 'self' https://staticxx.facebook.com https://optimize.google.com *.stage-entertainment.nl pass.eventim.nl www.eventim.nl https://www.youtube.com/ https://maps.google.nl/ https://maps.google.com/ https://www.vimeo.com/ https://player.vimeo.com https://open.spotify.com/ https://embed.spotify.com/ https://www.eventim.nl/ http://web.inxmail.com/ https://www.google.com/ https://restaurant.couverts.nl/ edge.addthis.com maps.google.nl s7.addthis.com service.giosg.com m.youtube.com www.facebook.com www.googletagmanager.com
font-src 'self' data: https://fast.fonts.net/ fast.fonts.net *.stage-entertainment.nl http://*.stage-entertainment.nl/ https://*.stage-entertainment.nl/ https://fonts.gstatic.com/
connect-src 'self' dc.services.visualstudio.com https://secure-ds.serving-sys.com https://service.giosg.com/ m.addthis.com s7.addthis.com service.giosg.com stats.g.doubleclick.net www.google-analytics.com fonts.gstatic.com www.resengo.com api.resengo.com cloudapi.resengo.com *.stage-entertainment.nl
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://static.technitrader.com https://static.technitrader.com http://www.google-analytics.com https://maps.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://ajax.googleapis.com
img-src 'self' data: http://static.technitrader.com https://static.technitrader.com https://csi.gstatic.com https://secure.gravatar.com https://seal.godaddy.com/ http://img.mattheufarmer.com
style-src 'self' 'unsafe-inline' http://static.technitrader.com https://static.technitrader.com https://fonts.googleapis.com/
font-src 'self' data: https://static.technitrader.com https://fonts.gstatic.com
frame-src 'self' https://technitraderonlinecampus.com https://static.technitrader.com http://technitraderevents.com https://form.jotform.us https://*.vimeo.com https://*.wistia.net https://nicedriving.org https://*.gotowebinar.com https://www.draw.io https://tc2000.com https://*.tc2000.com https://*.worden.com https://worden.com
object-src 'self' https://static.technitrader.com http://vimeo.com https://*.vimeocdn.com https://*.vimeo.com https://www.draw.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com www.google-analytics.com maps.google.com www.google.com www.gstatic.com maps.googleapis.com
img-src 'self' data:  maps.googleapis.com stats.g.doubleclick.net csi.gstatic.com maps.gstatic.com www.google-analytics.com maps.google.com
font-src 'self' 'unsafe-inline' fonts.gstatic.com data:
script-src 'self' 'unsafe-inline' https://rum-static.pingdom.net https://ajax.googleapis.com https://ajax.aspnetcdn.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.ytimg.com https://connect.facebook.net https://graph.facebook.com https://*.twitter.com https://cdn.syndication.twimg.com https://api.pinterest.com https://api.instagram.com https://platform.instagram.com https://static.hotjar.com https://script.hotjar.com
style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com
img-src 'self' data: https://www.gravatar.com https://www.google-analytics.com https://rum-collector.pingdom.net https://*.facebook.com https://*.twitter.com https://*.twimg.com https://t.co https://www.instagram.com https://*.cdninstagram.com
font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com
frame-src 'self' https://*.fls.doubleclick.net https://www.youtube.com https://player.vimeo.com https://*.twitter.com https://*.facebook.com https://open.spotify.com https://vars.hotjar.com https://www.youtube-nocookie.com
child-src 'self' https://*.fls.doubleclick.net https://www.youtube.com https://player.vimeo.com https://*.twitter.com https://*.facebook.com
"frame-ancestors http://www.vistaprint.ca https://www.vistaprint.ca http://vistaprint.ca https://vistaprint.ca
style-src 'self' https://www.aparat.com https://fonts.googleapis.com https://api.cedarmaps.com 'unsafe-inline'
script-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com https://api.cedarmaps.com 'unsafe-inline' 'unsafe-eval'
font-src 'self' data: https://fonts.gstatic.com https://www.slideshare.net/
img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://static.cdn.asset.aparat.com https://www.gravatar.com https://api.cedarmaps.com
"script-src 'self' 'sha256-bx+xoeh9fnjahl+8hlll0mwane4wr2kk9lybodyaw6c=' https://cmty.io https://cmty.app https://www.googletagmanager.com https://www.google-analytics.com https://codefund.io"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:
img-src * 'self' 'unsafe-inline' 'unsafe-eval' https: data:
style-src * 'self' 'unsafe-inline' 'unsafe-eval' https:
connect-src 'self' ws://* wss://* https:"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://nyulocal.com:443 https://*.nyulocal.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"connect-src 'self' https://*.twitter.com https://*.yotpo.com https://*.gomoxie.solutions https://rules.atgsvcs.com https://track.magnify360.com https://c1.rfihub.net https://insight.adsrvr.org https://*.virtualhold.com https://api.edmunds.com"
img-src 'self' data:                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.youtube.com *.zscalertwo.net                *.mailchimp.com                *.googletagmanager.com
style-src 'self' 'unsafe-inline'                *.googleapis.com                *.mailchimp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                              *.hirebridge.com *.zscalertwo.net                *.mailchimp.com *.cloudfront.net *.list-manage.com
frame-src 'self'                *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                 *.hirebridge.com *.zscalertwo.net
connect-src 'self' *.windows.net *.google.com *.google-analytics.com"
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://m.addthisedge.com https://s7.addthis.com https://m.addthis.com https://graph.facebook.com https://api-public.addthis.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com
img-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: http://surun.co/vishal-bharat/images/thanks-pattern.jpg https://cdn.jsdelivr.net www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com
worker-src 'self' www.google.com https://maps.google.com https://www.youtube.com
"frame-ancestors http://www.vistaprint.fi https://www.vistaprint.fi http://vistaprint.fi https://vistaprint.fi
connect-src * 'self' *.firebaseapp.com wss://*.firebaseio.com *"
"default-src 'self' http://*.diamax.com http://*.addthis.com https://*.addthis.com https://*.adobe.com https://livestream.com  http://*.twitter.com https://*.twitter.com http://*.linkedin.com http://*.google.com http://*.youtube.com https://*.ytimg.com http://*.ytimg.com https://*.googleapis.com http://*.typekit.net https://www.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com https://m.addthis.com https://*.twimg.com https://*.doubleclick.net https://*.gstatic.com https://*.hotjar.com http://*.hotjar.com wss://*.hotjar.com http://*.facebook.com https://*.facebook.com https://*.jotform.com https://cdn.jotfor.ms http://widgets.jotform.io http://events.jotform.com https://submit.jotformpro.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' http://*.diamax.com https://*.nae.edu http://*.nae.edu https://www.google-analytics.com https://*.twimg.com https://*.ytimg.com http://*.ytimg.com https://*.twitter.com http://*.twitter.com https://*.licdn.com http://*.typekit.net http://*.google-analytics.com https://*.google-analytics.com https://*.hotjar.com https://*.adobe.com https://*.gstatic.com https://*.googleapis.com https://*.google.com http://*.onlineethics.org https://*.jotform.com https://cdn.jotfor.ms http://events.jotform.com data: blob:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data:  https://*.consensu.org/  https://*.google.com/ https://google.com/  https://www.youtube.com/ https://www.gstatic.com/ https://*.facebook.net/ https://*.gstatic.com/ https://*.googleapis.com/ https://portal.htbridge.com/ https://www.google-analytics.com/ https://certify-js.alexametrics.com/ https://certify.alexametrics.com/ https://stats.g.doubleclick.net/ https://snap.licdn.com/ https://*.facebook.com/ https://*.linkedin.com/ https://secure.adnxs.com/ https://*.sharethis.com/ https://*.addthis.com/ https://*.addthisedge.com/
frame-src 'self' https://localhost:14972 https://localhost:41472 https://localhost:57214 https://localhost:61427 *.facebook.com *.twitter.com *.infogram.com *.infogr.am *.youtube.com
default-src 'self' https://channelconnect.nl https://googleads.g.doubleclick.net https:
script-src 'self' 'unsafe-eval' 'unsafe-inline' https: data: blob:
connect-src 'self' https://*.tiles.mapbox.com https://api.mapbox.com wss://*.hotjar.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https:
script-src 'self' *.bootstrapcdn.com *.matomo.cloud 'unsafe-eval' 'unsafe-inline'
img-src 'self' *.matomo.cloud *.gstatic.com *.gravatar.com *.googleapis.com
style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com
font-src 'self' fonts.gstatic.com *.bootstrapcdn.com *.googleapis.com s.w.org data:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pssl.com https://*.affirm.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.googletagmanager.com https://*.googlecommerce.com https://*.googleadservices.com https://*.xg4ken.com *.addthis.com *.addthisedge.com *.google-analytics.com *.facebook.net *.turnto.com *.issuu.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://maps.googleapis.com https://translate.googleapis.com https://ssl.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/analytics.js https://connect.facebook.net/
img-src 'self' https://maps.gstatic.com data: https://maps.googleapis.com https://*.google.com  https://ssl.google-analytics.com https://www.google-analytics.com https://www.gstatic.com/ https://translate.googleapis.com https://www.facebook.com/tr/
style-src 'self' 'unsafe-inline' https://maps.googleapis.com https://*.google.com https://fonts.googleapis.com https://translate.googleapis.com https://netdna.bootstrapcdn.com
font-src 'self' https://fonts.gstatic.com https://themes.googleusercontent.com https://netdna.bootstrapcdn.com
frame-src 'self' https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.google.com/maps/
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://anantja.in:443 https://*.anantja.in:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
img-src 'self' data: https://www.google.com https://www.google.pl https://googleads.g.doubleclick.net https://maps.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://www.facebook.com https://ssl.gstatic.com https://csi.gstatic.com https://maps.googleapis.com
frame-src 'self' https://www.google.com https://ent.activeforms.com https://8282531.fls.doubleclick.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net https://googleads.g.doubleclick.net https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com http://www.googleadservices.com https://maps.googleapis.com https://www.ingbank.pl data:
connect-src 'self' https://rs.fullstory.com https://adsearch.adkontekst.pl https://www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://tracking1.force24.co.uk https://a.quora.com/ https://www.googletagmanager.com https://code.jquery.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://secure.leadforensics.com
img-src 'self' data: https://www.googletagmanager.com https://maps.gstatic.com https://maps.googleapis.com https://tracking1.force24.co.uk https://q.quora.com https://stats.g.doubleclick.net https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://res.cloudinary.com https://googleads.g.doubleclick.net
"default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:
script-src 'self' https: data: 'unsafe-inline' *.typekit.net www.google-analytics.com www.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.twitter.com *.twimg.com *.instagram.com maps.gstatic.com maps.googleapis.com *.youtube.com *.vimeo.com static.ctctcdn.com 'nonce-gxcaq+uzeyxp6boyybfyww=='
"frame-ancestors http://www.vistaprint.ie https://www.vistaprint.ie http://vistaprint.ie https://vistaprint.ie
img-src 'self' https://upload.wikimedia.org/ http://accounts-dev.wmflabs.org/ https://accounts-dev.wmflabs.org
"connect-src 'self' api.sarus.io *.olark.com live.sarus.io ws://live.sarus.io
script-src 'self' www.google-analytics.com www.googletagmanager.com *.olark.com *.visualwebsiteoptimizer.com https://cdn.socket.io https://cdn-orig.socket.io https://cdnjs.cloudflare.com 'unsafe-eval' 'unsafe-inline'
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.olark.com
"default-src 'self' yagdz.com *.yandex.ru *.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' nonce-y50thxn3st *.gstatic.com *.google.com *.google.ru  *.yandex.ru *.yandexadexchange.net yandexadexchange.net st.yandexadexchange.net yastatic.net/es5-shims/0.0.2/es5-shims.min.js yastatic.net/share2/share.js yagdz.com yandex.st pagead2.googlesyndication.com *.yandex.ru googleads.g.doubleclick.net  yastatic.net *.yandex.net *.yandexadexchange.net yandexadexchange.net  st.yandexadexchange.net userapi.com vk.com vk.com graph.facebook.com connect.facebook.net apis.google.com cdn.api.twitter.com *.yandex.ru https://www.googletagservices.com https://gc.kis.v2.scr.kaspersky-labs.com wss://gc.kis.v2.scr.kaspersky-labs.com https://www.googletagmanager.com https://www.google-analytics.com
img-src * data: https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://www.google.com/recaptcha
style-src 'self' 'unsafe-inline' *.gstatic.com *.google.com *.google.ru *.yandexadexchange.net *.yandex.ru googleads.g.doubleclick.net fonts.googleapis.com
frame-src *.yandexadexchange.net yandexadexchange.net st.yandexadexchange.net  *.yandex.ru *.google.com *.google.ru *.gstatic.com yagdz.com googleads.g.doubleclick.net googleads.g.doubleclick.net yastatic.net vk.com vk.com *.facebook.com www.youtube.com
font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com/
object-src *.yandex.ru  googleads.g.doubleclick.net  pagead2.googlesyndication.com yagdz.com"
script-src 'self' 'unsafe-inline' https://www.foxprivacy.com/ https://www.googletagmanager.com www.google-analytics.com https://*.krxd.net https://foxnet.demdex.net https://connect.facebook.net https://cdn.segment.com https://tagmanager.google.com
script-src 'nonce-efgan0l9ns4g78uyvqzb76y0wlfjlbah' archmule.com next.archmule.com archmule.test *.bootstrapcdn.com cdnjs.cloudflare.com connect.facebook.net *.google-analytics.com fonts.googleapis.com *.googletagmanager.com djtflbt20bdde.cloudfront.net code.jquery.com stats.pusher.com platform.twitter.com *.twimg.com www.youtube.com s.ytimg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com www.googletagmanager.com apis.google.com connect.facebook.net www.linkedin.com ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com *.googletagmanager.com tagmanager.google.com www.googleadservices.com js.bizographics.com sjs.bizographics.com static.ads-twitter.com stats.g.doubleclick.net googleads.g.doubleclick.net analytics.twitter.com px.ads.linkedin.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net tagmanager.google.com platform.twitter.com/css/ *.twimg.com
img-src 'self' maps.gstatic.com maps.googleapis.com *.google-analytics.com *.gstatic.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com t.co stats.g.doubleclick.net www.google.co.uk www.google-analytics.com www.google.com
connect-src 'self' accounts.google.com stats.g.doubleclick.net https://*.dec.sitefinity.com *.mktoresp.com
child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.thespruceeats.com *.qa.aws.thespruceeats.com atlas.thespruceeats.com atlas.local.thespruceeats.com"
style-src 'self' 'unsafe-inline' https://cloud.typography.com https://www.appleone.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://cdn.datatables.net https://hello.myfonts.net https://pro.fontawesome.com https://cdn.jsdelivr.net https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://munchkin.marketo.net https://www.youtube.com https://s.ytimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://code.jquery.com https://cdn.datatables.net https://connect.facebook.net https://ajax.googleapis.com https://www.dropbox.com https://apis.google.com https://maps.googleapis.com
img-src 'self' https://stats.g.doubleclick.net https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.facebook.com https://cdn.datatables.net https://track.ziprecruiter.com data:
font-src 'self' https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://pro.fontawesome.com data:
frame-src 'self' https://allswell.com https://www.sertifi.com/allin1/ https://sandbox.sertifi.net/allin1/ https://wotcintgsvc.maxinc.com https://s7.addthis.com https://www.youtube.com
script-src 'self' *.mychords.net an.yandex.ru yandex.st yastatic.net mc.yandex.ru clck.yandex.ru mc.yandex.kz mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.ua srv.clickfuse.com 'unsafe-eval' 'unsafe-inline' *.cackle.me  adservice.google.com.ua adservice.google.ru *.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.doubleclick.net *.doubleclick.com maps.gstatic.com adwords-displayads.googleusercontent.com *.google.com cackle.me  http://ulogin.ru https://ulogin.ru
style-src 'self' *.mychords.net yandex.st yastatic.net *.googleapis.com *.cackle.me maxcdn.bootstrapcdn.com 'unsafe-inline'
media-src 'self' *.yandex.net yandex.st yastatic.net googleads.g.doubleclick.net
connect-src 'self' *.mychords.net *.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.doubleclick.net *.doubleclick.com maps.gstatic.com adwords-displayads.googleusercontent.com *.google.com csi.gstatic.com  mc.yandex.ru an.yandex.ru yandex.st yastatic.net mc.yandex.kz mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.ua wss://*.cackle.me *.cackle.me *.youtube.com
font-src 'self' *.mychords.net *.gstatic.com *.bootstrapcdn.com fonts.googleapis.com  *.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.doubleclick.net *.doubleclick.com maps.gstatic.com adwords-displayads.googleusercontent.com *.google.com  data:
object-src 'self' *.mychords.net *.youtube.com *.ytimg.com *.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.doubleclick.net *.doubleclick.com
frame-src 'self' mychords.net *.mychords.net *.googlesyndication.com *.googleapis.com googleads.g.doubleclick.net *.doubleclick.net *.doubleclick.com maps.gstatic.com adwords-displayads.googleusercontent.com *.google.com *.youtube.com *.cackle.me awaps.yandex.ru awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru cackle.me vk.com *.vk.com xpleer.com  http://ulogin.ru https://ulogin.ru
"worker-src 'self' 9dc593d00d7317d540927e1c09a14bbf.me-talk.ru https://9dc593d00d7317d540927e1c09a14bbf.me-talk.ru https://www.youtube.com/ https://googleads.g.doubleclick.net/ https://www.youtube-nocookie.com/ https://www.google.com/ https://www.facebook.com/ https://api-maps.yandex.ru/ https://platform.twitter.com/ https://www.google.by/  https://vk.com/ https://new.vk.com/ https://shinglas.ru/ http://shinglas.ru/flash/roof-select_js_version/index.html https://mc.yandex.ru/ https://yandex.ru/map-widget/v1/ https://bid.g.doubleclick.net/xbbe/pixel
img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://www.paypal.com https://bitpay.com
style-src 'self' 'unsafe-inline' https://www.google-analytics.com https://fonts.googleapis.com https://onesignal.com
script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://cdn.onesignal.com https://assets.thinkific.com https://onesignal.com https://platform.twitter.com https://js.stripe.com https://www.googletagmanager.com https://www.paypal.com
frame-src https://www.youtube.com https://youtube.com https://syndication.twitter.com https://platform.twitter.com https://courses.thinkific.com https://js.stripe.com https://docs.google.com https://onesignal.com"
"default-src 'self' *.ventil.hu *.hotjar.com *.wirecard.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://kubecloud.io:443 https://*.kubecloud.io:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' data: 'unsafe-inline' 'unsafe-eval' bp.webhost1.ru api-maps.yandex.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net www.google-analytics.com www.google.com www.gstatic.com connect.facebook.net www.googletagmanager.com tagmanager.google.com *.jivosite.com
frame-ancestors 'self' blob: http://webvisor.com https://webvisor.com"
"script-src 'self' *.safehelpline.org safehelpline.org cdnjs.cloudflare.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com 'unsafe-eval' 'unsafe-inline'
"default-src 'self' *.waic.com https://fonts.googleapis.com http://waic.kayako.com 'unsafe-inline'
style-src http: https: 'unsafe-eval' 'unsafe-inline'
img-src data: http: https: 'unsafe-eval' 'unsafe-inline'
"frame-ancestors 'self' www.funtime.com.tw asfly.agenttour.com.tw ap.asfly.com.tw payez.agenttour.com.tw www.payeasy.com.tw
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://ajax.googleapis.com http://widgets.trustedshops.com http://ajax.aspnetcdn.com http://m.addthisedge.com http://widget.trustpilot.com http://*.addthis.com http://code.jquery.com http://cdnjs.cloudflare.com http://use.fontawesome.com https://ajax.googleapis.com https://www.gstatic.com https://www.google.com https://ajax.aspnetcdn.com https://m.addthisedge.com https://connect.facebook.net https://widget.trustpilot.com https://widgets.trustedshops.com https://*.addthis.com https://www.google-analytics.com https://code.jquery.com https://cdnjs.cloudflare.com https://embed.tawk.to https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://www.googleadservices.com https://use.fontawesome.com
style-src 'self' 'unsafe-inline' http://widgets.trustedshops.com http://maxcdn.bootstrapcdn.com http://code.jquery.com http://cdnjs.cloudflare.com http://ajax.googleapis.com http://fonts.googleapis.com http://bgrins.github.com http://bgrins.github.io https://ajax.googleapis.com https://fonts.googleapis.com https://bgrins.github.com https://bgrins.github.io https://widgets.trustedshops.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://code.jquery.com https://uk.trustspot.io https://cdn.jsdelivr.net
font-src 'self' data: http://widgets.trustedshops.com http://maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://maxcdn.bootstrapcdn.com http://fonts.gstatic.com https://fonts.gstatic.com https://uk.trustspot.io https://*.tawk.to https://sxt.cdn.skype.com
img-src 'self' data: 'self' blob: http://code.jquery.com http://www.paypalobjects.com http://cdnjs.cloudflare.com http://widgets.trustedshops.com https://code.jquery.com https://cdnjs.cloudflare.com https://www.facebook.com https://*.tawk.to https://uk.trustspot.io https://s3.amazonaws.com https://www.paypalobjects.com https://www.google-analytics.com https://*.addthis.com https://widgets.trustedshops.com https://www.gstatic.com https://cdn.jsdelivr.net https://premierpokerchips.blob.core.windows.net http://ajax.googleapis.com
connect-src 'self' http://m.addthis.com https://m.addthis.com https://www.facebook.com https://*.tawk.to wss://*.tawk.to https://trustbadge.api.etrusted.com https://widgets.trustedshops.com https://api.trustedshops.com https://www.google-analytics.com https://shops-si.trustedshops.com
frame-src 'self' http://widget.trustpilot.com http://*.addthis.com https://www.facebook.com https://www.google.com https://widget.trustpilot.com https://va.tawk.to https://*.addthis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.co.uk https://connect.facebook.net https://www.youtube.com https://static-v.tawk.to
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bambora.com https://*.googleapis.com http://*.googlesyndication.com http://www.googletagservices.com https://www.google-analytics.com https://*.google.ca https://*.google.com https://*.doubleclick.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://quip-apple-cdn.com https://quip-cdn.com
"default-src 'unsafe-inline' 'self' data: http://*.granitereit.com http://*.gravatar.com https://*.googleapis.com https://*.gstatic.com http://*.twitter.com http://*.shareholder.com http://www.google-analytics.com http://*.google.com https://*.google.com https://*.datatables.net https://*.ctctcdn.com https://*.cloudflare.com https://*.constantcontact.com https://*.gcs-web.com"
script-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.optmstr.com https://*.optmnstr.com https://*.onesignal.com https://certify.gpwa.org 'nonce-d48619a5e94e2254b7974d445751e8c30df89081' 'nonce-3802dcd1d30eaa7306f38612cbf16f17a1c824d4' 'nonce-6dd9cc2fc7ab9dc04787134f6cf6f35f40c58fc6' 'nonce-b15a3cad9a9fe8ce2c0424d966cb6835a4c5feae' 'nonce-52b34f3cf2f58dc7fbad16eccbe9ef75be8ae0c4' 'nonce-5c5b0c43f7a237cfa20b4f8eb7a66158f0ad0856' 'nonce-3813a3411af071b5f03fd72522a8e25b001952ee' 'nonce-66dab1b74153954b335a72dbd6cba9f93379ad98'
connect-src 'self' *.mijnnvs.nl *.mn-services.nl sentry.io
"default-src 'unsafe-inline' 'self' 'unsafe-eval' maps.googleapis.com s7.addthis.com www.googletagmanager.com google-analytics.com www.google-analytics.com sjs.bizographics.com static.ads-twitter.com rum-static.pingdom.net connect.facebook.net px.ads.linkedin.com analytics.twitter.com rum-collector-2.pingdom.net facebook.com rum-collector.pingdom.net m.addthisedge.com m.addthis.com stats.g.doubleclick.net t.co www.facebook.com angular-ui.github.io livestream.com maps.gstatic.com fonts.googleapis.com code.jquery.com www.google.com www.gstatic.com fonts.gstatic.com jobs.jobvite.com www.youtube.com data: assets.curationwall.com cdnjs.cloudflare.com clicktotweet.com consent.cookiebot.com emarketing.alixpartners.com legacy.alixpartners.com webcasts.weforum.org curationwall.com view.vzaar.com www.slideshare.net www.youtube-nocookie.com www.alixpartners.com www.linkedin.com youtube.com lftracker.leadfeeder.com tagmanager.google.com ssl.gstatic.com blob: s.ytimg.com video.vzaar.com umbraco.tv assets.pinterest.com resources.vzaar.com i.ytimg.com edge.addthis.com www.addthis.com log.pinterest.com
script-src * 'self' 'unsafe-inline' 'unsafe-eval' d3svog4tlx445w.cloudfront.net *.fullstory.com *.googletagmanager.com *.google.com *.getclicky.com *.getdrip.com *.pingdom.net *.pardot.com *.freshdesk.com *.freshchat.com data:
style-src * 'self' 'unsafe-inline' d34uoa9py2cgca.cloudfront.net d3svog4tlx445w.cloudfront.net unpkg.com d36mpcpuzc4ztk.cloudfront.net
connect-src * 'self' *.fullstory.com *.googletagmanager.com *.google.com *.getclicky.com
media-src * *.getdrip.com *.pingdom.net d36mpcpuzc4ztk.cloudfront.net *.freshdesk.com *.freshchat.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' s1.sentry-cdn.com cdn.ravenjs.com static.zdassets.com ajax.googleapis.com ssl.google-analytics.com www.googleadservices.com analytics.twitter.com platform.twitter.com *.pingdom.net js.stripe.com api.stripe.com statuspage-production.s3.amazonaws.com s3.amazonaws.com *.google.com www.gstatic.com aui-cdn.atlassian.com www.hipchat.com *.atlassian.net *.jira.com js.sentry-cdn.com browser.sentry-cdn.com
img-src 'self' *.netzpolitik.org *.met.vgwort.de *.twitter.com *.twimg.com *.facebook.com *.google.com data:
frame-src 'self' https://www.youtube.com https://www.google.com https://www.youtube-nocookie.com https://player.twitch.tv
script-src https: 'unsafe-inline' 'self' 'nonce-610f62d5e5c652c881272738596fbe09d79b64fd611c3babb92204a286c08a24' 'strict-dynamic' 'report-sample'
style-src 'self' 'unsafe-inline' https://cdn-os.lyoness.tv https://s.lyoness.tv https://fonts.googleapis.com https://id.cashbackworld.com
font-src 'self' data: https://cdn-os.lyoness.tv https://s.lyoness.tv https://fonts.gstatic.com https://maps.googleapis.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com maps.google.com maps.googleapis.com www.google.com
img-src 'self' data: www.google-analytics.com *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com i.vimeocdn.com s.w.org ps.w.org
img-src 'self' https://*.iso-ne.com http://*.iso-ne.com https://ssl.google-analytics.com data:
script-src *.commontools.net *.doubleclick.net *.google.com *.google.ru *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com gstatic.com *.facebook.net *.imgsmail.ru *.mail.ru *.ok.ru *.rambler.ru *.twitter.com *.userapi.com userapi.com *.vk.com vk.com *.yandex.ru yandex.st yastatic.net https://*.facebook.net https://*.google.com https://*.google.ru https://*.googleapis.com https://*.googlesyndication.com https://*.googletagservices.com https://*.gstatic.com https://gstatic.com https://*.ok.ru https://*.twitter.com https://*.vk.com https://vk.com https://*.yandex.ru https://yandex.st https://yastatic.net 'self' 'unsafe-inline' 'unsafe-eval'
frame-src *.doubleclick.net *.facebook.com *.google.com *.mail.ru *.ok.ru *.twitter.com *.vk.com vk.com *.vhod.cc *.yandexadexchange.net yandexadexchange.net yastatic.net https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.ok.ru https://*.vk.com https://vk.com https://*.yandexadexchange.net https://yastatic.net alipromo.com 'self'
connect-src https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com http://top-fwz1.mail.ru https://*.twitter.com https://*.yandex.ru 'self', upgrade-insecure-requests"
script-src 'unsafe-inline' 'unsafe-eval' https://cdn.useproof.com https://airswap.io https://*.airswap.io https://api.mixpanel.com https://*.googletagmanager.com https://ethgasstation.info https://*.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://apis.google.com www.google-analytics.com https://ssl.google-analytics.com https://www.google.com www.gstatic.com"
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' connect.facebook.net/en_us/sdk.js www.google-analytics.com https://www.google-analytics.com apis.google.com plotdb.disqus.com a.disquscdn.com portal.cherritech.net
style-src 'self' 'unsafe-inline' www.google-analytics.com fonts.googleapis.com a.disquscdn.com
img-src 'self' data: blob: www.google-analytics.com www.facebook.com static.xx.fbcdn.net csi.gstatic.com *
frame-src 'self' plotdb.io data: blob: *.facebook.com *.googleapis.com accounts.google.com disqus.com
connect-src 'self' data: blob: plotdb.com links.services.disqus.com *.tappayapis.com"
script-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.hotjar.com https://script.hotjar.com https://widget.intercom.io https://js.intercomcdn.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com 'sha256-yadtrwkmsx2nvsszludohctky1ri2pmejx8pg5unf8e=' 'sha256-lmglnwkl06/ziz2d4/dq3teivuc5fdsiq8ohlnwy6le=' 'sha256-5j8ize9hcee1uxnhgmhmxn3uuqpoqvsb+jn1bj2lo2k=' 'sha256-vmaaelntuiiy7k9updg0ixq/eoe/ujs+zmt3xxioqiu=' 'sha256-pl7iibelsluie78yrathzo9i0lak+cdrgktwcj7bsrc=' 'sha256-mqwgqfr1kaorfi/zedza7jheoxii1r6nqw/uceadjxw=' 'sha256-6dsubfaxxntdjsfml7bq/ha/kggfosypuxgdqasti14=' 'sha256-svkx08+sqomnwhiysyk3xc7rdugkyakmbxv2gwts4fo='
connect-src 'self' https://cdn.contentful.com https://in.hotjar.com wss://ws4.hotjar.com https://api-iam.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io
img-src 'self' https://images.ctfassets.net https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com www.google-analytics.com www.googletagmanager.com
img-src 'self' www.google-analytics.com maps.googleapis.com csi.gstatic.com maps.gstatic.com data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com"
"script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.ampproject.org *.twitter.com *.twimg.com *.google-analytics.com *.youtube.com *.ytimg.com *.google.com *.gstatic.com
img-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.twimg.com *.ytimg.com *.twitter.com storage.googleapis.com *.googleusercontent.com *.google-analytics.com *.ampproject.org *.gravatar.com *.google.com *.gstatic.com
frame-src 'self' *.twitter.com *.googleapis.com *.youtube.com *.ampproject.org *.google.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com *.twimg.com *.ampproject.org *.google.com
connect-src 'self' *.twitter.com *.googleapis.com *.youtube.com *.ampproject.org *.google.com *.google-analytics.com
font-src 'self' data: storage.googleapis.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.ampproject.org"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yastatic.net *.googlesyndication.com googleads.g.doubleclick.net *.google-analytics.com *.google.ru *.google.com *.google.kz *.google.com.ua https://www.googletagmanager.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://freakycoder.com:443 https://*.freakycoder.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com *.twitter.com connect.facebook.net staticxx.facebook.com fbcdn.net
img-src 'self' 'unsafe-inline' data: *.amazonaws.com www.google-analytics.com *.cdn.prismic.io
script-src 'self' 'nonce-eb06e80e-ec8b-4c8a-8fd6-3c8e29b88ce0' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' cdn.polyfill.io www.google-analytics.com
style-src 'self' 'unsafe-inline' blob: 'self' 'unsafe-inline' blob:"
default-src 'unsafe-inline' 'unsafe-eval' 'self' *
font-src 'unsafe-inline' 'unsafe-eval' 'self' data: fonts.gstatic.com
img-src 'unsafe-inline' 'unsafe-eval' 'self' * data:
script-src 'self' http://tsysmerchantsolutions.com 'unsafe-eval' 'unsafe-inline'
connect-src 'self' www.google-analytics.com images.ctfassets.net tn.alfredcx.com *.abtasty.com www.googletagmanager.com
frame-src 'self' api.retargetly.com bid.g.doubleclick.net dis.us.criteo.com gum.criteo.com tn.alfredcx.com vars.hotjar.com www.googletagmanager.com www.googletagmanager.com/ns.html www.youtube.com/
img-src 'self' data: images.ctfassets.net *.google-analytics.com *.hotjar.com stats.g.doubleclick.net *.gstatic.com *.criteo.net *.facebook.com *.google.com *.google.com.ar t.co
script-src 'self' *.google-analytics.com static.ads-twitter.com googleads.g.doubleclick.net *.hotjar.com *.retargetly.com tn.alfredcx.com *.abtasty.com *.criteo.com *.criteo.net *.facebook.net *.twitter.com *.google.com *.googleapis.com *.googletagmanager.com *.googleadservices.com 'unsafe-eval' 'unsafe-inline'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.snaping.net https://statique.snaping.net https://statique-ca.snaping.net https://static-fr.snaping.net https://static-ca.snaping.net https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.jwpcdn.com https://ads.exosrv.com https://securionpay.com https://optimize.google.com https://js.dplads.com https://a.dplads.com"
"script-src 'unsafe-inline' 'unsafe-eval' static.go.co.kr *.naver.net *.googleapis.com *.jquery.com *.kakao.com *.naver.com *.daum.net *.cloudflare.com *.google-analytics.com static.coresco.co.kr *.eeasternworld.co.kr *.ebiznetworks.co.kr *.hotelgangneung.kr *.daumcdn.net
"default-src * 'unsafe-inline' 'unsafe-eval' data: https://ajax.aspnetcdn.com http://www.freetrademagazines.com https://pd.gophercentral.com https://pmgi.go2cloud.org https://ptv.gophercentral.com https://magazinebonus.com http://www.inforefinery.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://staffprivileges.com https://magazinevoucher.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://historiazine.com:443 https://*.historiazine.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://smbn.ru https://mc.yandex.ru https://yastatic.net https://oss.maxcdn.com https://www.google-analytics.com mspdev.everpoint.ru https://stats.mos.ru https://st.top100.ru https://www.googletagmanager.com https://msp.omnichat.ru https://connect.facebook.net
"default-src 'self' *.rainwave.cc https://www.google.com https://calendar.google.com
media-src http://gamestream.rainwave.cc http://textville.net http://textville.net:80 http://relay-ams.gameowls.com http://relay-ams.gameowls.com:80 http://relay-chi.gameowls.com http://relay-chi.gameowls.com:80 http://relay-nyc.gameowls.com http://relay-nyc.gameowls.com:80 http://ocrstream.rainwave.cc http://coverstream.rainwave.cc http://chipstream.rainwave.cc http://allstream.rainwave.cc
font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com/
img-src 'self' 'unsafe-inline' *.google-analytics.com data:
script-src 'unsafe-inline' 'self' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
frame-src 'self' blob: https://watersoul.com https://www.facebook.com https://web.facebook.com https://m.facebook.com https://staticxx.facebook.com https://mc.yandex.ru https://s7.addthis.com https://edge.addthis.com https://www.google.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://securepubads.g.doubleclick.net
connect-src 'self' wss://driver.ru wss://*.driver.ru wss://driverscollection.com wss://*.driverscollection.com https://driverscollection.com https://*.driverscollection.com https://yandex.ru https://*.yandex.ru https://mc.yandex.by https://mc.yandex.kz https://mc.yandex.fr https://mc.yandex.ua https://kraken.rambler.ru https://stats.g.doubleclick.net https://cm.g.doubleclick.net https://www.google.com https://translate.googleapis.com https://*.google-analytics.com https://csi.gstatic.com https://stats.g.doubleclick.net https://m.addthis.com https://s7.addthis.com
"default-src https: 'self' *.71lbs.com 71lbs.com
connect-src 'self' ws: wss: *.tawk.to *.google.com *.mouseflow.com *.71lbs.com 71lbs.com *.zoho.com *.zohopublic.com
img-src 'self' data: *.dropbox.com *.dropboxusercontent.com *.rackcdn.com *.facebook.com *.google-analytics.com *.doubleclick.net *.google.com *.googletagmanager.com *.sitelock.com *.intuit.com *.tawk.to tawk.link *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.bufferapp.com *.reddit.com *.pinterest.com *.linkedin.com *.dropboxstatic.com *.mouseflow.com *.facebook.net *.71lbs.com 71lbs.com *.zohopublic.com
script-src 'self' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com *.tawk.to *.intuit.com *.google.com *.sumome.com *.facebook.net *.doubleclick.net *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.bufferapp.com *.reddit.com *.pinterest.com *.facebook.com *.linkedin.com *.mouseflow.com *.71lbs.com 71lbs.com *.zoho.com *.cloudfront.net *.zohostatic.com *.zohopublic.com
style-src 'self' 'unsafe-inline' *.intuit.com *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.reddit.com *.pinterest.com *.facebook.com *.linkedin.com *.mouseflow.com *.facebook.net *.google.com *.71lbs.com 71lbs.com *.cloudfront.net *.zoho.com *.zohostatic.com *.zohopublic.com
script-src * 'unsafe-inline' 'unsafe-eval' 'self' data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.ru https://mc.yandex.ru https://yastatic.net https://www.google-analytics.com https://ajax.googleapis.com https://*.googletagmanager.com https://*.lenmit.com https://*.veinteractive.com api-maps.yandex.ru https://*.yandex.net https://cackle.me https://*.cackle.me https://*.marketgid.com https://code.jivosite.com cdnjs.cloudflare.com
"default-src 'self' http://*.cackle.me http://profile-eu.exe.bid https://www.youtube.com https://widgets.dellin.ru https://web.redhelper.ru http://*.jivosite.com
object-src 'self' http://*.cackle.me https://www.youtube.com https://www.google.ru https://www.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com http://bnr.oremuuefbu.org http://cackle.me http://clck.yandex.ru http://cloud.roistat.com http://*.cackle.me http://fopbkufscn.org http://front.facetz.net http://kitbit.net http://mc.yandex.ru http://minxxrpaaw.org http://msmdzbsyrw.org http://openstat.net http://share.pluso.ru http://site.yandex.net http://web.redhelper.ru http://www.google-analytics.com https://api-maps.yandex.ru https://*.cloudfront.net https://yastatic.net https://yandex.ru https://www.youtube.com https://www.google.ru https://www.google.com https://web.redhelper.ru https://site.yandex.net https://mc.yandex.ru https://www.google-analytics.com http://collector.roistat.com http://t.insigit.com https://cdn.jsdelivr.net https://serjopepper.github.io https://connect.facebook.net https://www.googletagmanager.com https://apps.azhelp.ru http://*.jivosite.com
img-src 'self' data: http://www.google-analytics.com http://ad.mail.ru http://an.yandex.ru http://api.rees46.com http://cackle.me https://stats.g.doubleclick.net http://counter.yadro.ru http://datadrivensolution.com http://*.cackle.me http://img.yandex.net http://kitbit.net http://match.adsrvr.org http://openstat.net http://share.pluso.ru http://staging.trafex.net http://www.google-analytics.com http://yandex.ru http://yastatic.net https://api-maps.yandex.ru https://an.yandex.ru https://*.cloudfront.net https://informer.yandex.ru ttps://yastatic.net https://www.youtube.com https://www.google.ru https://www.google.com https://web.redhelper.ru https://*.maps.yandex.net https://*.doubleclick.net https://site.yandex.net https://mc.yandex.ru https://www.google-analytics.com http://front.facetz.net http://t.insigit.com http://cm.g.doubleclick.net http://www.tns-counter.ru http://sync.1dmp.io https://www.facebook.com https://s3-eu-west-1.amazonaws.com https://hb.bizmrg.com http://*.jivosite.com
font-src 'self' data: https://fonts.gstatic.com http://*.cackle.me http://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.youtube.com https://www.google.ru https://www.google.com
style-src 'self' 'unsafe-inline' http://cloud.roistat.com http://*.cackle.me https://fonts.googleapis.com https://fonts.gstatic.com https://yastatic.net https://www.youtube.com https://www.google.ru https://www.google.com https://web.redhelper.ru http://*.jivosite.com
child-src 'self' http://*.cackle.me http://profile-eu.exe.bid https://www.youtube.com https://www.google.ru https://www.google.com https://widgets.dellin.ru https://web.redhelper.ru http://front.facetz.net http://t.insigit.com https://www.facebook.com https://yandex.ru/ https://my.matterport.com http://*.jivosite.com
connect-src 'self' http://www.google-analytics.com http://*.cackle.me http://rules.oremuuefbu.org http://www.google-analytics.com https://api-maps.yandex.ru https://yandex.ru https://www.youtube.com https://www.google.ru https://www.google.com https://mc.yandex.ru https://ff-input.mxpnl.net https://web.redhelper.ru wss://*.jivosite.com http://*.jivosite.com
"frame-ancestors 'self' https://*.google.com https://*.googleusercontent.com https://editionsatplay.withgoogle.com https://livecase.withgoogle.com"
default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/
font-src 'self' data: https://*.googleapis.com https://*.gstatic.com
frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/
img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com
script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com
img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://avatars0.githubusercontent.com https://avatars1.githubusercontent.com https://avatars2.githubusercontent.com https://avatars3.githubusercontent.com
font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.gstatic.com
frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/ http://*.synology.com http://*.synology.cn
img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://*.gstatic.com https://*.googleapis.com https://*.google.com http://*.baidu.com https://*.bdstatic.com
script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com https://*.google.com https://*.googleapis.com https://*.baidu.com https://*.bdstatic.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.googleapis.com https://api.map.baidu.com
connect-src 'self' https://* images.fxcash.ru api.fxcash.ru mc.yandex.ru *.facebook.com *.facebook.net *.zoho.com *.zohopublic.com ws://vts.zohopublic.com js.zohostatic.com
frame-src 'self' images.fxcash.ru *.g.doubleclick.net *.zohopublic.com *.facebook.com *.facebook.net
font-src 'self' fonts.gstatic.com data: *.zohostatic.com *.cloudfront.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudfront.net *.google-analytics.com *.ampproject.org js.zohostatic.com *.zoho.com tagmanager.google.com *.g.doubleclick.net maps.google.com *.googleapis.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com mc.yandex.ru *.facebook.com *.facebook.net
style-src 'self' 'unsafe-inline' *.cloudfront.net css.zohostatic.com tagmanager.google.com fonts.googleapis.com *.facebook.com *.facebook.net
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.jquery.com www.google.com www.google.com.ph www.youtube.com www.googleadservices.com *.bazaarvoice.com maps.google.com *.googleapis.com *.gstatic.com *.xtento.com ebizmarts.com *.addthis.com *.addthisedge.com *.pinimg.com *.facebook.net www.facebook.com *.pinterest.com *.bing.com *.c3tag.com *.g.doubleclick.net www.google-analytics.com www.gadnanalytics.com *.amazon-adsystem.com *.adsymptotic.com www.googletagmanager.com *.listrakbi.com *.ytimg.com *.doubleclick.net data:
img-src 'self' http://www.sogknives.com http://www.gravatar.com *.gravatar.com *.xtento.com *.bazaarvoice.com *.bing.com *.listrakbi.com www.google-analytics.com *.facebook.net www.facebook.com *.google.com www.google.com.ph *.pinterest.com *.amazon-adsystem.com *.adsymptotic.com *.gstatic.com *.g.doubleclick.net www.sogknives.com *.xtento.com *.itoris.com ebizmarts.com data:"
script-src 'self' https://adservice.google.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://connect.facebook.net https://platform.twitter.com https://cdn.syndication.twimg.com https://ajax.googleapis.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: 'sha256-mi0nl4ped8vkcehxh2hcckjk3dq5szidx9l8d6uk0v8=' https://www.paypalobjects.com https://stats.g.doubleclick.net https://www.google-analytics.com https://abs.twimg.com https://pbs.twimg.com https://platform.twitter.com https://syndication.twitter.com https://www.facebook.com https://pagead2.googlesyndication.com
style-src 'self' https://unpkg.com https://fonts.googleapis.com https://platform.twitter.com 'unsafe-inline' https://cdnjs.cloudflare.com
font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com
frame-src 'self' https://googleads.g.doubleclick.net https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://syndication.twitter.com
frame-ancestors 'self' *.salesforce.com *.force.com http://www.terschellingenergie.nl
"default-src 'self' *.explorer-russia.ru data: 'unsafe-inline' *.newrelic.com *.yadro.ru *.jivosite.com *.mango-office.ru *.callibri.ru *.google-analytics.com *.cloudflare.com *.jquery.com *.youtube.com https://yandex.ru https://chat.ws.yandex.ru https://mc.yandex.ru https://yastatic.net 'unsafe-eval'"
"default-src 'self' 'unsafe-inline' *.badgr.io www.google-analytics.com www.googletagmanager.com data:"
"default-src www.accountnow.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com apis.google.com fonts.googleapis.com accounts.google.com bat.bing.com secure.adnxs.com ib.adnxs.com googleads.g.doubleclick.net stats.g.doubleclick.net seal-goldengate.bbb.org www.facebook.com facebook.com connect.facebook.net staticxx.facebook.com accountnow.tt.omtrdc.net google.com scontent.xx.fbcdn.net mpsnare.iesnare.com fast.wistia.com pipedream.wistia.com scontent.xx.fbcdn.net external.xx.fbcdn.net src.litix.io sumome-140a.kxcdn.com platform.twitter.com syndication.twitter.com sumome-140a.kxcdn.com embedwistia-a.akamaihd.net fg8vvsvnieiv3ej16jby.litix.io ssl.gstatic.com addthis.com buttons.reddit.com *.locatorsearch.com greendot.tt.omtrdc.net
style-src 'unsafe-inline' 'unsafe-eval' http: https:
img-src 'unsafe-inline' 'unsafe-eval' http: https:"
"img-src 'self' *.instagram.com *.gravatar.com *.cdninstagram.com *.cloudflare.com *.explorerbyx.org farm5.staticflickr.com geo.yahoo.com maps.googleapis.com maps.gstatic.com www.google-analytics.com
connect-src 'self' 'unsafe-inline' https://callisto.ro/ https://www.google-analytics.com
frame-src https://www.youtube.com https://www.facebook.com https://connect.facebook.net https://maps.google.com https://www.google.com/
img-src 'self' https://callisto.ro/ http://*.trafic.ro https://www.facebook.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://callisto.ro/ https://secure.trafic.ro https://connect.facebook.net https://www.google-analytics.com
script-src 'self' https://www.eastsussex.gov.uk https://new.eastsussex.gov.uk https://ajax.googleapis.com https://www.google-analytics.com https://*.crazyegg.com https://s3.amazonaws.com https://content.govdelivery.com 'nonce-c160da81a5a943a590441b6ad619aa68' https://eastsussex.gov.uk
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://modernmythology.net:443 https://*.modernmythology.net:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.googletagmanager.com https://snap.licdn.com https://www.google-analytics.com https://js.leadin.com https://s3.amazonaws.com https://js.hs-scripts.com https://px.ads.linkedin.com https://js.hs-analytics.net https://js.hscollectedforms.net https://cdnjs.cloudflare.com https://plunet.agilecrm.com https://www.googleadservices.com https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' *.googleapis.com https://cdnjs.cloudflare.com
font-src 'self' 'unsafe-inline' data: *.googleapis.com https://fonts.gstatic.com
img-src 'self' data: https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com https://track.hubspot.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.de
"default-src  http: https: data:  'unsafe-inline' 'unsafe-eval'"
script-src 'self' https://community.monzo.com https://devslack.monzo.com https://api.greenhouse.io https://cdn.optimizely.com https://cdn.roadmap.space https://platform.twitter.com https://cdn.syndication.twimg.com https://www.google-analytics.com https://static.ads-twitter.com https://connect.facebook.net https://staticxx.facebook.com https://api.greenhouse.io https://cdnjs.cloudflare.com 'sha256-adovwu8qocedumgkmegnrgaw7pepvqd7a8l5q4mmcu0=' 'sha256-vvrbltz7o+qyhc5aajobtzco+dyfvpw4srudoa4cgk4=' 'sha256-390oygqkpmno57xxe9pxxal13/86rknpeyv53uiwzh8=' 'sha256-ng53zouoxn9hab603hyosibfr+qu0dae58rmgb/ebyc=' 'sha256-pqy83833j5alzozu2w5msx3mkooawn/i0quzmhajnea=' 'sha256-kzrthb9nfvygg+0mxmzt81rsi66inuqjuaydmdkhcf8=' 'sha256-4dum0vjuihfvnug5tzfrvef9y6gyjupz6f6rv4fbzko=' 'sha256-ajrnyn5glkijujb2teq3sb5han5gfchvcxfevgozkse=' 'sha256-aldimhqvcnrphn1xi7orb3dvafd5zwhkrxmpoqjayz0=' 'sha256-4w24rlfiao7ugeyc1ifiymi10ohx7urd55syd1brsgk=' 'sha256-mf9z/a4jcfal+vliybsm1gpxja4mmuiwvdflpuk+2re=' 'sha256-ct6umqxequm34hqa6tuwzromjfa9rj4cutztfu1hbja=' 'sha256-wtqh1ysjlkygbo0c/liipevvm24cc3batq+ni16i6oc=' 'sha256-3csthf2vg6ylpgvbuflpjfiiygim0oks6jk5dgsbcta=' 'sha256-oaxbhqdajiayeh4jy2sf+ex8pkwhcvfwmv+2r0ilhva=' 'sha256-yzvuldu6bd4k+kadp6vjxbr0rspqngie0o4/dytrt9w=' 'sha256-i5s6j8q+kuzdifndjbqctfukyrthz7fp2tfcutu5+0u=' 'sha256-skloybuj39cwayhfu/qo/pxopyn9ddczlcdat00e430=' 'sha256-jqikbimqzplgw7/yumcxp+bbg5ghfpxigjthfwioobw=' 'sha256-yiujdibaczzm950onkrq5m6ghckupmnf6s5swtokep4=' 'sha256-aqva0jguwy0ui98pbegspfh2a7ibkicyal3h/nrak98=' 'sha256-jaxra2pb8xvkk7xwd06cwwtqng08qzmbjvtmwmdaxiy=' 'sha256-sz3v5+8sv+pa+fnmsnbgxuiv6o0rqchhcgmnxvmf6sg=' 'sha256-q7waeiqvxbwr+9ll6dugno7et7lweb8qzibkypw65fo=' 'sha256-fbq7xxe950dxock40/7zjrs3ps2rdsvgftl6zrhluss=' 'sha256-pyo8m04/fryjxdwz6aypqttt/clohm94ldeqznqpu50='
frame-src 'self' https://dreambroker.com/ https://cws.huginonline.com/ https://inpublic.globenewswire.com/ https://www.youtube.com/ https://tools.euroland.com https://tools.eurolandir.com *.tools.euroland.com https://gamma.euroland.com https://vars.hotjar.com
script-src 'self' http://cdn.rawgit.com/noelboss/featherlight/ http://code.jquery.com https://maxcdn.bootstrapcdn.com https://tools.euroland.com https://gamma.euroland.com https://www.google-analytics.com https://script.hotjar.com https://static.hotjar.com https://www.googletagmanager.com https://tagmanager.google.com https://dl.episerver.net https://www.youtube.com/ https://dreambroker.com/ https://static.doubleclick.net https://siteimproveanalytics.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' http://cdn.rawgit.com/noelboss/featherlight/ https://maxcdn.bootstrapcdn.com https://tagmanager.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://dl.episerver.net 'unsafe-inline'
font-src 'self' data: https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com
connect-src 'self' ws: https://in.hotjar.com https://www.google-analytics.com"
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval'  https://hackers.zone  https://www.googletagmanager.com  https://www.google.com  *.google-analytics.com  *.cloudflare.com  *.gravatar.com *.gstatic.com *.doubleclick.net
script-src https://eduk12.net https://*.eduk12.net https://code.jquery.com/ https://*.googleapis.com/ https://sealserver.trustwave.com/ https://apis.google.com/ https://*.datatables.net/ https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'
connect-src https://eduk12.net https://*.eduk12.net https://*.googleapis.com https://*.datatables.net/ 'unsafe-inline'
child-src https://eduk12.net https://*.eduk12.net https://*.google.com https://*.googleapis.com https://www.gstatic.com
script-src 'strict-dynamic' 'nonce-mdyzytgxy2etzwmzmc00zjnlltgzndqtndgxytczywmxzwi2' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-inline' *.polyfill.io *.newrelic.com *.nr-data.net *.quora.com vimeo.com *.vimeo.com *.youtube.com *.ytimg.com *.selz.com selzstatic.com *.selzstatic.com *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com mixpanel.com *.mixpanel.com *.mxpnl.com *.mxpnl.net heapanalytics.com *.heapanalytics.com *.facebook.net *.facebook.com *.fbcdn.net *.fbsbx.com *.twitter.com *.ads-twitter.com sentry.io *.ravenjs.com intercomusercontent.com *.intercom.io *.intercomcdn.com frstre.com *.frstre.com tapfiliate.com *.tapfiliate.com
style-src 'self' data: blob: 'unsafe-inline' *.selz.com selzstatic.com *.selzstatic.com *.gstatic.com
child-src 'self' *.selz.com *.googletagmanager.com *.google.com *.facebook.net *.facebook.com *.fbcdn.net *.fbsbx.com vimeo.com *.vimeo.com *.youtube.com *.ytimg.com *.intercom.io *.intercom-sheets.com frstre.com *.frstre.com tapfiliate.com *.tapfiliate.com
frame-src 'self' *.selz.com *.googletagmanager.com *.google.com *.facebook.net *.facebook.com *.fbcdn.net *.fbsbx.com vimeo.com *.vimeo.com *.youtube.com *.ytimg.com *.intercom.io *.intercom-sheets.com frstre.com *.frstre.com tapfiliate.com *.tapfiliate.com
connect-src 'self' data: wss: *.selz.com selzstatic.com *.selzstatic.com *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com mixpanel.com *.mixpanel.com *.mxpnl.com *.mxpnl.net heapanalytics.com *.heapanalytics.com *.facebook.net *.facebook.com *.fbcdn.net *.fbsbx.com *.twitter.com *.ads-twitter.com sentry.io *.ravenjs.com intercomusercontent.com *.intercom.io *.intercomcdn.com frstre.com *.frstre.com tapfiliate.com *.tapfiliate.com selzupload.s3.amazonaws.com selzupload.s3-accelerate.amazonaws.com selzdownload.s3.amazonaws.com selzdownload.s3-accelerate.amazonaws.com s3.amazonaws.com/selzupload/
"style-src   https://*.vzpstatic.cz https://api.mapy.cz 'unsafe-inline' https://fonts.googleapis.com
script-src  https://*.vzpstatic.cz https://api.mapy.cz 'unsafe-inline' 'unsafe-eval' https://translate.googleapis.com  https://www.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net
img-src     https://*.vzpstatic.cz https://api.mapy.cz https://mapserver.mapy.cz https://www.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://www.facebook.com data: https://www.vzp.cz https://prod-publicweb-media.azureedge.net
font-src    https://*.vzpstatic.cz https://api.mapy.cz https://fonts.gstatic.com 'self'
frame-src   https://www.googletagmanager.com https://www.youtube.com https://*.facebook.com https://connect.facebook.net
connect-src 'self' wss://www.vzp.cz https://translate.googleapis.com https://www.google-analytics.com https://www.facebook.com https://www.vzp.cz
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' google-analytics.com apis.google.com *.newrelic.com *.stripe.com *.intercom.io js.intercomcdn.com
connect-src wss: *.intercom.io https: 'self' *.famebit.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.googleapis.com http://fonts.googleapis.com http://s.gravatar.com
font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com http://fonts.googleapis.com https://wordpress.com http://www.fcgo.gov.np
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.wp.com http://s.gravatar.com https://s0.wp.com
img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com http://www.fcgo.gov.np https://i1.wp.com https://i0.wp.com http://pixel.wp.com
"frame-src 'self' mypornoflv.tv *.mypornoflv.tv idexx.net *.idexx.net jwpcdn.com *.jwpcdn.com 88.150.172.218 *.88.150.172.218 88.150.172.219 *.88.150.172.219 *.vk.com https://*.vk.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.bing.com https://*.bing.com *.go.mail.ru https://*.go.mail.ru *.google-analytics.com https://*.google-analytics.com *.wwteasers.org wwteasers.org https://*.wwteasers.org *.static.wwgate.ru static.wwgate.ru https://*.static.wwgate.ru *.wwclickgo.com wwclickgo.com https://*.wwclickgo.com *.google.ru https://*.google.ru *.livestatisc.com livestatisc.com https://*.livestatisc.com *.static.wwpon365.ru static.wwpon365.ru https://*.static.wwpon365.ru *.yastatic.net yastatic.net https://*.yastatic.net *.promokrot.com promokrot.com https://*.promokrot.com *.ofapes.com ofapes.com https://*.ofapes.com *.scund.com scund.com https://*.scund.com *.biasdo.com biasdo.com https://*.biasdo.com *.andase.com andase.com https://*.andase.com *.andumb.com andumb.com https://*.andumb.com *.basand.com basand.com https://*.basand.com *.defoge.com defoge.com https://*.defoge.com *.riedto.com riedto.com https://*.riedto.com *.thisde.com thisde.com https://*.thisde.com *.toormpc.com toormpc.com https://*.toormpc.com *.weforo.com weforo.com https://*.weforo.com *.ydoms.com ydoms.com https://*.ydoms.com *.etndl.com etndl.com https://*.etndl.com *.i.checkru.net i.checkru.net https://*.i.checkru.net *.gpuzt.com gpuzt.com https://*.gpuzt.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' mypornoflv.tv *.mypornoflv.tv idexx.net *.idexx.net jwpcdn.com *.jwpcdn.com 88.150.172.218 *.88.150.172.218 88.150.172.219 *.88.150.172.219 *.vk.com https://*.vk.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.bing.com https://*.bing.com *.go.mail.ru https://*.go.mail.ru *.google-analytics.com https://*.google-analytics.com *.wwteasers.org wwteasers.org https://*.wwteasers.org *.static.wwgate.ru static.wwgate.ru https://*.static.wwgate.ru *.wwclickgo.com wwclickgo.com https://*.wwclickgo.com *.google.ru https://*.google.ru *.livestatisc.com livestatisc.com https://*.livestatisc.com *.static.wwpon365.ru static.wwpon365.ru https://*.static.wwpon365.ru *.yastatic.net yastatic.net https://*.yastatic.net *.promokrot.com promokrot.com https://*.promokrot.com *.ofapes.com ofapes.com https://*.ofapes.com *.scund.com scund.com https://*.scund.com *.biasdo.com biasdo.com https://*.biasdo.com *.andase.com andase.com https://*.andase.com *.andumb.com andumb.com https://*.andumb.com *.basand.com basand.com https://*.basand.com *.defoge.com defoge.com https://*.defoge.com *.riedto.com riedto.com https://*.riedto.com *.thisde.com thisde.com https://*.thisde.com *.toormpc.com toormpc.com https://*.toormpc.com *.weforo.com weforo.com https://*.weforo.com *.ydoms.com ydoms.com https://*.ydoms.com *.etndl.com etndl.com https://*.etndl.com *.i.checkru.net i.checkru.net https://*.i.checkru.net *.gpuzt.com gpuzt.com https://*.gpuzt.com"
script-src * https://* 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.dropboxusercontent.com *.google.com *.googleapis.com *.google-analytics.com *.facebook.net *.facebook.com *.twitter.com *.github.com buttons.github.io *.githubusercontent.com *.hatena.ne.jp *.st-hatena.com *.wufoo.com
img-src https: 'unsafe-inline' 'unsafe-eval' data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://chatbotslife.com:443 https://*.chatbotslife.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src  http: 'unsafe-inline' 'unsafe-eval' https: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googleapis.com mc.us13.list-manage.com fonts.gstatic.com *.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io/ https: data:"
img-src 'self' data: smetrics.bankaustria.at bs.serving-sys.com track.adform.net img.youtube.com www.facebook.com unicreditgroup.122.2o7.net googleads.g.doubleclick.net www.google.com www.google.at www.google.de f1.eu.readspeaker.com webapps.bankaustria.at maps.gstatic.com maps.googleapis.com www.cashbackonline.at www.gstatic.com f1-eu.readspeaker.com http://www.bankaustria.at http://webapps.bankaustria.at media.readspeaker.com collect.tealiumiq.com cdn.tagcommander.com manager.tagcommander.com manager.commander1.com engage.commander1.com sync.commander1.com bankaustria.commander1.com
style-src 'self' 'unsafe-inline' f1-eu.readspeaker.com fonts.googleapis.com fast.fonts.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.bankaustria.at www.googleadservices.com googleads.g.doubleclick.net f1-eu.readspeaker.com connect.facebook.net bs.serving-sys.com secure-ds.serving-sys.com maps.googleapis.com ahc-prod.tetralog-it.de track.adform.net cdn.tagcommander.com bankaustria.commander1.com www.googletagmanager.com
frame-src 'self' www.youtube.com *.bankaustria.at bid.g.doubleclick.net app-eu.readspeaker.com rstts-eu.readspeaker.com service.rs-software.at connect.facebook.net cdn.tagcommander.com
connect-src 'self' webapps.bankaustria.at www.bankaustria.at wss://www.bankaustria.at ahc-prod.tetralog-it.de bs.serving-sys.com www1.emarsys.net
media-src 'self' http://www.bankaustria.at rstts-eu.readspeaker.com app-eu.readspeaker.com"
"default-src 'self' https://*.shapeyouracc.co.nz https://*.accdev.co.nz https://*.acc.co.nz https://*.businessdescription.co.nz https://*.dotnous.com https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.doubleclick.net https://*.cloudfront.net https://t.co https://*.twitter.com https://*.ads-twitter.com https://*.linkedin.com https://*.licdn.com https://*.facebook.com https://*.facebook.net https://*.jquery.com https://*.youtube.com https://*.mcxplatform.com.au https://unpkg.com https://*.sendgrid.com https://*.ambithub.com https://ambit-ai.com https://*.botframework.com/ wss://*.ambithub.com https://ipinfo.io/ https://*.polyfill.io/ 'unsafe-inline' 'unsafe-eval' data:"
font-src 'self' https://fonts.gstatic.com https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.woff2 https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.woff https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.ttf https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-light-300.woff2 https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-light-300.woff https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-light-300.ttf https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-light-300.eot https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-light-300.svg https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.eot https://pro.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.svg
img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com
script-src 'self' 'unsafe-eval' 'nonce-2aeemgb0xjptoigfp3nd' https://maps.googleapis.com/maps-api-v3/api/js/33/10/common.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/controls.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/geocoder.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/infowindow.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/kml.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/map.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/marker.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/onion.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/stats.js https://maps.googleapis.com/maps-api-v3/api/js/33/10/util.js https://maps.googleapis.com/maps/api/js https://maps.googleapis.com/maps/api/js/authenticationservice.authenticate https://maps.googleapis.com/maps/api/js/geocodeservice.search https://maps.googleapis.com/maps/api/js/quotaservice.recordevent https://maps.googleapis.com/maps/api/js/viewportinfoservice.getviewportinfo https://maps.googleapis.com/maps/vt https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/recaptcha/api2/v1534806847586/recaptcha__en.js 'sha256-6z3j7h9rhkmh2wkiqo/8ysvtl/welw9dsoav9sefaxq=' 'sha256-6z3j7h9rhkmh2wkiqo/8ysvtl/welw9dsoav9sefaxq=' 'sha256-6z3j7h9rhkmh2wkiqo/8ysvtl/welw9dsoav9sefaxq=' 'sha256-6z3j7h9rhkmh2wkiqo/8ysvtl/welw9dsoav9sefaxq=' 'sha256-6z3j7h9rhkmh2wkiqo/8ysvtl/welw9dsoav9sefaxq=' 'sha256-lssqae9gco/+e6c9jgkrdb2cfuupsxnxnqdjrs8wmx4=' 'sha256-ykpnop+0fni5jfqfhxbncc7xf8wo1wy2pxssgzy4wio=' 'sha256-pauwubkvpxlhojdubojhxq5dixemqbmltu5oa7g1thq=' 'sha256-7kkcvsl0hk0hozssz5czn0szfnbk2qe4cshjnpdw6vs='
script-src 'self' 'unsafe-inline' ajax.googleapis.com data:
connect-src 'self' *.cobinhood.com cobinhood.com wss://*.dexon.org wss://*.dexscan.app *.dexon.org dexon.org *.dexscan.app *.prismic.io sentry.io api.amplitude.com www.google-analytics.com stats.g.doubleclick.net cstaticdun.126.net ac.dun.163yun.com c.dun.163yun.com nstool.netease.com necaptcha.nosdn.127.net script.google.com script.googleusercontent.com api.taplytics.com ping.taplytics.com js.taplytics.com acstatic-dun.126.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com cdn.amplitude.com storage.googleapis.com *.nstool.netease.com cstaticdun.126.net ac.dun.163yun.com c.dun.163yun.com nstool.netease.com acstatic-dun.126.net necaptcha.nosdn.127.net cdn.taplytics.com js.taplytics.com"
script-src 'self' 'unsafe-inline' data: http: https: www.google-analytics.com
script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.livechatinc.com *.prismic.io *.facebook.com *.facebook.net blob:  ajax.cloudflare.com *.adroll.com *.mouseflow.com 'sha256-j7/et4nbzkb25nxud4icmw2ct5oyvsqhcjuh1vjve5w=' 'sha256-1gig1ei7abkbfq8rvwk7j2meeoilut5+tblxyancyta=' 'sha256-yty34torsvrj8i1xpoxjmv8d0wif22qukitfxcsdeqe=' 'sha256-a6hur3h46wdz8k7tqlrspyu9jepreypdcqh+oyyujb0=' 'sha256-56clby1i4ibkhifbgg3phkyf/mrvwjss6luxlxnwsa4=' 'sha256-u/wuuvwjoii1p0/6ztlstx9rr0kx8x/ak/+dtcxruau=' 'sha256-p8xki0tyme1regpiellv1/l3mtqjflph7mtjkrc+mzg=' 'sha256-jyrujmcwtswf3bgul4rahsf+9aljvxliuwkca6vknlw=' 'sha256-aa0zgdvxdwharn+bysvy3bxebhc+5mztynpv9ar6sus=' 'sha256-sdfidz9hklcbw9udtn/dwpht+pwvno8zfvhtxu7lguq=' 'sha256-+bucyhwzexvf6rvkz0egzkhfdsljdmq17l62rlp3msw=' 'sha256-x6iviopjnsqibx88k8vasl27rou6tiayhvf1+jtxxky='
frame-src *.prismic.io *.facebook.com *.connect.facebook.net *.google.com *.youtube.com *.vimeo.com *.livechatinc.com"
script-src 'nonce-hzixsvjhnwuit01turpntqpjspnwlctb' *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com fonts.googleapis.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com platform.twitter.com *.twimg.com *.amazonaws.com
"script-src 'strict-dynamic' 'nonce-ovk4wui208nzcaiuyxsj4a==' 'unsafe-inline' 'unsafe-eval' https: http:
"default-src 'self' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com
connect-src * 'self' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com http://broadcastseva.gov.in
img-src data: 'self' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com
style-src 'self' 'unsafe-inline' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com
frame-src 'self' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com http://broadcastseva.gov.in
font-src 'self' http://*.google.com http://*.gstatic.com http://*.google-analytics.com http://*.googleapis.com http://*.fontawesome.com http://cdnjs.cloudflare.com http://wowslider.com data:
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://paulovasconcellos.com.br:443 https://*.paulovasconcellos.com.br:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' *.universia.net *.google.com *.gstatic.com *.cloudfront.net *.aviary.com *.google-analytics.com *.googleapis.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' *.universia.net *.cloudfront.net *.google-analytics.com *.gstatic.com *.google.com data:
frame-src 'self' *.universia.net *.google.com *.youtube.com
img-src 'self' https: data: blob: https://abdl.link
media-src 'self' https: data: https://abdl.link
connect-src 'self' blob: https://abdl.link wss://abdl.link
script-src 'self' 'unsafe-inline' https://abdl.link https://www.googletagmanager.com https://www.google-analytics.com/analytics.js"
script-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://meta-edge.com:443 https://*.meta-edge.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.gitlab-static.net https://gl-canary.global.ssl.fastly.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://apis.google.com
frame-src 'self' https://www.google.com/recaptcha/ https://content.googleapis.com https://content-compute.googleapis.com https://content-cloudbilling.googleapis.com https://content-cloudresourcemanager.googleapis.com https://*.codesandbox.io
"default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'"
style-src 'self' blob: cdn.pager.com maxcdn.bootstrapcdn.com www.google-analytics.com
script-src 'self' app.link cdn.branch.io cdn.pager.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'nonce-268e4754-0371-4e2c-b73e-5b7b79a2937a' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' cdn.polyfill.io www.google-analytics.com
script-src 'self' https: stripe.com http: google-analytics.com kissmetrics.com cloudfront.net maps.googleapis.com 'nonce-af2ckdd3jggacwoxl4ccow=='
connect-src 'self' https: trk.kissmetrics.com google-analytics.com
"default-src 'self' data: http://googleads.g.doubleclick.net http://pagead2.googlesyndication.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://kraken.rambler.ru/ http://*.runetki.co/ https://*.runetki.co/ https://www.liveinternet.ru/ http://www.liveinternet.ru/ https://st.top100.ru/ http://st.top100.ru/ https://pagead2.googlesyndication.com/ http://www.google.com/ http://mc.yandex.ru/ https://mc.yandex.ru/
style-src 'self' 'unsafe-inline' https://vk.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://st.mycdn.me/
child-src 'self' https://www.youtube.com https://kraken.rambler.ru/ https://st.top100.ru/ https://www.google-analytics.com/ http://www.google-analytics.com/ http://st.top100.ru/ http://*.runetki.co/ https://*.runetki.co/ http://www.facebook.com/ https://www.facebook.com/ http://static.ak.facebook.com/ https://s-static.ak.facebook.com/ https://connect.ok.ru/ http://vk.com/ https://login.vk.com/ https://vk.com/ https://*.doubleclick.net/ http://googleads.g.doubleclick.net/ http://platform.twitter.com/ http://pagead2.googlesyndication.com/ https://pagead2.googlesyndication.com/
img-src 'self' https://kraken.rambler.ru/ https://st.top100.ru/ https://www.google-analytics.com/ http://www.google-analytics.com/  http://st.top100.ru/  http://counter.yadro.ru/ https://www.liveinternet.ru/ http://www.liveinternet.ru/ https://mc.yandex.ru/ http://vk.com/ https://vk.com/ https://syndication.twitter.com/ https://s0.2mdn.net/ https://pagead2.googlesyndication.com/ http://*.runetki.co/ https://*.runetki.co/ http://pagead2.googlesyndication.com/ data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kraken.rambler.ru/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://vk.com/ https://st.top100.ru/ https://www.liveinternet.ru/ http://www.liveinternet.ru/ http://st.top100.ru/  http://vk.com/ https://queuev4.vk.com/ http://platform.twitter.com/ https://cdn.syndication.twitter.com/ http://pagead2.googlesyndication.com/ https://pagead2.googlesyndication.com/ https://connect.facebook.net/ http://connect.facebook.net/ https://*.doubleclick.net/ http://connect.ok.ru/ https://connect.ok.ru/ https://mc.yandex.ru/ http://mc.yandex.ru/
connect-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://*.tawk.to wss://*.tawk.to https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com
font-src 'self' https://librariadelfin.ro/ https://static-v.tawk.to https://fonts.gstatic.com
frame-src https://www.youtube.com https://va.tawk.to https://www.facebook.com https://connect.facebook.net https://event.2performant.com
img-src 'self' https://librariadelfin.ro/ https://static-v.tawk.to https://tawk.link https://www.facebook.com https://stats.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com
script-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://connect.facebook.net https://embed.tawk.to https://cdn.jsdelivr.net https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://ssl.google-analytics.com
style-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://cdn.jsdelivr.net https://fonts.googleapis.com https://tagmanager.google.com https://fonts.googleapis.com
connect-src ws://localhost:* https://www.google-analytics.com https://fonts.googleapis.com https://api.stripe.com https://*.tienes-sal.es
"default-src mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.moatads.com *.doubleverify.com *.adsafeprotected.com
script-src 'unsafe-inline' 'unsafe-eval' mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.odnoklassniki.ru ok.ru *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.moatads.com *.adlooxtracking.com *.adsafeprotected.com *.serving-sys.com
style-src 'unsafe-inline' 'unsafe-eval' blob: *.mail.ru *.imgsmail.ru *.mradx.net
font-src data: blob: https: *.mail.ru *.imgsmail.ru *.mradx.net
frame-src mail.ru *.mail.ru *.mradx.net *.doubleverify.com *.doubleclick.net ok.ru *.ok.ru
child-src mail.ru *.mail.ru *.mradx.net *.doubleverify.com *.doubleclick.net ok.ru *.ok.ru
"frame-src 'self' www.lvstore.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://use.typekit.net *
"script-src 'self' https://csgo500.com/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.onesignal.com/ https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://code.jquery.com https://cdn.onesignal.com https://onesignal.com https://vk.com/js/api/ https://cdn.rawgit.com/yahoo/xss-filters/master/dist/xss-filters.js https://www.youtube.com https://s.ytimg.com 'nonce-d8bb795d-78a6-4440-9dbd-c3c8a42860dc'
script-src 'self' https://static.pretix.space https://pretix.eu https://checkout.stripe.com https://js.stripe.com
frame-src 'self' https://static.pretix.space https://pretix.eu https://checkout.stripe.com https://js.stripe.com
child-src 'self' https://static.pretix.space https://pretix.eu https://checkout.stripe.com https://js.stripe.com
style-src 'self' https://static.pretix.space https://pretix.eu 'self' https://cdn.pretix.space
connect-src 'self' https://pretix.eu 'self' https://cdn.pretix.space https://checkout.stripe.com
img-src 'self' https://static.pretix.space https://pretix.eu 'self' https://cdn.pretix.space data: https://*.stripe.com
media-src 'self' https://static.pretix.space https://pretix.eu data:
connect-src 'self' https://*.intercom.io https://uploads.intercomcdn.com wss://*.intercom.io https://uploads.intercomusercontent.com https://www.googleapis.com https://openexchangerates.org
frame-src 'self' https://www.youtube.com https://player.vimeo.com https://share.intercom.io https://intercom-sheets.com https://tenon.refersion.com
img-src 'self' https://www.gravatar.com 'unsafe-inline' data: *.google-analytics.com https://*.doubleclick.net *.google.com https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://service.ariba.com http://t.co
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.google-analytics.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com *.facebook.net http://tenon.refersion.com *.licdn.com *.linkedin.com http://platform.twitter.com https://*.ads-twitter.com https://analytics.twitter.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://36chapters.com:443 https://*.36chapters.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' player.vimeo.com *.hsforms.net *.hsforms.com *.hubspot.net *.hubspot.com *.hscta.net www.google-analytics.com www.google.com www.gstatic.com cpspharm.com
img-src 'self' data: *.hubspot.com www.google-analytics.com *.doubleclick.net *.google.com"
"frame-ancestors 'self' smart911.com www.smart911.com safety.smart911.com"
"connect-src https://api.posteo.de https://payment.posteo.de https://cdn.posteo.de wss://posteo.de 'self'
font-src 'self' https://fonts.gstatic.com https://fast.fonts.net https://fonts.googleapis.com
style-src 'unsafe-inline' 'self' https://fast.fonts.net https://fonts.googleapis.com
script-src https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.addthis.com https://*.addthisedge.com https://*.facebook.net https://s7.addthis.com https://*.jquery.com 'self' 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://*.google.com https://fonts.googleapis.com https://fonts.gstatic.com 'unsafe-inline'
frame-src 'self' https://*.google.com/ https://*.facebook.com https://*.addthis.com https://s3.amazonaws.com/ https://*.youtube.com
script-src * 'unsafe-inline' 'unsafe-eval' 'self' blob:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.ostrovok.ru ostrovok.ru *.worldota.net *.zenhotels.com zenhotels.com yastatic.net ads.adfox.ru *.adfox.yandex.ru ps.eyeota.net api.payota.net t.skyscnr.com secde.trivago.com unpkg.com www.googletraveladservices.com www.tripadvisor.com cdnjs.cloudflare.com www.kayak.com www.clicktripz.com www.youtube.com s3-eu-west-1.amazonaws.com travel.mediaalpha.com notify.bugsnag.com 3kxrt0l29e.execute-api.us-east-1.amazonaws.com *.hotjar.com fonts.gstatic.com *.livetex.ru tagmanager.google.com www.tamgrt.com cdn.branch.io app.link api.branch.io api2.branch.io www.googleadservices.com sslwidget.criteo.com static.criteo.net vk.com connect.facebook.net www.facebook.com top-fwz1.mail.ru www.hometogo.com secure.wego.com static.tacdn.com static.clicktripz.com pixel.sojern.com ads.travelaudience.com tms-st.cdn.ngenix.net hit.acstat.com c.riskified.com beacon.riskified.com cdn.siftscience.com d3c3cq33003psk.cloudfront.net www.awin.com www.google-analytics.com www.googletagmanager.com mc.yandex.ru tag.yieldoptimizer.com a.cdn.intentmedia.net st.dynamicyield.com static.dynamicyield.com *.criteo.com a.intentmedia.net px.dynamicyield.com opentag-stats.qubit.com *.g.doubleclick.net 6ytvy2ekla.execute-api.us-east-1.amazonaws.com fonts.googleapis.com maps.googleapis.com www.google.com www.googletagservices.com adservice.google.com c.triptech.ai s.clickiocdn.com *.googlesyndication.com cdn.ampproject.org clickiocdn.com adservice.google.ru csi.gstatic.com *.braintreegateway.com tag.crsspxl.com aa.agkn.com blip.bizrate.com c1.adform.net ce.lijit.com cm.g.doubleclick.net cms.analytics.yahoo.com d.turn.com dmp.truoptik.com dpm.demdex.net e.dlx.addthis.com ib.adnxs.com idsync.rlcdn.com io.narrative.io match.adsrvr.org partner.mediawallahscript.com pm.w55c.net pxl.connexity.net sync.crwdcntrl.net sync.mathtag.com tags.bluekai.com thrtle.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https *.cloudfront.net *.googleapis.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com connect.facebook.net graph.facebook.com rum-static.pingdom.net"
script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://ad4mat.de https://bid.g.doubleclick.net https://cdn.pboss.de https://cdn.petafuel.net https://cdn.wozutesten.de https://cdnmuc2.petafuel.net https://cdnnbg.petafuel.net https://containertags.belboon.de https://data1.eurosty.com https://data1.mein-bmi.com https://data1.routenplaner-karten.com https://data1.ubersetzung-app.com https://eu5.heatmap.it https://googleads.g.doubleclick.net https://imgsrv.io https://maytrics.marvellousmachine.net https://news.global-konto.com https://online.adservicemedia.dk https://optimize.google.com https://orangebuddies.go2cloud.org https://pstatic.davebestdeals.com https://s3.eu-central-1.amazonaws.com https://ssl.google-analytics.com https://static.donation-tools.org https://tagmanager.google.com https://tpc.googlesyndication.com https://translate.googleapis.com https://www.financeads.net https://www.fndsda.net https://www.google-analytics.com https://www.google.com/ads/user-list https://www.googleadservices.com https://www.googletagmanager.com https://www.paypal.com https://www.paypalobjects.com https://www.performancehero.de
default-src askadam.gr *.askadam.gr data: blob: 'unsafe-inline' 'unsafe-eval' unhooked.gr *.unhooked.gr unhooked.co *.unhooked.co gambit.ltd *.gambit.ltd googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com
connect-src askadam.gr *.askadam.gr unhooked.gr *.unhooked.gr unhooked.co *.unhooked.co gambit.ltd *.gambit.ltd googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com
script-src askadam.gr *.askadam.gr data: blob: googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com apis.google.com *.apis.google.com *.googleapis.com www.google.com gstatic.com *.gstatic.com fonts.googleapis.com translate.google.com *.skroutz.gr cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'
style-src askadam.gr *.askadam.gr 'unsafe-inline' apis.google.com *.apis.google.com *.googleapis.com www.google.com cdnjs.cloudflare.com
form-action askadam.gr *.askadam.gr *.piraeusbank.gr piraeusbank.gr
font-src askadam.gr *.askadam.gr gstatic.com *.gstatic.com fonts.googleapis.com apis.google.com *.apis.google.com *.googleapis.com www.google.com
img-src * data: blob: apis.google.com *.apis.google.com *.googleapis.com www.google.com
media-src * data: blob: apis.google.com *.apis.google.com *.googleapis.com www.google.com
object-src askadam.gr *.askadam.gr google.com *.google.com youtube.com *.youtube.com vimeo.com *.vimeo.com apis.google.com *.apis.google.com *.googleapis.com www.google.com audiomack.com *.audiomack.com mixcloud.com *.mixcloud.com
frame-src askadam.gr *.askadam.gr google.com *.google.com youtube.com *.youtube.com vimeo.com *.vimeo.com *.skroutz.gr apis.google.com *.apis.google.com *.googleapis.com www.google.com audiomack.com *.audiomack.com mixcloud.com *.mixcloud.com
"frame-src 'self' ecodrift.ru widget.cloudpayments.ru open.ivideon.com googleads.g.doubleclick.net googleadservices.com aghost.ru agho.st sweb.ru www.sweb.ru www.google.com google.com google.ru www.google.ru accounts.google.com www.youtube.com youtube.com birjakreditov.com bid.g.doubleclick.net embedplus.com www.embedplus.com cackle.me www.cackle.me i.cackle.me h.cackle.me *.cackle.me coub.com kit.cdek-calc.ru bkred.ru widgets.dellin.ru
connect-src 'self' blob: magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com magicmemories-pbx2.getprintbox.com pbx2-magicmemories.s3.eu-central-1.amazonaws.com pbx2-magicmemories.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://*.getprintbox.com https://dbg.getprintbox.com:8888 https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.bing.com https://*.olark.com wss://*.zopim.com https://*.zopim.com https://stats.g.doubleclick.net https://www.paypal.com https://*.stripe.com https://*.hotjar.com wss://*.hotjar.com wss://*.getprintbox.com https://*.googleapis.com api.magicmemories.com
script-src 'self' magicmemories.com store.magicmemories.com magicmemories.getprintbox.com www.magicmemories.com www.store.magicmemories.com www.magicmemories.getprintbox.com magicmemories-pbx2.getprintbox.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8000 https://dbg.getprintbox.com:8888 'unsafe-inline' 'unsafe-eval' https://*.getprintbox.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.google.com https://*.google.pl https://*.google.dk https://*.googleapis.com https://*.googletagmanager.com https://*.bing.com https://*.gstatic.com https://*.google-analytics.com https://cdn.mouseflow.com https://*.facebook.net https://api.instagram.com https://api.flickr.com https://*.twitter.com https://*.pinterest.com https://cdn.klarna.com https://*.stripe.com https://*.olark.com https://chimpstatic.com https://*.zopim.com https://*.bootstrapcdn.com https://cdn.tinymce.com https://www.paypal.com https://www.paypalobjects.com https://*.hotjar.com https://*.prestashop.com https://auth-server.herokuapp.com https://cdnjs.cloudflare.com https://www.youtube.com https://*.ytimg.com/ cdn.cookielaw.org gateway.zscloud.net
"script-src 'self' 'unsafe-inline' *.gstatic.com *.googleapis.com *.google.com *.google-analytics.com *.zdassets.com *.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com http://www.googletagmanager.com https://ssl.google-analytics.com http://www.google-analytics.com
img-src 'self' data: https://ssl.gstatic.com https://www.gstatic.com https://ssl.google-analytics.com http://www.google-analytics.com
script-src https://js.usemessages.com https://scripts.demandbase.com https://aa.agkn.com https://adadvisor.net https://secure.adnxs.com https://*.linkedin.com https://snap.licdn.com https://js.hsleadflows.net https://js.hs-analytics.net https://js.hs-scripts.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.it 'self' 'unsafe-inline'
img-src https://aorta.clickagy.com https://ws3.rqtrk.eu https://sp.adbrn.com https://cm.dpclk.com https://h.parrable.com https://analytics.spongecell.com https://x.bidswitch.net https://match.prod.bidr.io https://*.company-target.com https://global.ib-ibi.com https://e.nexac.com https://*.rlcdn.com https://aa.agkn.com https://*.linkedin.com https://stags.bluekai.com https://api.bizographics.com https://ib.mookie1.com https://cm.g.doubleclick.net https://secure.adnxs.com https://track.hubspot.com https://usablenet.com https://qa-usablenet-redesign.udev1a.net https://ucontrolproxy.usablenet.com https://mobile.usablenet.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.it https://stats.g.doubleclick.net 'self'
frame-src https://app.hubspot.com https://www.google.com https://www.youtube.com https://bid.g.doubleclick.net/
connect-src https://api.hubspot.com https://*.company-target.com https://forms.hubspot.com 'self'
"default-src 'self' le-go.ru data: 'unsafe-inline' https://suggestions.dadata.ru https://www.youtube.com https://yandex.ru https://*.maps.yandex.net https://api-maps.yandex.ru https://mc.yandex.ru https://money.yandex.ru https://yastatic.net https://www.google-analytics.com https://widget.replain.cc https://code.jquery.com 'unsafe-eval'"
style-src 'self' 'unsafe-inline' ajax.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com payments.worldpay.com hello.myfonts.net cdnjs.cloudflare.com fonts.googleapis.com
script-src 'self' www.googleadservices.com bat.bing.com dev.visualwebsiteoptimizer.com widget.trustpilot.com use.typekit.net snapwidget.com widgets.pinterest.com cdn.syndication.twimg.com payments.worldpay.com code.jquery.com log.pinterest.com www.youtube.com/iframe_api s.ytimg.com js.stormiq.com www.googletagmanager.com t1.stormiq.com tracking1.force24.co.uk cdnjs.cloudflare.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.addthisedge.com *.addthis.com *.twitter.com *.facebook.net *.facebook.com 'unsafe-inline' 'unsafe-eval'
frame-ancestors http://*.brass-digital.com https://*.hammonds-uk.com http://*.hammonds-uk.com http://*.hammonds-uk.com:8079 https://*.hammonds-uk.com:8079 http://*.hammonds-uk.com:8077 https://*.hammonds-uk.com:8077 http://hammonds.local https://www.hammonds-uk.com/my-account
"default-src 'self' https://sentry.dsx.uk https://*.intercom.io wss://*.intercom.io wss://*.zopim.com wss://dsx.uk https://mc.yandex.ru https://js.intercomcdn.com https://js.intercomcdn.com https://api.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://api-iam.intercom.io
form-action 'self' https://accounts.google.com https://www.facebook.com https://api.twitter.com https://auth.epayments.com https://api.epayments.com https://*.intercom.io wss://*.intercom.io wss://*.zopim.com wss://dsx.uk https://mc.yandex.ru https://js.intercomcdn.com https://js.intercomcdn.com https://api-iam.intercom.io
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://h.online-metrix.net https://log.dsx.uk https://widget.intercom.io https://js.intercomcdn.com https://cdn.syndication.twimg.com https://cdnjs.cloudflare.com https://syndication.twitter.com https://ssl.google-analytics.com https://csi.gstatic.com https://maps.googleapis.com https://mc.yandex.ru https://www.google-analytics.com https://connect.facebook.com https://platform.twitter.com https://telemetry.tradingview.com https://v2.zopim.com https://ajax.googleapis.com https://www.googletagmanager.com https://tags.crwdcntrl.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://dsx.uk/piwik.js
img-src data: 'self' https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://www.google.com https://csi.gstatic.com https://static.intercomassets.com https://fonts.googleapis.com https://js.intercomcdn.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://charts.googleapis.com https://chart.googleapis.com https://www.google-analytics.com https://mc.yandex.ru https://pbs.twimg.com https://syndication.twitter.com https://v2.zopim.com https://ajax.googleapis.com https://cdn.syndication.twimg.com https://log.dsx.uk/ https://*.online-metrix.net https://maps.gstatic.com https://maps.googleapis.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://v2.zopim.com https://ajax.googleapis.com https://mc.yandex.ru https://platform.twitter.com
font-src data: 'self' 'unsafe-inline' https://js.intercomcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://v2.zopim.com https://ajax.googleapis.com
frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://h.online-metrix.net/ https://log.dsx.uk https://bcp.crwdcntrl.net/ https://www.google.com/ https://www.google.com/recaptcha/ blob: https://mc.yandex.ru
child-src https://share.intercom.io https://intercom-sheets.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net blob: https://mc.yandex.ru
"default-src https://www.mediengruppe-rtl.de https://fonts.gstatic.com https://www.youtube-nocookie.com https://s.ytimg.com https://www.google.com https://*.googlevideo.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://yt3.ggpht.com https://i.ytimg.com
script-src https://www.mediengruppe-rtl.de https://fonts.gstatic.com https://www.youtube-nocookie.com https://s.ytimg.com https://www.google.com 'unsafe-inline' 'unsafe-eval'
style-src https://www.mediengruppe-rtl.de https://fonts.gstatic.com https://www.youtube-nocookie.com https://s.ytimg.com 'unsafe-inline'"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://p.typekit.net http://*.google.com https://*.linkedin.com https://*.twitter.com/ https://*.bizographics.com http://*.ads-twitter.com http://cdn.sentione.com https://cdn.sentione.com wss://sentione.pl/websocket http://www.googletagmanager.com https://www.googletagmanager.com http://secure.leadforensics.com https://secure.leadforensics.com http://*.hotjar.com https://*.hotjar.com http://api.mixpanel.com https://api.mixpanel.com https://cdn.mixpanel.com http://cdn.inspectlet.com https://cdn.inspectlet.com https://ssl.google-analytics.com http://www.google-analytics.com https://www.google-analytics.com http://code.tidio.co https://code.tidio.co http://www.linkedin.com https://www.linkedin.com http://connect.facebook.net https://connect.facebook.net http://*.facebook.com https://*.facebook.com http://tidiochat-tidioltd.netdna-ssl.com https://tidiochat-tidioltd.netdna-ssl.com http://cdn.ravenjs.com https://cdn.ravenjs.com http://player.vimeo.com https://player.vimeo.com http://s.ytimg.com https://s.ytimg.com http://www.youtube.com https://www.youtube.com http://a.tiles.mapbox.com https://a.tiles.mapbox.com http://*.intercom.io https://*.intercom.io http://js.intercomcdn.com https://js.intercomcdn.com http://use.typekit.net http://*.googleapis.com https://*.googleapis.com http://cdn.omniconvert.com https://*.googleadservices.com http://*.googleadservices.com http://*.doubleclick.net https://*.doubleclick.net https://*.google.com https://*.google.pl https://intercom-sheets.com https://fast.wistia.net https://a.quora.com
"frame-ancestors 'self' *.donatelifetexas.org donatelifetexas.org *.donevidatexas.org donevidatexas.org"
"default-src 'self' script-src 'self' script-src 'unsafe-inline'"
frame-src 'self' https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me
connect-src 'self' http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com http://*.amazonaws.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me
"default-src 'self' https://my.appcues.com https://chorus-video.s3-accelerate.amazonaws.com https://cdn.elev.io https://*.zopim.com https://al-audio.s3-us-west-1.amazonaws.com https://chorus-mono.s3-accelerate.amazonaws.com https://al-audio.s3-accelerate.amazonaws.com https://chorus-mono.s3-us-west-1.amazonaws.com https://cdn.embedly.com https://app.elev.io https://d10lpsik1i8c69.cloudfront.net https://www.youtube.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.logrocket.io https://d24n15hnbwhuhn.cloudfront.net https://*.zopim.com https://*.zendesk.com https://*.fullstory.com https://fullstory.com https://cdn.logrocket.io https://pendo-io-static.storage.googleapis.com https://cdn.pendo.io https://app.pendo.io https://pendo-static-5641424780918784.storage.googleapis.com https://www.googletagmanager.com https://desv383oqqc0.cloudfront.net https://*.luckyorange.com https://*.luckyorange.net https://*.elev.io https://wootric-eligibility.herokuapp.com https://d27j601g4x0gd5.cloudfront.net https://d10lpsik1i8c69.cloudfront.net https://*.appcues.com https://d3accju1t3mngt.cloudfront.net https://widget.intercom.io https://js.intercomcdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://code.jquery.com https://cdn.mxpnl.com https://www.google-analytics.com https://cdn.segment.com https://js-agent.newrelic.com https://bam.nr-data.net https://twitter.github.io
connect-src 'self' wss://chorus.ai  https://*.logrocket.io https://api.appcues.net wss://api.appcues.net https://api.amplitude.com https://fullstory.com wss://*.zopim.com https://chorus.zendesk.com https://*.fullstory.com https://sentry.io https://*.elev.io https://production.wootric.com https://bam.nr-data.net https://api.segment.io wss://*.intercom.io https://*.intercom.io https://api.mixpanel.com https://ajax.cdnjs.com
img-src 'self' https://vulpix.appcues.com https://chorus-video.s3-us-west-1.amazonaws.com https://chorus.zendesk.com https://*.zopim.com https://pendo-static-5641424780918784.storage.googleapis.com https://cdn.pendo.io https://*.chorus.ai https://app.pendo.io https://storage.googleapis.com/pendo-static-5641424780918784/ https://*.gravatar.com https://*.elev.io https://d8myem934l1zi.cloudfront.net https://d3accju1t3mngt.cloudfront.net https://*.intercomassets.com https://js.intercomcdn.com data: https://*.salesforce.com https://*.force.com https://www.google-analytics.com
style-src 'self' https://*.appcues.com https://pendo-static-5641424780918784.storage.googleapis.com https://cdn.pendo.io https://*.chorus.ai https://*.elev.io https://d10lpsik1i8c69.cloudfront.net https://d3accju1t3mngt.cloudfront.net/ https://fonts.googleapis.com 'unsafe-inline' https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com
font-src 'self' data: https://*.zopim.com https://*.chorus.ai https://*.elev.io https://js.intercomcdn.com https://maxcdn.bootstrapcdn.com https://font.googleapis.com https://fonts.gstatic.com
"default-src 'self' *.gitarshkola.ru gitarshkola.ru *.mc.yandex.ru mc.yandex.ru https://mc.yandex.ru https://*.mc.yandex.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gitarshkola.ru gitarshkola.ru https://www.google.com/ https://adservice.google.ru https://*.adservice.google.ru https://adservice.google.com https://*.adservice.google.com https://graph.facebook.com https://*.graph.facebook.co https://graph.facebook.co *.apis.google.com apis.google.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com vk.com *.vk.com https://vk.com https://*.vk.com userapi.com ok.ru *.ok.ru akismet.com *.akismet.com https://*.yastatic.net https://yastatic.net
frame-src 'self' *.gitarshkola.ru gitarshkola.ru https://www.google.com/ https://accounts.google.com https://*.accounts.google.co https://accounts.google.co *.accounts.google.co accounts.google.co *.yastatic.net yastatic.net *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com *.apis.google.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com https://*.apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru akismet.com *.akismet.com
child-src 'self' https://stagingapp.standardnotes.org https://extensions.standardnotes.org *.stripe.com donorbox.org/embed/standard-notes *.paypal.com
connect-src 'self' *.stripe.com *.paypal.com https://extensions.standardnotes.org *.braintreegateway.com
script-src 'self' 'unsafe-inline' matomo.standardnotes.org *.stripe.com donorbox.org/widget.js *.paypal.com *.paypalobjects.com *.braintreegateway.com
script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://fonts.googleapis.com/css https://ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js emailoctopus.com
style-src 'self' 'unsafe-inline' *.googleapis.com emailoctopus.com
frame-src 'self' player.vimeo.com youtube.com www.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js https://ssl.google-analytics.com/ga.js https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://az416426.vo.msecnd.net/scripts/ https://tagmanager.google.com
connect-src 'self' wss://*.parliamentlive.tv/signalr/ wss://parliamentlive.tv/signalr/ wss://*.vualto.com/signalr/ https://dc.services.visualstudio.com/v2/
img-src 'self' http://*.ukparliament.groovygecko.com/ https://*.kaltura.com/ http://*.kaltura.com/ https://ssl.google-analytics.com/ https://vodplayer.parliamentlive.tv/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/r/ https://www.google.com/ads/ https://www.google.co.uk/ads/ https://ssl.gstatic.com https://www.gstatic.com data:
frame-src https://*.vualto.com http://*.vualto.com https://www.google.com/ https://*.parliamentlive.tv/ http://*.parliamentlive.tv/
style-src 'self' 'unsafe-inline' https://www.googletagmanager.com/ https://tagmanager.google.com https://fonts.googleapis.com
"default-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'"
"default-src 'self' wss://shipnext.com  wss://*.shipnext.com https://shipnext.com https://*.shipnext.com http://*.shipnext.com https://sentry.io https://stats.g.doubleclick.net https://*.google-analytics.com http://shipnext.com https://shipnext.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://browser-update.org https://apis.google.com  https://ssl.google-analytics.com https://cdnjs.cloudflare.com/ajax/libs/socket.io/2.0.1/socket.io.js https://cdn.ravenjs.com https://browser-update.org/update.min.js https://www.google-analytics.com/analytics.js data:  https://*.googleapis.com
img-src 'self' https://*.gstatic.com https://*.googleapis.com 'unsafe-inline' https://browser-update.org  data: https://*.shipnext.com http://*.shipnext.com  http://*.shipnext.com:7775 http://*.shipnext.com:7776  https://ssl.google-analytics.com https://s-static.ak.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://shipnext.io
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0-alpha.6/css/bootstrap-grid.min.css
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com data:
"frame-ancestors 'self' *.nexwebsites.com *.nexwebhost.com *.authorize.net
connect-src 'self' 'unsafe-inline' https://edituradp.ro/ https://www.google-analytics.com
img-src 'self' https://edituradp.ro/ http://*.trafic.ro https://www.google-analytics.com
script-src 'self' 'unsafe-inline' https://edituradp.ro/ http://storage.trafic.ro https://secure.trafic.ro https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com:443 https://www.gstatic.com:443
style-src 'self' 'unsafe-inline' https://www.gstatic.com:443 https://fonts.googleapis.com
style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.edenred.com
frame-src 'self' *.edenred.be *.zendesk.com *.zdassets.com *.gstatic.com *.google.com *.creaxial.be *.outspot.be *.netdna-ssl.com *.promolife.be *.youtube.com *.edenred.com
child-src 'self' *.edenred.be *.gstatic.com *.google.com *.creaxial.be *.outspot.be *.netdna-ssl.com *.promolife.be *.youtube.com *.edenred.com
script-src 'self' 'unsafe-eval' www.google-analytics.com cdn.ravenjs.com cdn.polyfill.io cdn.amplitude.com 'nonce-02e2ae1d-eee3-483a-ab53-ba280330375c'
img-src 'self' data: https://www.google-analytics.com https://in.getclicky.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.google.com http://*.googletagmanager.com http://*.gstatic.com https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://s-static.ak.facebook.com http://*.youtube.com http://*.googleadservices.com https://*.google-analytics.com https://*.twitch.tv https://*.rafflecopter.com
img-src 'self' https://*.googleapis.com https://*.google.com http://*.googletagmanager.com http://*.gstatic.com https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://s-static.ak.facebook.com http://*.youtube.com http://*.googleadservices.com https://*.google-analytics.com https://*.twitch.tv https://*.rafflecopter.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com http://*.googletagmanager.com http://*.gstatic.com https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://s-static.ak.facebook.com http://*.youtube.com http://*.googleadservices.com https://*.google-analytics.com https://*.twitch.tv https://*.rafflecopter.com
font-src 'self' https://*.googleapis.com https://*.google.com http://*.googletagmanager.com http://*.gstatic.com https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://s-static.ak.facebook.com http://*.youtube.com http://*.googleadservices.com https://*.google-analytics.com https://*.twitch.tv https://*.rafflecopter.com
frame-src 'self' https://*.googleapis.com https://*.google.com http://*.googletagmanager.com http://*.gstatic.com https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://s-static.ak.facebook.com http://*.youtube.com http://*.googleadservices.com https://*.google-analytics.com https://*.twitch.tv https://*.rafflecopter.com
default-src 'self' 'unsafe-inline' 'unsafe-eval' eu.cdn-04.amhcdn.net eu2.cdn-04.amhcdn.net https://fonts.googleapis.com http://*.jwplatform.com https://*.jwplatform.com http://*.jwpsrv.com https://*.jwpsrv.com http://*.jwpcdn.com https://*.jwpcdn.com http://cdn.fluidplayer.com http://awaps.yandex.ru http://counter.yadro.ru  https://www.google-analytics.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net buawdshes.ru http://xxx-hunt-er.xyz http://*.xcvgdf.party https://*.xcvgdf.party https://*.exosrv.com https://pronews.me https://euronews.me
"default-src 'self' *.rating-widget.com *.twimg.com *.twitter.com *.googleapis.com *.gstatic.com *.google.it *.macromedia.com *.google-analytics.com *.facebook.net *.sharethis.com *.google.com opendataavcp.interno.it 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: i.rw.gs *.rating-widget.com *.twitter.com *.twimg.com *.poliziadistato.it opendataavcp.interno.it l.sharethis.com *.facebook.com *.google-analytics.com *.gstatic.com *.gravatar.com *.googleapis.com s.w.org *.google.it
style-src 'self' *.twimg.com *.rating-widget.com *.twitter.com opendataavcp.interno.it *.sharethis.com 'unsafe-inline' *.googleapis.com
frame-src 'self' storify.com *.storify.com *.twitter.com opendataavcp.interno.it *.facebook.com *.facebook.com *.sharethis.com *.facebook.com *.youtube.com *.google.com
child-src 'self' opendataavcp.interno.it *.facebook.com *.sharethis.com *.youtube.com *.google.com *.twitter.com
font-src 'self' data: opendataavcp.interno.it *.gstatic.com"
connect-src 'self' api.adastra-partnering.com *.orange.sk *.orangeportal.sk sk.hit.gemius.pl *.hotjar.com wss://*.hotjar.com
font-src 'self' data: *.googleapis.com *.cloudfront.net *.orange.sk
child-src 'self' pohoda.streaming.sk *.com2biz.sk com2biz.sk *.orange.sk *.orangeportal.sk www.googletagmanager.com *.creativecdn.com *.hit.gemius.pl www.youtube.com *.facebook.com creativecdn.com *.hotjar.com optimize.google.com
img-src 'self' data: *.ctnsnet.com *.google.com *.orange.sk *.orangeportal.sk *.google-analytics.com *.scorecardresearch.com *.adocean.pl img.mobilshow.cz www.osporte.sk www.ohudbe.sk oskole.sk googleads.g.doubleclick.net stats.g.doubleclick.net www.google.sk img.youtube.com www.google.com www.facebook.com *.gstatic.com *.googleapis.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' rc-orange.livesale.me *.ctnsnet.com *.amazonaws.com *.adform.net *.orange.sk *.orangeportal.sk *.google-analytics.com www.googletagmanager.com *.googleadservices.com *.scorecardresearch.com *.gemius.pl *.facebook.net completion.ke.orange.fr *.hotjar.com *.google.com *.googleapis.com *.arcgisonline.com *.jsdelivr.net *.leady.com api.adastra-partnering.com optimize.google.com
style-src 'unsafe-inline' 'self' *.orange.sk *.orangeportal.sk *.google.com optimizely.github.io optimize.google.com
script-src 'self' www.checkfree.com maps.googleapis.com ajax.googleapis.com ssl.google-analytics.com adserver.adtechus.com vn.ft1.cashedge.com fundstransfer.cashedge.com 'unsafe-eval' 'unsafe-inline'
frame-src vn.ft1.cashedge.com fundstransfer.cashedge.com matchyourlender.com hv.getbills.com
script-src 'self' cdn.report-uri.com api.stripe.com js.stripe.com www.google-analytics.com www.gstatic.com www.google.com
img-src 'self' data: cdn.report-uri.com www.google-analytics.com
script-src 'self' 'nonce-df979afec09d49f58f06fe6361339fee' https://www.google-analytics.com/ https://maps.googleapis.com/ https://static.getclicky.com/ https://in.getclicky.com/ https://cdn.carbonads.com/ http://srv.carbonads.net/ https://adn.fusionads.net/ https://m.servedby-buysellads.com/ https://srv.buysellads.com/ https://platform.twitter.com/ https://static.ads-twitter.com/ https://analytics.twitter.com/ https://codepen.io/ https://assets.codepen.io/ https://cdn.syndication.twimg.com/
connect-src 'report-sample' 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://m.addthis.com
font-src 'report-sample' 'self' data: https://fonts.googleapis.com http://fonts.googleapis.com https://fast.fonts.com
script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' http://events.history.ac.uk https://www.google-analytics.com/analytics.js https://ssl.google-analytics.com/ga.js https://www.google.com https://apis.google.com https://ajax.googleapis.com/ajax/libs/jquery/ https://cse.google.com https://s7.addthis.com https://this.com/live https://m.addthisedge.com https://m.addthis.com https://cafdonate.cafonline.org/js/ https://cafdonatewidget.cafonline.org/js/ http://apps.brepolis.net https://www.google.com/afsonline/ http://www.google.com/afsonline/
style-src 'report-sample' 'self' 'unsafe-inline' http://fonts.googleapis.com https://fast.fonts.com https://www.google.com/uds/api/search/ https://www.google.com/cse/
media-src 'report-sample' 'self' https://sas-space.sas.ac.uk  http://sas-space.sas.ac.uk https://podcast.ulcc.ac.uk http://podcast.ulcc.ac.uk http://backdoorbroadcasting.net
object-src 'report-sample' 'self' https://www.youtube.com http://www.youtube.com
frame-src 'report-sample' 'self' https://www.youtube.com/embed/ http://www.youtube.com/embed/ https://cafdonatewidget.cafonline.org https://www.google.com/maps/embed https://apis.google.com https://accounts.google.com https://cse.google.com https://s7.addthis.com
form-action 'report-sample' 'self' https://catalogue.ulrls.lon.ac.uk https://cafdonatewidget.cafonline.org"
"script-src 'self' https://csgo500.com/ https://www.csgo500.com https://csgo500tr.com/ https://www.csgo500tr.com https://pubg500.com/ https://www.pubg500.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.onesignal.com/ https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://code.jquery.com https://cdn.onesignal.com https://onesignal.com https://vk.com/js/api/ https://cdn.rawgit.com/yahoo/xss-filters/master/dist/xss-filters.js https://www.youtube.com https://s.ytimg.com 'nonce-7ee54f72-51c2-449a-b538-aedc1341f707'
script-src 'self' 'unsafe-inline'  'unsafe-eval' https://cdnjs.cloudflare.com  https://ajax.aspnetcdn.com https://use.typekit.net https://connect.facebook.net https://yatil-cdn.s3.amazonaws.com https://maps.googleapis.com https://platform.twitter.com https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://cdnjs.cloudflare.com https://s.ytimg.com
img-src 'self' https://d2fb4vpq9yyxml.cloudfront.net https://cdnjs.cloudflare.com https://www.facebook.com https://maps.gstatic.com https://mt.google.com https://maps.googleapis.com https://dashboard.umbraco.org https://www.google-analytics.com data:
frame-src 'self' https://www.youtube.com https://player.vimeo.com https://staticxx.facebook.com
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.zeltser.com https://*.twitter.com https://*.twimg.com https://*.typekit.net https://secure.gravatar.com https://www.google-analytics.com https://fonts.googleapis.com https://ssl.gstatic.com https://trends.google.com https://fonts.gstatic.com https://player.vimeo.com https://www.youtube.com data:
script-src 'unsafe-inline' 'nonce-c688eb43906e49cd82cca0d8bbeacf0a' 'strict-dynamic' https:
"default-src 'self' https://paxvapor.com https://www.paxvapor.com https://api.segment.io https://*.impactradius-event.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.adsrvr.org/ https://admin.paxvapor.com/ https://connect.facebook.net https://djnf6e5yyirys.cloudfront.net https://p.bm23.com/bta.js https://rules.quantcount.com/rules-p-lkh_fec4dpkyy.js https://rules.quantcount.com/rules-p-y5c902cr51cph.js https://cdn.segment.com https://*.impactradius-event.com https://*.akamaihd.net/ https://s3.amazonaws.com https://*.salesforceliveagent.com https://code.jquery.com https://d1m54pdnjzjnhe.cloudfront.net https://*.greenhouse.io https://s.ytimg.com https://www.youtube.com https://*.thebrighttag.com https://*.dpbolvw.net https://*.kqzyfj.com https://*.dpbolvw.net https://*.tkqlhce.com https://*.jdoqocy.com https://*.btstatic.com https://bttrack.com https://*.bttrack.com https://*.domdex.com https://*.smartserve.s3.amazonaws.com https://smartserve.s3.amazonaws.com https://d22rutvoghj3db.cloudfront.net https://*.quantserve.com https://*.google-analytics.com https://*.doubleclick.net https://d3c3cq33003psk.cloudfront.net https://*.googletagmanager.com https://*.newrelic.com https://*.nr-data.net https://*.googleapis.com https://dtxtngytz5im1.cloudfront.net https://dd6zx4ibq538k.cloudfront.net https://d3d6b97n2tsi13.cloudfront.net https://s3-eu-west-1.amazonaws.com https://d2jjzw81hqbuqv.cloudfront.net https://*.list-manage.com https://cdn.kustomerapp.com
style-src 'self' 'unsafe-inline' https://cdn.kustomerapp.com https://cdn-images.mailchimp.com https://maxcdn.bootstrapcdn.com https://*.myfonts.net https://*.googleapis.com https://*.typography.com https://*.paxvapor.com
img-src 'self' data: https://kustomer-prod1-attachments.s3.amazonaws.com https://www.gravatar.com https://www.facebook.com https://djnf6e5yyirys.cloudfront.net https://paxvapor.sjv.io/ https://register.veratad.com/ https://s3.amazonaws.com/idme/ https://*.akamaihd.net/ https://*.ytimg.com https://img.youtube.com/ https://*.paxvapor.com http://*.ggpht.com https://*.secure.force.com https://dd6zx4ibq538k.cloudfront.net https://cdn.mxpnl.com https://*.openx.net https://*.rubiconproject.com https://*.gumgum.com https://*.tapad.com https://*.contextweb.com https://*.domdex.com https://*.dpbolvw.net https://*.kqzyfj.com https://*.dpbolvw.net https://*.tkqlhce.com https://*.jdoqocy.com https://*.adnxs.com https://bttrack.com https://*.magentocommerce.com https://*.nr-data.net https://*.quantserve.com https://*.cdninstagram.com https://www.google-analytics.com https://*.doubleclick.net https://*.gstatic.com https://*.googleapis.com https://*.google.com https://s3-eu-west-1.amazonaws.com https://d1m54pdnjzjnhe.cloudfront.net
frame-src 'self' https://tst.kaptcha.com/ https://paxvapor.sjv.io/ https://cdn1.friendbuy.com https://www.ojrq.net/ https://register.veratad.com/ https://www.googletagmanager.com https://ssl.kaptcha.com/ https://player.vimeo.com https://7eer.net https://evvy.net https://pax-vapor.sjv.io https://*.pxf.io https://*.greenhouse.io https://www.youtube.com https://www.youtube.com/iframe_api https://*.emjcd.com https://*.jdococy.com https://*.maxbounty.com https://www.talkable.com https://*.doubleclick.net https://dkl2tqmjys2z2.cloudfront.net https://*.google.com
font-src 'self' data: https://admin.paxvapor.com https://cdn.mxpnl.com https://maxcdn.bootstrapcdn.com https://*.gstatic.com https://*.googleapis.com
connect-src 'self' https://www.gravatar.com https://s3.amazonaws.com https://pax.api.kustomerapp.com wss://ws.pusherapp.com https://*.pusher.com https://admin.paxvapor.com https://paxvapor.sjv.io https://*.googleapis.com https://*.salesforceliveagent.com https://api.segment.io https://api.segment.io https://bttrack.com https://*.nr-data.net https://*.newrelic.com https://newrelic.com https://api.kustomerapp.com https://cdn.kustomerapp.com https://pax-sandbox.api.kustomerapp.com https://ws.pusherapp.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' adservice.google.com adservice.google.co.in *.hotjar.com *.googletagmanager.com *.googlesyndication.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com connect.facebook.net *.twitter.com *.twimg.com *.ampproject.org *.embedly.com player.cnbc.com
frame-src 'self' *.youtube.com *.facebook.com *.hotjar.com googleads.g.doubleclick.net *.twitter.com *.twimg.com *.ampproject.org *.embedly.com player.cnbc.com
script-src 'self' data: maps.googleapis.com https://ssl.google-analytics.com https://www.paypalobjects.com https://www.paypal.com/tagmanager/ 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: maps.googleapis.com *.gstatic.com *.gravatar.com www.paypalobjects.com www.steelforlife.org www.steelconstruction.org https://ssl.google-analytics.com
"script-src 'self' 'unsafe-inline' 'nonce-odgwmdm5zjq1nzq2mmzmntrhyzyznjuzy2fmodmymza=' 'strict-dynamic'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://code.jquery.com https://maps.googleapis.com https://*.criteo.net https://*.criteo.com https://*.zopim.com https://googleads.g.doubleclick.net https://hello.myfonts.net https://static.hotjar.com https://v2.zopim.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://assets.zendesk.com https://bat.bing.com https://dev.visualwebsiteoptimizer.com https://static.zdassets.com https://connect.facebook.net https://static.zdassets.com
img-src 'self' https://maps.gstatic.com https://google-maps-utility-library-v3.googlecode.com https://maps.googleapis.com https://www.googletagmanager.com https://www.facebook.com https://stats.g.doubleclick.net https://www.google.com https://www.google.nl https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://bat.bing.com data:
frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com https://dis.eu.criteo.com
connect-src 'self' https://yoast.com https://ekr.zdassets.com https://dopper.zendesk.com wss://*.zopim.com"
script-src 'self' 'sha256-ansqqcwl2yz3+pujqwimawu291uvieejwwjqlapyhay=' https://*.i-mobile.co.jp https://cdn.ampproject.org
img-src 'self' https://*.adsymptotic.com https://*.i-mobile.co.jp data: https://*.wp.com
"default-src 'self' https://*.healthtestexpress.com https://*.test2care.com https://*.analytehealth.com https://*.analytemedia.com https://*.sexualhealth.com https://*.stdtestexpress.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.akamaihd.net https://*.analytehealth.com https://*.analytemedia.com https://*.authorize.net https://*.bing.com https://*.cdnjs.org https://*.clk-analytics.com https://*.cloudflare.com https://*.cloudfront.net https://*.dialogtech.com https://*.doubleclick.net https://*.doubleverify.com https://*.facebook.net https://*.fontawesome.com https://*.force.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googletagservices.com https://*.gstatic.com https://*.healthtestexpress.com https://*.hotjar.com https://*.ifbyphone.com https://*.invoca.net https://*.jquery.com https://*.js.ubembed.com https://*.jsdelivr.net https://*.optimizely.com https://*.pcrl.co https://*.picreel.com https://*.ringrevenue.com https://*.s3.amazonaws.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com https://*.test2care.com https://*.tlscdn.com https://*.truste.com https://*.ubembed.com https://*.verisign.com https://s3.amazonaws.com
style-src 'self' 'unsafe-inline' https://*.cloudflare.com https://*.jquery.com https://*.healthtestexpress.com https://*.test2care.com https://*.analytehealth.com https://*.analytemedia.com https://*.bootstrapcdn.com https://*.dialogtech.com https://*.fontawesome.com https://*.force.com https://*.google.com https://*.googleapis.com https://*.keycdn.com https://*.picreel.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com https://*.cloudfront.net https://*.cloudflare.com https://*.jquery.com https://*.healthtestexpress.com https://*.test2care.com https://*.analytehealth.com https://*.analytemedia.com https://*.bootstrapcdn.com https://*.dialogtech.com https://*.fontawesome.com https://*.force.com https://*.google.com https://*.googleapis.com https://*.keycdn.com https://*.picreel.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com
object-src 'self' data: https://*.cloudfront.net https://*.healthtestexpress.com https://*.test2care.com https://*.analytehealth.com https://*.analytemedia.com https://*.force.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com
frame-ancestors 'self' https://*.healthtestexpress.com https://*.test2care.com https://*.analytehealth.com https://*.analytemedia.com https://*.force.com https://*.hotjar.com https://*.optimizely.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com wss://*.hotjar.com https://*.healthline.com
connect-src 'self' https://*.analytehealth.com https://*.analytemedia.com https://*.authorize.net https://*.dialogtech.com https://*.doubleverify.com https://*.facebook.com https://*.facebook.net https://*.force.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.healthtestexpress.com https://*.hotjar.com https://*.jquery.com https://*.optimizely.com https://*.salesforce.com https://*.sexualhealth.com https://*.stdtestexpress.com https://*.test2care.com https://*.yahoo.com https://graylog.hotjar.com:12443 https://yoast.com wss://*.hotjar.com"
"img-src 'self' data: 'unsafe-inline' https://prodoctorov.ru https://protabletky.ru https://medotvet.me https://*.google-analytics.com *.google-analytics.com yastatic.net https://yastatic.net *.yandex.ru https://*.yandex.ru https://yandex.ru *.yandex.net https://*.yandex.net yandex.st *.google.com  https://*.google.com  *.googleapis.com https://*.googleapis.com *.googlesyndication.com https://*.gstatic.com *.gstatic.com vk.com https://*.vk.com *.youtube.com *.twitter.com https://*.twitter.com *.googlezip.net https://*.ggpht.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.facebook.com https://*.google.ru https://*.mail.ru
script-src www.google.com www.gstatic.com 'self' 'sha256-xwyhe66drdihuf/vk+mbfwdg5ifl7fqizmed2yk/jqk=' 'sha256-f4lwghrcg6090hrbqktdgizriqvsu0bcjsgqzcbgbk0=' 'sha256-6x0va8yfhcaqdxglkqfoekfy+xsjvvhwt4okixqib7k=' 'sha256-8mgsjoqdrhlvzj9/tzhdc+gcpq7myqwssqh1aez8oxg=' 'sha256-spkzoxha8dgojoj3cz8okdpahh9iqtwx1og10xtp2xs=' 'sha256-lim5m44qm0v7dtv/kbhwbfzwrzxugfyhzydwizik714=' cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com use.typekit.net
img-src 'self' data:  p.typekit.net maps.googleapis.com www.google-analytics.com maps.gstatic.com
font-src 'self' use.typekit.net fonts.gstatic.com ajax.googleapis.com
script-src 'self' 'unsafe-inline' assets.adobedtm.com 'unsafe-eval' cdnjs.cloudflare.com www.gstatic.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com connect.facebook.net c.imedia.cz track.adform.net https://googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com https://www.gstatic.com/ hello.myfonts.net/count/308831
img-src 'self' data: www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.cz https://tracking-secure.csob.cz c.imedia.cz https://googleads.g.doubleclick.net https://stats.g.doubleclick.net
font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com
"script-src blob: 'self' 'unsafe-inline' 'unsafe-eval'  *  https: data data: safari-extension:
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: * https: data: gsa: *.factorydirectcraft.com *
"default-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com https: 'unsafe-inline'
img-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com https: 'unsafe-inline'
media-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com https: 'unsafe-inline'
script-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com https: 'unsafe-inline'
font-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com https: 'unsafe-inline'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/jquery-3.0.0.js https://code.jquery.com/jquery-migrate-3.0.1.js https://cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.2/dist/jquery.fancybox.min.js https://cdn.polyfill.io/v2/polyfill.min.js https://www.googleadservices.com/ https://www.google-analytics.com/ https://unpkg.com/esri-leaflet-geocoder@2.2.6 https://unpkg.com/esri-leaflet-geocoder@2.2.6 https://unpkg.com/leaflet@1.2.0/dist/leaflet.js https://unpkg.com/esri-leaflet@2.1.1/dist/esri-leaflet.js https://rawgit.com/nguyenning/leaflet.defaultextent/master/dist/leaflet.defaultextent.js https://unpkg.com/esri-leaflet-renderers@2.0.4/dist/esri-leaflet-renderers-debug.js https://rawgit.com/w8r/esri-leaflet-legend/master/dist/esri-leaflet-legend-compat.js https://www.googletagmanager.com https://tagmanager.google.com
img-src 'self' https://www.google-analytics.com https://www.gstatic.com/images/icons/material/system/1x/keyboard_arrow_up_white_48dp.png https://ssl.gstatic.com/analytics-suite/header/legacy/v1/ic_tag_manager.svg https://*.freelance.de/ https://pci.usd.de/compliance/ https://www.google-analytics.com/collect https://stats.g.doubleclick.net/r/collect https://cdnjs.cloudflare.com/ajax/libs/ https://www.google.com/ads/ https://www.google.de/ads/ https://www.sandbox.paypal.com/ https://www.paypal.com/ data: https://marktanalystonline.de/ https://*.arcgisonline.com
style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/ https://w8r.name/esri-leaflet-legend/example/css/style.css https://rawgit.com/nguyenning/leaflet.defaultextent/master/dist/leaflet.defaultextent.css https://unpkg.com/leaflet@1.2.0/dist/leaflet.css https://unpkg.com/esri-leaflet-geocoder@2.2.6/dist/esri-leaflet-geocoder.css
font-src 'self' data://* https://fonts.googleapis.com https://fonts.gstatic.com
frame-src 'self' https://googleads.g.doubleclick.net/ https://www.google.com/ https://www.google.de/
script-src 'self' https://www.google-analytics.com https://api.github.com 'nonce-67d10294256297e32848b949f03961271333dc58'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://www.google.com https://www.gstatic.com
img-src 'self' data: blob: https://www.google-analytics.com https://www.facebook.com https://stats.g.doubleclick.net
img-src 'self' *.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com
font-src 'self' *.google.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com
style-src 'self' *.google.com https://kellypublishing.net https://ssl.gstatic.com https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com
script-src 'self' *.google.com https://kellypublishing.net https://www.google-analytics.com https://www.googletagmanager.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http://w.sharethis.com/ http://t.sharethis.com http://cdnjs.cloudflare.com http://www.google-analytics.com/ http://s7.addthis.com http://maps.googleapis.com http://m.addthisedge.com http://m.addthis.com http://code.jquery.com/jquery-1.4.2.min.js
"style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net
script-src 'self' platform.twitter.com https://www.google-analytics.com cdn.mxpnl.com streetmix.auth0.com *.basemaps.cartocdn.com api.geocode.earth 'nonce-de7ba70b-bf85-4aa0-a251-fcf7a63980d7' 'nonce-36fa9ffa-f97c-4b2f-8e1d-1261ff6b2f22'
img-src 'self' data: pbs.twimg.com syndication.twitter.com s.gravatar.com https://www.google-analytics.com *.basemaps.cartocdn.com
connect-src 'self' api.mixpanel.com api.geocode.earth syndication.twitter.com https://www.google-analytics.com app.getsentry.com streetmix.auth0.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' ebanking.avanzbanc.com www.avanzbanc.com *.avanzbanc.com www.google-analytics.com xhr.spec.whatwg.org
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com ajax.googleapis.com *.google.com *.googletagmanager.com https://discordapp.com/api/"
child-src 'self' https: http://*.google.com http://*.facebook.com http://*.twitter.com http://*.youtube.com http://*.sharethis.com http://*.googletagmanager.com http://*.vimeo.com http://*.sharpspring.com http://*.googleadservices.com http://*.doubleclick.net http://*.wistia.com http://*.wistia.net
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com *.google.com *.google.ca *.mailchimp.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com *.google.com *.google.ca *.gosselinphoto.ca *.zopim.com www.youtube.com www.gstatic.com static.zdassets.com connect.facebook.net graph.facebook.com s7.addthis.com m.addthisedge.com m.addthis.com edge.addthis.com widgets.pinterest.com secure.liveshoppersmac.com *.akamaihd.net static.criteo.net sslwidget.criteo.com hosted.paysafe.com chimpstatic.com *.ytimg.com *.cloudflare.com *.mailchimp.com *.list-manage.com *.bing.com *.googleadservices.com *.doubleclick.net
font-src 'self' data: maxcdn.bootstrapcdn.com v2.zopim.com *.zopim.com *.zopim.io fonts.gstatic.com
frame-src 'self' www.facebook.com connect.facebook.net s7.addthis.com edge.addthis.com www.bhphotovideo.com www.googletagmanager.com www.google.com www.google.ca translate.google.fr console.virtualpaper.com circulaire.gosselinphoto.ca *.gosselinphoto.ca *.youtube.com *.youtu.be dis.us.criteo.com hosted.paysafe.com
connect-src 'self' wss://*.zopim.com https://*.zopim.com https://*.zopim.io *.zdassets.com gosselinphotosupport.zendesk.com www.google-analytics.com stats.g.doubleclick.net s7.addthis.com m.addthis.com hosted.paysafe.com
connect-src 'self' https://browser.pipe.aria.microsoft.com https://dc.services.visualstudio.com https://excel.officeapps.live.com https://www.google-analytics.com https://rason.net https://solver.onfastspring.com
frame-src 'self' https://www.youtube.com https://www.snapengage.com https://solver.onfastspring.com
img-src 'self' https://d1f8f9xcsvx3ha.cloudfront.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com data: https://www.snapengage.com https://*.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://appsforoffice.microsoft.com https://excel.officeapps.live.com https://az416426.vo.msecnd.net https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com https://code.jquery.com https://*.googleapis.com https://cdnjs.cloudflare.com https://www.snapengage.com https://netdna.bootstrapcdn.com https://js-agent.newrelic.com https://bam.nr-data.net https://d1f8f9xcsvx3ha.cloudfront.net
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://netdna.bootstrapcdn.com
img-src 'self' data: https://ps.w.org https://s.w.org https://secure.gravatar.com
script-src 'self' https: 'unsafe-eval' 'unsafe-inline' https:
script-src http://yandex.st http://mc.yandex.ru http://pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.gstatic.com *.googleapis.com *.halkbank.com.tr *.google.com *.doubleclick.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com
img-src 'self' data: *.google-analytics.com *.googleapis.com *.halkbank.com.tr *.google.com *.google.com.tr *.gstatic.com *.facebook.com *.facebook.com.tr *.doubleclick.net *.facebook.net
frame-src 'self' *.foreks.com *.halkbank.com.tr *.doubleclick.net *.youtube.com *.google.com
style-src *.retabet.es fonts.googleapis.com 'self' 'unsafe-inline'
img-src 'self' *.retabet.es www.reta.eu www.google-analytics.com stats.g.doubleclick.net *.retabet.es:8443 data:
script-src *.retabet.es *.retabet.es:8443 www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/ 'unsafe-inline'
sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://netbasal.com:443 https://*.netbasal.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.jsdelivr.net https://*.baidu.com https://*.googletagmanager.com https://*.cloudflare.com https://code.jquery.com 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://*.facebook.net https://*.facebook.com
style-src 'self' 'unsafe-inline' https://*.bootstrapcdn.com https://*.googleapis.com
font-src 'self' https://*.googleapis.com https://*.bootstrapcdn.com https://*.mweb.com.tw https://*.gstatic.com https://*.googleusercontent.com
frame-src https://*.google.com https://*.youtube.com https://*.facebook.com https://*.facebook.com https://line.me https://*.gocatalogs.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://en.wikipedia.org https://commons.wikimedia.org https://www.mediawiki.org https://code.highcharts.com https://ajax.cloudflare.com/ https://cdnjs.cloudflare.com/ajax/libs/chart.js/ https://cdn.jsdelivr.net/npm/md5-jkmyers@0.0.1/md5.min.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://www.googletagmanager.com  https://*.weirdgloop.org https://unpkg.com
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http://w.sharethis.com/ http://t.sharethis.com http://cdnjs.cloudflare.com http://www.google-analytics.com/ http://static.secureholiday.net
script-src 'self' 'nonce-b888b036d133af4fee0f2db39985e7697ec6d284c9be402f2dcc6ee41eaaf1dd' 'nonce-76b93e1e690fddbf898f69e369ed019c2f85c0e3ef16040bc9445eecc4eaf2c2' 'nonce-9879dac8c4833589139e7816d2f5b8a0ebc3cda8317b5c1819773ce630938121' https://cdn.ravenjs.com cdnjs.cloudflare.com http://connect.facebook.net *.facebook.net http://platform.twitter.com *.twitter.com https://webcdn.streamtest.net http://sp.analytics.yahoo.com/ https://sp.analytics.yahoo.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.yimg.com bat.bing.com *.hotjar.com http://yapi.zoomsupport.com https://yapi.zoomsupport.com https://*.stopad.io *.stopad.io https://www.google-analytics.com www.google-analytics.com https://www.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com www.googleadservices.com https://*.googleapis.com *.googleapis.com https://mc.yandex.ru mc.yandex.ru trk.cetrk.com https://dnn506yrbagrg.cloudfront.net dnn506yrbagrg.cloudfront.net https://*.newrelic.com *.newrelic.com https://s3.amazonaws.com s3.amazonaws.com https://seal.websecurity.norton.com https://gstatic.com *.gstatic.com https://google.com *.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com https://googleads.g.doubleclick.net
"default-src 'self' https: data: 'unsafe-inline'  publicconsulting.at umweltfoerderung.at kpc-consulting.at climateaustria.at
script-src 'self' https: 'unsafe-inline' 'unsafe-eval' google-analytics.com
style-src 'self' https: 'unsafe-inline' fonts.googleapis.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://amazonfiretv.blog:443 https://*.amazonfiretv.blog:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://optimize.google.com https://intercomcdn.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.amplitude.com https://*.segment.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com http://*.google-analytics.com https://*.googlesyndication.com https://*.googleapis.com https://*.facebook.com https://*.facebook.net https://*.googleadservices.com https://*.doubleclick.net https://*.intercomcdn.com https://*.intercom.io https://js.stripe.com https://cdn.inspectlet.com https://calendly.com https://*.licdn.com https://*.ads.linkedin.com https://*.sentrydsn.com
connect-src 'self' https://api.amplitude.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com http://*.google-analytics.com https://www.facebook.com https://*.segment.io https://*.intercomcdn.com https://*.intercom.io wss://*.intercomcdn.com wss://*.intercom.io https://api.stripe.com http://*.inspectlet.com https://*.inspectlet.com wss://*.inspectlet.com https://sentry.io
font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com https://*.intercom.io
img-src 'self' data: http: https: https://www.google-analytics.com https://optimize.google.com
frame-src 'self' https://calendly.com https://www.youtube.com https://js.stripe.com https://www.facebook.com https://*.doubleclick.net https://optimize.google.com
connect-src links.services.disqus.com www.google-analytics.com savjee.report-uri.com c.disquscdn.com disqus.com https://*.disquscdn.com
frame-src disqus.com c.disquscdn.com https://*.disquscdn.com www.google.com www.youtube.com accounts.google.com
img-src 'self' c.disquscdn.com referrer.disqus.com https://*.disquscdn.com www.google-analytics.com www.gstatic.com ssl.gstatic.com i.ytimg.com i.imgur.com images.gr-assets.com s.gr-assets.com data:
script-src 'self' instant.page c.disquscdn.com disqus.com savjee.disqus.com https://*.disquscdn.com www.google.com www.google-analytics.com www.gstatic.com apis.google.com goodreads.com www.goodreads.com 'sha256-tbqlljlbmexsgrieffu5kwd8g9kecsotcu0n0hd2olq=' 'sha256-a69xdpngwp5qzy8gbnrim7q5w/axoqcnlqmcf7ppl6k=' 'sha256-l9nttqblxf1z3siza7z/jttm01m91a8xvl07p4wtmyw=' 'sha256-oggipij5gyy2i5nrfigtb2+wfnjyfsvxqffol9tm5zy='
style-src 'self' 'unsafe-inline' c.disquscdn.com https://*.disquscdn.com fonts.googleapis.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://startupsventurecapital.com:443 https://*.startupsventurecapital.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://tocacar.com:443 https://*.tocacar.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' *.google-analytics.com recreativ.ru v.actionteaser.ru jwpsrv.com *.jwpcdn.com ads.actionteaser.ru https://ssl.gstatic.com *.gstatic.com *.googleapis.com st.top100.ru  trustjs.net *.rcdn.pro cdnjs-aws.ru uncorejs.ru *.marketgid.com *.googletagmanager.com