object-src 'self' www.gstatic.com *.spruto.org *.jwpcdn.com
style-src 'self' 'unsafe-inline' *.googleapis.com recreativ.ru
frame-src 'self' www.youtube.com 37.220.36.15 hdgo.cc moonwalk.cc embed.publicvideohost.org video.meta.ua hdgo.cx trailerclub.me streamguard.cc
connect-src 'self' *.gstatic.com www.youtube.com data: kraken.rambler.ru trustjs.net *.rcdn.pro cdnjs-aws.ru uncorejs.ru"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cicinema.com https://cicstatic.com https://cdn.polyfill.io https://www.google.com https://www.gstatic.com
img-src 'self' https://static.cicinema.com https://cicstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' https://static.cicinema.com https://cicstatic.com"
"script-src 'self' vimeo.com https://gist.github.com www.slideshare.net https://query.yahooapis.com 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://www.dropbox.com https://*.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://js.driftt.com https://embed.small.chat https://static.small.chat https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com 'nonce-d6d86b56-f9f0-442d-bcbc-46eb7c3bf1f3' 'sha256-etvssxrwce5clefbzbvzvdrtiroyoxbwwwvevcim5ag=' 'sha256-nzb7w9gyjnurmeidk01d3/detyztrtnxc/dqw7agdy4=' 'sha256-l0tsyaqlac0koby5dcbfawffrs9zxesa+4xg0qdsrdi='
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://modernizr.com https://ajax.googleapis.com https://www.googletagmanager.com https://*.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/analytics.js
img-src 'self' https://www.google.com https://www.google.pl https://stats.g.doubleclick.net https://maps.gstatic.com data: https://maps.googleapis.com https://ssl.google-analytics.com https://www.google-analytics.com
style-src 'self' 'unsafe-inline' https://maps.googleapis.com https://*.google.com https://fonts.googleapis.com
font-src 'self' https://netdna.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com
frame-src 'self' https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.youtube.com/
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.flyasiana.com *.googleapis.com *.youtube.com *.google-analytics.com sslwidget.criteo.com static.criteo.net connect.facebook.net eba-amadeus.netdna-ssl.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.kr h.online-metrix.net www.vpay.co.kr *.bankpay.or.kr nsp.pay.naver.com pay.naver.com *.easypay.co.kr developers.kakao.com code.jquery.com kmpay.lgcns.com pg.cnspay.co.kr developers.kakao.com s.ytimg.com *.gstatic.com remote.captcha.com facebook.com twitter.com service.weibo.com vbv.samsungcard.co.kr *.recopick.com onsalemobile.uplus.co.kr *.connect.travelaudience.com secureapi.eximbay.com"
"default-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' mobile.free.fr"
script-src 'unsafe-inline' 'unsafe-eval' http://192.168.0.53:* http://192.168.0.91:* http://127.0.0.1:* http://pilot.specto.co:* http://staging.specto.co:* http://piloting.specto.co:* http://slco.specto.co:* http://www.icdladmin.com:* http://icdl.tn:* http://www.icdl.tn:* https://www.icdl.tn:* https://icdl.tn:* http://icdladmin.com:* http://iasdemo.specto.co:* https://ias.specto.co:* http://ias.specto.co:* http://localhost:* http://demo.specto.co:*
"default-src 'self' data: https://tools.euroland.com/ https://eurolandirestonia.eurolandir.com https://tools.eurolandir.com/ https://tr.snapchat.com/ https://gamma.euroland.com/ https://8484013.fls.doubleclick.net http://www.youtube.com https://www.alfransi.com.sa/ http://buttons-config.sharethis.com http://platform-api.sharethis.com/ https://www.gstatic.com https://cgi.gstatic.com https://www.google.com/ http://cdnjs.cloudflare.com/ http://fonts.googleapis.com https://fonts.googleapis.com http://maps.gstatic.com/ https://maps.gstatic.com/ http://maps.googleapis.com/ https://maps.googleapis.com/ https://www.google.com/maps/embed  https://maps.googleapis.com/ https://maps.gstatic.com/ https://csi.gstatic.com/ https://fonts.googleapis.com https://fonts.gstatic.com/ https://maps.googleapis.com https://maps.gstatic.com https://fonts.gstatic.com https://www.google.com/maps/embed  http://w.sharethis.com  http://edge.sharethis.com http://seg.sharethis.com http://l.sharethis.com http://google-maps-utility-library-v3.googlecode.com/ https://www.facebook.com http://staticxx.facebook.com https://fonts.googleapis.com http://maps.google.com/maps/ http://csi.gstatic.com/ http://maps.google.com/maps-api-v3/ http://maps.gstatic.com/mapfiles/api-3/ https://developers.google.com/maps/ www.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tools.euroland.com https://tools.eurolandir.com/ https://analytics.twitter.com/ https://sc-static.net/scevent.min.js https://static.ads-twitter.com/uwt.js https://gamma.euroland.com/ http://cdnjs.cloudflare.com/ http://platform-api.sharethis.com/ http://buttons-config.sharethis.com https://www.gstatic.com http://l.sharethis.com https://www.google.com/ maps.google.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com csi.gstatic.com maps.google.com.sa connect.facebook.net https://w.sharethis.com http://w.sharethis.com https://modulusglobal.com https://csi.gstatic.com www.googletagmanager.com
style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com  http://cdnjs.cloudflare.com/ https://w.sharethis.com http://w.sharethis.com https://modulusglobal.com
connect-src 'self' https://www.facebook.com/ http://l.sharethis.com/ maps.google.com vimeo.com www.vimeo.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com csi.gstatic.com www.googletagmanager.com
connect-src 'self' https://* images.fxcash.ru api.fxcash.ru mc.yandex.ru *.zoho.com *.zohopublic.com ws://vts.zohopublic.com js.zohostatic.com *.g.doubleclick.net
frame-src 'self' images.fxcash.ru *.g.doubleclick.net *.zohopublic.com *.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ampproject.org *.facebook.net *.cloudfront.net js.zohostatic.com *.zoho.com tagmanager.google.com *.g.doubleclick.net maps.google.com *.googleapis.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com mc.yandex.ru
style-src 'self' 'unsafe-inline' *.cloudfront.net css.zohostatic.com tagmanager.google.com fonts.googleapis.com
script-src 'self' 'unsafe-inline' 'sha256-lsiuy3hp2ysl4kn4kpi/jm2vc08ftbgogn0irbqd9k0=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
script-src 'self' www.google-analytics.com www.googletagmanager.com code.jquery.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com app.intercom.io widget.intercom.io js.intercomcdn.com
img-src 'self' www.google-analytics.com stats.g.doubleclick.net assets.capterra.com js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com
style-src 'self' fonts.googleapis.com use.fontawesome.com stackpath.bootstrapcdn.com 'unsafe-inline'
font-src fonts.gstatic.com js.intercomcdn.com use.fontawesome.com data:
connect-src www.google-analytics.com stats.g.doubleclick.net api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com app.getsentry.com
child-src share.intercom.io intercom-sheets.com www.youtube.com player.vimeo.com fast.wistia.net
"default-src 'unsafe-eval' 'unsafe-inline' https://aliorbank.pl https://*.aliorbank.pl wss://localhost:* wss://aliorbank.pl wss://*.aliorbank.pl https://st.alior.pl https://api.behavioralengine.com https://api.spoldzielnia.nsaudience.pl data:
img-src 'self' https: data: blob: https://sunbeam.city
media-src 'self' https: data: https://sunbeam.city
connect-src 'self' blob: https://sunbeam.city wss://sunbeam.city
script-src 'self' 'unsafe-inline' 'sha256-7yzbli/jewkk6dhcjl5klgwuacxtx7gp3kumlnp/22a=' 'sha256-1cpjmdsgjczr6ond1cma/y7dge7yykpbbqurqv1azcw=' 'sha256-m+dvfaschzxhrudr35pgoyr9xeslkok1dwkcmpjfnvw=' http://ecx25.siteplug.com/ https://ecx25.siteplug.com/ http://www.1-1ads.com http://*.inspsearchapi.com http://www.google.com http://api.bing.com http://ff.search.yahoo.com/ http://suggest.infospace.com http://api.autocompleteplus.com *.yimg.com https://completr.appspot.com http://js.wincyahoocontent.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://lecionario.com:443 https://*.lecionario.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'strict-dynamic' 'nonce-njmxndc0nwetnzc3ns00mge4lwfkntitmmy5zwfhotkynzjl' 'unsafe-inline' https: http:
script-src 'nonce-5a5548f2be02fe5e499705507fe0b8a1' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google-analytics.com *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com www.googletagmanager.com
child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de www.youtube-nocookie.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' http://unpkg.com https://unpkg.com https://graph.facebook.com https://use.typekit.net http://connect.facebook.net https://connect.facebook.net http://cdn.jsdelivr.net http://cdn.livechatinc.com https://cdn.livechatinc.com http://secure.livechatinc.com https://secure.livechatinc.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net https://www.rondo.cz
style-src 'self' 'unsafe-inline' http://unpkg.com https://unpkg.com http://cdn.jsdelivr.net https://fonts.googleapis.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com
img-src 'self' https://atoto.cz http://i.atoto.cz https://i.atoto.cz https://p.typekit.net https://www.facebook.com http://cdn.livechatinc.com https://cdn.livechatinc.com http://secure.livechatinc.com https://secure.livechatinc.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net data:
connect-src 'self' ws: https://example.com https://graph.facebook.com http://sentry.atoto.cz https://sentry.atoto.cz https://performance.typekit.net http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://www.rondo.cz
font-src 'self' https://use.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com http://cdn.livechatinc.com https://cdn.livechatinc.com http://themes.googleusercontent.com/ https://themes.googleusercontent.com/ http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com
media-src 'self' http://cdn.livechatinc.com https://cdn.livechatinc.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com
frame-src http://staticxx.facebook.com https://staticxx.facebook.com http://secure.livechatinc.com https://secure.livechatinc.com http://www.googletagmanager.com https://www.googletagmanager.com https://*.hotjar.com https://www.rondo.cz https://kdukvh.com https://www.kdukvh.com/ https://cj.dotomi.com/
script-src 'self' https: 'unsafe-eval' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com ajax.googleapis.com
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com
font-src 'self' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.gstatic.com
img-src 'self' data: https://avatars0.githubusercontent.com https://avatars1.githubusercontent.com https://avatars2.githubusercontent.com https://avatars3.githubusercontent.com https://avatars4.githubusercontent.com https://avatars5.githubusercontent.com https://avatars6.githubusercontent.com https://avatars7.githubusercontent.com https://avatars8.githubusercontent.com https://www.google-analytics.com
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://js.maxmind.com 'unsafe-inline'
"frame-ancestors 'self' *.theatrebreaksonline.com theatrebreaksonline.com *.theatrebreaksonline.co.uk theatrebreaksonline.co.uk *.londoncitytheatre.com londoncitytheatre.com *.londoncitytheatre.co.uk londoncitytheatre.co.uk *.shortbreakvouchers.co.uk shortbreakvouchers.co.uk connoisseur-travel.co.uk *.connoisseur-travel.co.uk
script-src 'self' 'sha256-r/8tukw9mxk5mhuojvecbosp2z3tw6mimkmqos2ip+g=' 'sha256-ipg413ctoo06wir4uo/p+mv95rhh+zetgo6lfo38lqe=' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com
style-src 'self' 'sha256-gn8m1katv96komriw/mwyi9go98mfcffbhxfdpty5nu=' 'sha256-9di+kn60ysjlldqwlb1kza+o+ooe0bkysbuz0r0kycs=' 'sha256-ikunttisn9gcy9sp8j9u7tol9hasitnaovxeor+lhnc=' 'sha256-4su6mbwzeifnh4pagmouaebrstwjn4z3pq/s1kn4/kq=' 'sha256-fawq/djrwnpsmubyg9o+s8lavu/nr2djyks6iktlesg=' https://fonts.googleapis.com
img-src 'self' data: https://oss.maxcdn.com https://www.google-analytics.com https://www.googletagmanager.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *
style-src 'self' 'unsafe-inline' http://*.kanhan.com http://*.google.com https://*.google.com http://*.googleapis.com
img-src * 'self' http://www.w3.org http://*.google.com https://*.google.com https://www.google.com.hk https://stats.g.doubleclick.net http://*.gstatic.com http://*.googleapis.com http://www.google-analytics.com https://www.facebook.com https://googleads.g.doubleclick.net http://1.gravatar.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com/ http://pagead2.googlesyndication.com https://adservice.google.com.hk https://googleads.g.doubleclick.net http://www.googleadservices.com https://connect.facebook.net http://*.google.com https://*.google.com http://*.kanhan.com https://h5p.org http://*.addthis.com http://*.google.com http://*.googleapis.com http://www.googletagmanager.com http://crypto-js.googlecode.com https://crypto-js.googlecode.com  https://*.googleapis.com http://*.google-analytics.com https://*.facebook.com http://*.youtube.com https://*.youtube.com http://www.virtuozzo.com http://www.parallels.com https://*.google.com/ http://p.jwpcdn.com https://ssl.p.jqpcdn.com
connect-src 'self' https://googleads.g.doubleclick.net http://*.youtube.com https://*.youtube.com http://*.googleapis.com
object-src http://*.youtube.com https://*.youtube.com http://*.googleapis.com http://www.starferry.com.hk 'self'
child-src 'self' https://www.google.com https://docs.google.com http://*.youtube.com https://*.youtube.com https://h5p.org
frame-src 'self' https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://docs.google.com http://*.youtube.com https://*.youtube.com https://h5p.org
"frame-ancestors vimeo.com player.vimeo.com signnow.com wufoo.com flowplayer.org cloudfront.net %0aedgefcs.net bridge.ciy.com rock.oakhillschurch.com public.serviceu.com h-cdn.com ios.oakhillschurch.com.edgesuite.net w.soundcloud.com 184.72.239.149 drive.flowplayer.org cp121408.live.edgefcs.net"
"connect-src 'self' https://kva-kva.ru https://m.kva-kva.ru https://webcam.kva-kva.ru vstream.kva-kva.ru https://mc.yandex.ru https://moipass.ru
"frame-ancestors http://www.vistaprint.com.au https://www.vistaprint.com.au http://vistaprint.com.au https://vistaprint.com.au
frame-src 'self' https://*.animebytes.tv https://www.youtube-nocookie.com https://*.soundcloud.com
"frame-ancestors https://www.buhl.de https://steuer-web.de https://www.steuer-web.de https://www.altbayerischer.de https://www.aktuell-verein.de"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com stats.kindhouse.com www.projectcbd.org projectcbd.org http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com"
"default-src 'self' *.googleapis.com *.google-analytics.com *.google.com *.gstatic.com *.dotnetnuke.com *.youtu.be *.youtube.com http://api.longurl.org
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.googleapis.com *.google-analytics.com *.google.com *.gstatic.com mitsweb.iitech.dk youtu.be youtube.com *.dotnetnuke.com http://api.longurl.org
style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.gstatic.com mitsweb.iitech.dk *.dotnetnuke.com youtu.be *.youtube.com http://api.longurl.org
img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com data: mitsweb.iitech.dk *.dotnetnuke.com youtu.be *.youtube.com http://api.longurl.org
font-src 'self' *.dotnetnuke.com *.googleapis.com *.gstatic.com *.google-analytics.com youtu.be *.youtube.com *.longurl.org data:
"style-src 'self' 'nonce-71aab757-3b9d-4237-920e-f427d69b886a' https://fonts.googleapis.com/icon https://fonts.googleapis.com/css
script-src https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js 'nonce-ec9389d4-f3ac-4dc5-a346-802830ed8637' https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.6-rc.0/js/select2.min.js https://cdn.jsdelivr.net/npm/marked/marked.min.js https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js https://www.googletagmanager.com/gtag/js https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.google-analytics.com/analytics.js
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.algolia.net https://*.algolia.io https://www.lecomparateurassurance.com https://component.stampyt.io https://cdn.mxpnl.com https://*.algolianet.com https://code.jquery.com https://static.criteo.net https://sslwidget.criteo.com https://www.google.com https://www.gstatic.com
img-src 'self' data: https://preprod.zoomcar.fr https://www.google-analytics.com https://stats.g.doubleclick.net https://zoomcar.fr https://www.google.com https://www.google.fr https://*.openstreetmap.org https://s3.stampyt.io https://www.googletagmanager.com
connect-src 'self' https://sentry.io https://*.algolia.net https://*.algolia.io https://www.googletagmanager.com https://www.google-analytics.com https://*.algolianet.com https://api.stampyt.io https://api.mixpanel.com https://stats.g.doubleclick.net
"script-src 'unsafe-inline' 'unsafe-eval' 'self' platform.twitter.com cdn.syndication.twimg.com rum-static.pingdom.net gb-api-widgets.nvplay.com api-widgets.nvplay.com ajax.googleapis.com widgets.nvplay.com connect.facebook.net *.pinterest.com pinterest.com static.hotjar.com maps.google.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com
frame-src 'self' *.tourdash.com *.smartrecruitonline.com servedby.flashtalking.com *.doubleclick.net twitter.com *.twitter.com www.facebook.com *.pinterest.com pinterest.com player.vimeo.com www.google.com s7.addthis.com www.youtube.com *.webspellchecker.net"
"default-src data: 'self' 'unsafe-inline' https://vjs.zencdn.net *.blogis.net m-shes.ru buawdshes.ru kinojove.net
"connect-src 'self' i.gyazo.com wss://scrapbox.io https://upload.gyazo.com https://gyazo.com https://sentry.io
frame-src 'self' www.google.com www.youtube.com player.vimeo.com js.stripe.com
script-src 'self' cdnjs.cloudflare.com www.google-analytics.com maps.googleapis.com 'unsafe-eval' js.stripe.com
style-src 'self' fonts.googleapis.com cdnjs.cloudflare.com 'unsafe-inline'
"script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com ajax.googleapis.com code.jquery.com www.youtube.com  connect.facebook.net s.ytimg.com www.googletagmanager.com tagmanager.google.com maps.google.com maps.googleapis.com maps.gstatic.com js.agkn.com c.betrad.com d.agkn.com staticxx.facebook.com static.agkn.com sk-ii-desktop-th-cdn.azureedge.net"
"default-src 'self' data:             https://*.bing.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://cdnmedia.azureedge.net             https://*.mathtag.com             https://www.google-analytics.com             https://parctestapi.azurewebsites.net             https://*.caeparcaviation.com             https://apilayer.net             https://our.umbraco.org             https://*.licdn.com             https://*.scansafe.net             https://*.scansafe.com
font-src 'self' data:             https://*.bing.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://cdnmedia.azureedge.net             https://*.mathtag.com             https://*.scansafe.net             https://*.scansafe.com
script-src 'self' 'unsafe-inline' 'unsafe-eval'             https://*.bing.com             https://disqus.com             https://*.disquscdn.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://*.mathtag.com             https://ajax.googleapis.com             https://www.google-analytics.com             https://cdnmedia.azureedge.net             https://connect.facebook.net             https://s3.amazonaws.com             https://*.disqus.com             https://cdnjs.cloudflare.com             https://*.google.com             https://www.gstatic.com             https://maps.googleapis.com             https://*.twitter.com             https://caeparcaviation.us10.list-manage.com             https://*.licdn.com             https://*.vepxl1.net             https://*.flx1.com             https://ak1s.abmr.net             https://www.bizographics.com             https://*.adnxs.com             https://podio.com             https://*.scansafe.net             https://*.scansafe.com
style-src 'self' 'unsafe-inline'             https://*.bing.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://*.disqus.com             https://*.disquscdn.com             https://cdnjs.cloudflare.com             https://cdnmedia.azureedge.net             https://*.mathtag.com             https://*.scansafe.net             https://*.scansafe.com
frame-src 'self'             https://*.bing.com             https://connect.facebook.net             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://*.youtube.com             https://disqus.com             https://*.disqus.com             https://*.facebook.com             https://*.google.com             https://*.twitter.com             https://*.mathtag.com             https://podio.com             https://*.scansafe.net             https://*.scansafe.com
media-src 'self'             https://*.bing.com             https://*.disquscdn.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://*.youtube.com             http://umbraco.tv             https://*.scansafe.net             https://*.scansafe.com
connect-src 'self'             https://*.bing.com             https://*.linkedin.com             https://*.ads.linkedin.com             https://*.doubleclick.net             https://*.fls.doubleclick.net             https://*.twitter.com             https://*.microsoft.com             https://*.facebook.com             wss://realtime.services.disqus.com             https://parctestapi.azurewebsites.net             https://*.caeparcaviation.com             https://apilayer.net             https://*.scansafe.net             https://*.scansafe.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.verticalscreen.com
"default-src 'self' *.jimmybeanswool.com *.googleapis.com *.gstatic.com *.cloudfront.net *.amazonaws.com *.youtube.com *.addthis.com *.doubleclick.net *.facebook.com  *.google.com jimmybeanswool.blogspot.com jimmybeanswool.zendesk.com assets.zendesk.com *.zopim.com v2.zopim.com *.zopim.io wss://*.zopim.com
style-src 'self' 'unsafe-inline' *.jimmybeanswool.com https://assets.juicer.io *.googleapis.com *.gstatic.com *.cloudfront.net *.amazonaws.com *.youtube.com *.twitter.com * use.fontawesome.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.amazonaws.com *.bizrate.com *.blogger.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.googleusercontent.com *.jimmybeanswool.com jimmybeanswool.blogspot.com *.jquery.com *.juicer.io *.twitter.com *.youtube.com *.zopim.com *.zopim.com *.zopim.io assets.juicer.io assets.zendesk.com cdn.ywxi.net jimmybeanswool.zendesk.com static.zdassets.com
object-src 'self' 'unsafe-inline' 'unsafe-eval' *.jimmybeanswool.com  *.googleapis.com  *.google.com *.twitter.com *.youtube.com jimmybeanswool.zendesk.com jimmybeanswool.blogspot.com assets.zendesk.com *.zopim.com *.zopim.io wss://*.zopim.com
connect-src  'self' 'unsafe-inline' 'unsafe-eval' *.jimmybeanswool.com *.youtube.com *.google.com *.zdassets.com jimmybeanswool.blogspot.com jimmybeanswool.zendesk.com assets.zendesk.com *.zopim.com *.zopim.io wss://*.zopim.com https://www.juicer.io *.amazonaws.com
font-src 'self' https://*.gstatic.com https://assets.juicer.io jimmybeanswool.blogspot.com *.zopim.com https://v2.zopim.com use.fontawesome.com
frame-src 'self' *.facebook.com *.google.com *.jimmybeanswool.com jimmybeanswool.blogspot.com *.youtube.com
img-src 'self' data: https://platform-lookaside.fbsbx.com https://*.googleusercontent.com https://maps.gstatic.com https://*.rentalcars.com https://www.googletagmanager.com https://*.googleapis.com https://azoresgetaways.com https://*.azoresgetaways.com https://stats.g.doubleclick.net https://*.google.com https://*.google.pt https://*.zopim.com https://www.google-analytics.com https://*.facebook.com https://cdsusa.veinteractive.com https://adfarm.mediaplex.com https://pub.sapo.pt https://www.googleadservices.com https://www.globalmediaserver.com https://cdn.rcstatic.com https://images.travelnow.com https://photos.hotelbeds.com https://seal.godaddy.com https://sealserver.trustwave.com https://pci.usd.de https://*.resosys.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.addthisedge.com https://*.addthis.com https://*.resosys.com https://code.jquery.com https://*.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.zopim.com https://*.zopim.io https://sealserver.trustwave.com https://seal.godaddy.com https://cdnjs.cloudflare.com https://*.google.com https://*.google.pt https://www.gstatic.com https://cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' https://www.gstatic.com http://fonts.googleapis.com https://fonts.googleapis.com https://images.resosys.com https://cdnjs.cloudflare.com
frame-src 'self' https://*.addthis.com https://*.facebook.com https://*.hotjar.com https://*.emjcd.com https://*.google.com https://*.youtube.com
font-src 'self' data: https://*.resosys.com https://*.zopim.com https://fonts.gstatic.com
connect-src 'self' https://*.addthis.com wss://*.zopim.com wss://*.hotjar.com https://*.hotjar.com https://www.google-analytics.com"
script-src https://*.cpdax.com https://cpdax.com https://*.intercom.io https://*.gstatic.com https://*.intercomcdn.com https://*.google.com https://*.google-analytics.com https://*.intercomassets.com https://*.twitter.com https://*.daumcdn.net 'nonce-dmfyihnkzia9iccxmjmxmjmn'
connect-src 'self' https://*.cpdax.com https://cpdax.com https://*.cpdax.com:8443 https://cpdax.com:8443 wss://*.cpdax.com:8443 wss://*.cpdax.com:8443 https://*.intercom.io wss://*.intercom.io https://app.getsentry.com https://js.intercomcdn.com https://*.coinplugapis.com https://*.tradingview.com https://*.twitter.com https://*.google.com https://*.cpdax.com:9009
font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com https://cdn.rawgit.com
child-src 'self' https://www.cpdax.com https://cpdax.com https://www.google.com https://*.twitter.com https://intercom-sheets.com
img-src 'self' https://*.cpdax.com https://cpdax.com https://*.google-analytics.com https://js.intercomcdn.com https://static.intercomassets.com https://*.twitter.com https://stats.g.doubleclick.net https://*.google.com https://*.google.co.kr https://*.google.co.jp https://s3.ap-northeast-2.amazonaws.com data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com www.youtube.com blog.playstaxel.com www.humblebundle.com store.steampowered.com data:
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it www.googleadservices.com https://*.g.doubleclick.net www.google-analytics.com *.googleapis.com wurfl.io *.gstatic.com *.google.com *.google.it www.compass.it *.opentok.com ws: wss://*.tokbox.com https://*.tokbox.com
frame-ancestors 'self' https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it
frame-src 'self' 'unsafe-inline' data: https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it
object-src 'self' 'unsafe-inline' data: https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it
img-src 'self' stats.g.doubleclick.net www.google-analytics.com www.google.com www.googletagmanager.com cdn.ckeditor.com shield.sitelock.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com pi.pardot.com www.google-analytics.com www.googletagmanager.com www2.cisive.com cdn.ckeditor.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.go-mpulse.net https://ds-aksb-a.akamaihd.net https://connect.facebook.net https://*.instagram.com http://*.instagram.com https://cdnjs.cloudflare.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.googleadservices.com https://www.googleadservices.com http://www.google-analytics.com http://*.doubleclick.net https://*.doubleclick.net http://www.youtube.com https://www.youtube.com http://*.ytimg.com https://*.ytimg.com https://www.google.com http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.surveymonkey.com
child-src 'self' https://*.instagram.com http://*.instagram.com https://www.youtube.com https://forms.alange-soehne.com https://*.doubleclick.net http://*.doubleclick.net https://*.google.de https://*.google.com https://*.surveymonkey.com https://surveymonkey.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com http://*.googleapis.com https://s.ytimg.com
"script-src 'self' www.papara.com papara.com api.instagram.com maps.googleapis.com mc.yandex.ru www.googletagmanager.com tagmanager.google.com www.googleadservices.com graph.facebook.com staticxx.facebook.com connect.facebook.net stats.g.doubleclick.net www.google.com www.google-analytics.com ajax.googleapis.com www.google.com.tr www.gstatic.com apis.google.com googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'sha256-swkv9ov0varhkewx3l72dpunkfzzf9emizwfckcezsm=' 'sha256-tjjugbyo/bzehd5o3yy9ii2naridnjkem1lspyybdq8=' code.jquery.com https://*.googletagmanager.com https://*.google-analytics.com
style-src 'self' 'sha256-wsbuy47b95zvj79mxkkbwqex5utctktgthkga5u6qmy=' 'sha256-47deqpj8hbsa+/timw+5jceuqerkm5nmpjwzg3hsufu=' fonts.googleapis.com
img-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk data:
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' * www.google-analytics.com ajax.googleapis.com www.facebook.com
"default-src 'self' *.jwgecko.com *.googleapis.com *.google.com 'unsafe-inline'
font-src 'self' *.jwgecko.com *.googleapis.com fonts.gstatic.com themes.googleusercontent.com *.webspellchecker.net
child-src 'self' *.jwgecko.com https://docs.google.com *.googleapis.com *.google.com *.youtube.com *.vimeo.com
style-src 'self' *.jwgecko.com *.googleapis.com *.google.com *.webspellchecker.net assets.freshdesk.com cdnjs.cloudflare.com 'unsafe-inline'
script-src 'self' *.jwgecko.com *.googleapis.com *.google.com *.webspellchecker.net *.vimeo.com cdn.polyfill.io assets.freshdesk.com *.cloudflare.com 'unsafe-inline' 'unsafe-eval'
connect-src 'self' *.jwgecko.com *.googleapis.com *.google.com *.webspellchecker.net 'unsafe-inline' 'unsafe-eval'
"default-src https: 'unsafe-eval' 'unsafe-inline' 'self' data: blob: wss://*.zopim.com https://fls-ns.amazon.com https://payments.amazon.com
, frame-src 'self' https://*.facebook.com https://*.google.com
, script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://www.youtube.com https://*.pinterest.com https://*.twitter.com https://*.payments-amazon.com https://*.amazon.com https://s.ytimg.com https://*.nr-data.net https://www.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://static.hotjar.com https://*.newrelic.com https://d1igp3oop3iho5.cloudfront.net https://www.searchanise.com https://connect.facebook.net https://*.g.doubleclick.net https://script.hotjar.com https://snisecdn-feh571kz.stackpathdns.com https://*.zopim.com wss://*.zopim.com https://*.zopim.org https://*.zopim.io https://*.google.com https://searchanise-ef84.kxcdn.com/"
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com:* *.bootstrapcdn.com:* *.googleusercontent.com:* *.webspellchecker.net:*  *.twitter.com
script-src 'self' 'unsafe-inline'  *.googleapis.com:* *.google.com *.bootstrapcdn.com:* *.googleusercontent.com:* *.webspellchecker.net:* *.google-analytics.com:* *.highcharts.com cdn.jsdelivr.net:*  *.twitter.com  *.twimg.com data:
style-src 'self' 'unsafe-inline' *.googleapis.com:* cdn.jsdelivr.net:* *.twitter.com
img-src 'self'  *.bootstrapcdn.com:* *.googleapis.com:* *.googleusercontent.com:* *.google-analytics.com *.twitter.com *.twimg.com *.gstatic.com data:
frame-src 'self'   *.constantcontact.com:80 *.youtube.com *.google.com *.vimeo.com * data:
child-src 'self' 'unsafe-inline'  *.constantcontact.com:80 *.youtube.com *.google.com *.vimeo.com *
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dsikjkliznac3.cloudfront.net https://d2y2l77dht9e8d.cloudfront.net https://d2r1yp2w7bby2u.cloudfront.net https://connect.facebook.net https://wzrkt.com https://www.google-analytics.com https://bat.bing.com https://wchat.freshchat.com https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com https://chuknu.sokrati.com https://tracking.sokrati.com https://checkout.razorpay.com https://www.googleadservices.com https://www.pharmeasy.in https://play.gramombird.com https://googleads.g.doubleclick.net https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://cdn.asbmit.com/static/js/npixel.js https://track.click2com.com/aff_l https://coupondunia.go2cloud.org/aff_l https://track.in.omgpm.com/1064240/transaction.asp https://tracking.kartofads.com/aff_l https://www.googleadservices.com/pagead/conversion.js https://tracking.affiliatehub.co.in/sl295 https://opicle.go2cloud.org/aff_l https://tracking.proformics.com/aff_l https://ade.clmbtech.com/cde/eventtracking.htm https://tracking.vcommission.com/sldbz https://s3-eu-west-1.amazonaws.com/static.wizrocket.com/js/sw_webpush.js https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://tagmanager.google.com https://tracking.salesleaf.com https://t.dcmn.io/ https://www.gstatic.com/ https://static.criteo.net https://sslwidget.criteo.com https://event.getblue.io https://sslwidget.getblue.io https://cdn.mxpnl.com https://d3ow2108bmqeui.cloudfront.net/appsflyer-banner.min.js https://ad.doubleclick.net"
script-src 'self' 'nonce-3afb688f88837b40ffd7d2ec89948d78ef8c7e881b79da8af4f8786700f47a97' 'nonce-fc55659cc77ed67b8c151d2726be982c2ea82f917480f413afc5945a9cb1866a' 'nonce-3e146e9033f936c5583a43489a6e3821ffd0d28c145c282275552dad7025d9fb' https://cdn.ravenjs.com cdnjs.cloudflare.com http://connect.facebook.net *.facebook.net http://platform.twitter.com *.twitter.com https://webcdn.streamtest.net http://sp.analytics.yahoo.com/ https://sp.analytics.yahoo.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.yimg.com bat.bing.com *.hotjar.com http://yapi.zoomsupport.com https://yapi.zoomsupport.com https://*.stopad.io *.stopad.io https://www.google-analytics.com www.google-analytics.com https://www.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com www.googleadservices.com https://*.googleapis.com *.googleapis.com https://mc.yandex.ru mc.yandex.ru trk.cetrk.com https://dnn506yrbagrg.cloudfront.net dnn506yrbagrg.cloudfront.net https://*.newrelic.com *.newrelic.com https://s3.amazonaws.com s3.amazonaws.com https://seal.websecurity.norton.com https://gstatic.com *.gstatic.com https://google.com *.google.com https://*.firebaseio.com wss://*.firebaseio.com http://*.firebaseio.com https://googleads.g.doubleclick.net
"default-src 'self' *.botframework.com  *.inspectlet.com *.facebook.net *.facebook.com *.gstatic.com *.googleapis.com use.fontawesome.com www.googleadservices.com www.google-analytics.com ajax.googleapis.com cdn.bootstrapcdn.com  https: 'unsafe-inline' 'unsafe-eval' data:
connect-src 'self' https://*.fullstory.com https://*.botframework.com wss://*.botframework.com  wss://*.zopim.com wss://*.inspectlet.com http://*.inspectlet.com https://www.google-analytics.com https://secure.dotsure.co.za/shared/common/track
script-src 'self' 'nonce-33f11d59-df67-4b47-96f7-3fffc226c07a' 'strict-dynamic' 'unsafe-inline'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *.connectwise.com *.appcues.com *.appcues.net *.connectwisedev.com *.myconnectwise.net cwview.com *.wise-pay.com *.wise-sync.com
font-src 'self' 'unsafe-inline' 'unsafe-eval' *.connectwise.com *.googleapis.com
connect-src 'self' *.connectwise.com *.connectwisedev.com *.myconnectwise.net cwview.com *.appcues.net wss://*.appcues.net cheetah
child-src 'self' https://*.belastingdienst.nl https://*.cdn.optimizely.com https://secure.opinionlab.com https://*.readspeaker.com https://www.anbi-instellingen.nl
\t\tscript-src https: 'unsafe-eval' 'unsafe-inline' 'self' https://apis.google.com https://ajax.googleapis.com/
"frame-ancestors 'self' *.donatelifetoday.com donatelifetoday.com *.donatelifenw.org donatelifenw.org"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.cirrusgroup.com/ www.cirrusgroupllc.com/ https://daycareworks.com/ https://family.daycareworks.com/ https://connect.daycareworks.com/ https://ccsd.daycareworks.com/ https://ccsdfamily.daycareworks.com/ https://ymcaoc.daycareworks.com/ https://ymcaocf.daycareworks.com/ https://api.daycareworks.com/ https://beta.daycareworks.com/ https://beta.daycareworks.com/ http://www.google-analytics.com/ https://*.zoho.com https://*.zohostatic.com
object-src 'self' 'unsafe-inline' 'unsafe-eval' www.cirrusgroup.com/ www.cirrusgroupllc.com/ https://daycareworks.com/ https://family.daycareworks.com/ https://connect.daycareworks.com/ https://ccsd.daycareworks.com/ https://ccsdfamily.daycareworks.com/ https://ymcaoc.daycareworks.com/ https://ymcaocf.daycareworks.com/ https://api.daycareworks.com/ https://beta.daycareworks.com/ http://www.google-analytics.com/ https://*.zoho.com https://*.zohostatic.com"
script-src 'self' *.universia.net *.fundacionuniversia.net *.jquery.com *.jsdelivr.net *.twitter.com *.pinterest.com *.scorecardresearch.com *.google-analytics.com *.readspeaker.com *.addthis.com *.facebook.net 'unsafe-inline' 'unsafe-eval'
style-src 'self' *.universia.net *.fundacionuniversia.net *.bootstrapcdn.com *.jsdelivr.net *.readspeaker.com 'unsafe-inline'
img-src 'self' *.universia.net *.fundacionuniversia.net *.scorecardresearch.com *.google-analytics.com *.google.com *.google.es *.readspeaker.com *.g.doubleclick.net *.w3.org *.w.org *.twitter.com data:
font-src 'self' *.universia.net *.fundacionuniversia.net *.bootstrapcdn.com
frame-src 'self' *.universia.net *.fundacionuniversia.net *.facebook.com *.addthis.com *.twitter.com
connect-src 'self' *.universia.net *.fundacionuniversia.net *.addthis.com"
"img-src 'self' *.trade.tt d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com data: https://account.trade.tt
style-src 'self' blob: 'unsafe-inline' *.trade.tt https://account.trade.tt d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.trade.tt https://account.trade.tt d3mvnvhjmkxpjz.cloudfront.net cdn.usersnap.com api.usersnap.com"
"script-src 'nonce-c6qcorsv2d' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: http:
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.retrip.jp *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.google-analytics.com *.pinterest.com *.twitter.com *.youtube.com *.googlesyndication.com *.cloudflare.com *.doubleclick.net *.caprofitx.com *.googleadservices.com *.popin.cc *.treasuredata.com *.amoad.com *.criteo.com *.i-mobile.co.jp *.impact-ad.jp *.yimg.jp *.gmossp-sp.jp *.oct-pass.net *.nend.net *.mtburn.com *.ad-stir.com *.triver.jp *.criteo.net *.adtdp.com *.ca-conv.jp *.rakuten.co.jp *.adjust-net.jp *.gunosy.com *.softbank.jp *.yahoo.co.jp *.openx.net *.socdm.com *.uliza.jp *.genieesspv.jp *.advg.jp *.microad.jp *.rubiconproject.com *.mbww.com *.ampproject.org *.advertising.com *.adroll.com *.mathtag.com *.ladsp.com *.2mdn.net *.gssprt.jp *.zimg.jp *.logly.co.jp *.tapone.jp *.proparm.jp asset: *.appspot.com *.adingo.jp *.zucks.net *.fluct.me *.skyscanner.net *.goldspotmedia.com a248.e.akamai.net *.speee-ad.jp speee-ad.akamaized.net *.google.co.jp *.docomo.ne.jp *.cinarra.com *.flashtalking.com *.apvdr.com *.x-lift.jp *.adsafeprotected.com *.ads-twitter.com *.amazon-adsystem.com bs.serving-sys.com *.bs.serving-sys.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://ws.sharethis.com https://t.sharethis.com https://assets.pinterest.com https://count-server.sharethis.com https://apis.google.com https://log.pinterest.com
child-src 'self' https://seg.sharethis.com https://ws.sharethis.com https://t.sharethis.com https://ws.sharethis.com https://accounts.google.com https://apis.google.com https://sledoruiz.carto.com https://www.youtube.com https://datawrapper.dwcdn.net https://c.sharethis.mgr.consensu.org
img-src 'self' data: https://www.google-analytics.com https://l.sharethis.com https://ws.sharethis.com https://stats.g.doubleclick.net https://sb.scorecardresearch.com
"default-src 'self'  googleads.g.doubleclick.net www.google-analytics.com app-eu.readspeaker.com f1-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com https://r3.talklets-secure.com r3.talklets-secure.com spellzone.youcanbook.me www.youtube.com player.vimeo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com pagead2.googlesyndication.com storage.googleapis.com googleads.g.doubleclick.net www.googletagmanager.com ajax.googleapis.com adservice.google.com adservice.google.co.uk f1-eu.readspeaker.com app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com https://r3.talklets-secure.com www.googleapis.com player.vimeo.com
img-src 'self' data: storage.googleapis.com pagead2.googlesyndication.com www.google-analytics.com  f1-eu.readspeaker.com app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com chart.googleapis.com/chart
style-src 'self' 'unsafe-inline' app-eu.readspeaker.com f1-eu.readspeaker.com
"frame-ancestors 'self' https://allfin.com.ua/ https://kreditonlayn.com/ http://kreditonlayn.su/ https://creditkaca.com/ https://creditkaca.com.ua/ https://creditcasa.com.ua/ http://kredit-na-kartu.net/ http://sravni-kredit.net/ http://creditkassa.com/ http://kreditnakartu.net/"
script-src 'self' https://cdn.amplitude.com/libs/ 'unsafe-inline' 'nonce-jl/sxdv2qp9du9kohtfejanq6etljfex8rgyf2n3wknbfzsx'
frame-src www.facebook.com hooks.stripe.com stripe.com www.youtube.com bid.g.doubleclick.net 'self' www.google.com www.googletagmanager.com *.fls.doubleclick.net js.stripe.com nonce-efadd81df424fe701f7a0664eb841ea0e408704d
script-src data: 'self' 'unsafe-eval' beacon-v2.helpscout.net translate.google.com translate.googleapis.com www.gstatic.com js.stripe.com use.fontawesome.com googleads.g.doubleclick.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com connect.facebook.net www.google.com js.stripe.com 'unsafe-inline'
connect-src 'self' nonce-efadd81df424fe701f7a0664eb841ea0e408704d wss://ws-helpscout.pusher.com core33-helpscout.pusher.com sentry.io sockjs-helpscout.pusher.com d3hb14vkzrxvla.cloudfront.net beaconapi.helpscout.net chatapi.helpscout.net translate.googleapis.com translate.google.com stats.g.doubleclick.net www.google-analytics.com
img-src 'self' data: d33v4339jhl8k0.cloudfront.net porkbunblog.files.wordpress.com www.googletagmanager.com www.gstatic.com translate.google.com translate.googleapis.com shareasale.com stats.g.doubleclick.net www.google.com googleads.g.doubleclick.net www.google-analytics.com www.facebook.com q.stripe.com nonce-efadd81df424fe701f7a0664eb841ea0e408704d
style-src 'self' translate.googleapis.com fonts.googleapis.com 'unsafe-inline'
"default-src 'self' maps.googleapis.com maps.gstatic.com www.handy-signatur.at
child-src 'self' labs.a-trust.at www.e-tresor.at www.youtube.com www.handy-signatur.at www.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.handy-signatur.at maps.googleapis.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://ajax.aspnetcdn.com https://ajax.googleapis.com https://ak1s.abmr.net https://bat.bing.com https://cdnjs.cloudflare.com https://connect.facebook.net https://*.cloudfront.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://mathid.mathtag.com https://pixel.mathtag.com https://platform.twitter.com https://script.crazyegg.com https://service.maxymiser.net https://st1.dialogtech.com https://tags.srv.stackadapt.com https://walkscore.com https://ws.sessioncam.com https://www.google.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.rentpathcode.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://cf.kampyle.com
img-src 'self' data: http://image.email.avalonbay.com http://avaloncommunities.com http://static.avalonbay.com https://*.avalonbay.com https://*.avaloncommunities.com https://bat.bing.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://pixel.mathtag.com https://stats.g.doubleclick.net https://st2.dialogtech.com https://rt.spongecell.com https://walkscore.com https://ws.sessioncam.com https://www.facebook.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com
frame-src https://*.doubleclick.net https://*.merchante-solutions.com https://connect.facebook.net https://pixel.mathtag.com https://service.maxymiser.net https://syndication.twitter.com https://www.facebook.com https://www.googletagmanager.com https://www.youtube.com
connect-src https://*.avalonbay.com https://*.avaloncommunities.com https://*.avalonprop.com https://*.merchante-solutions.com https://identity.rentpathservices.com https://stats.g.doubleclick.net https://ws.sessioncam.com https://www.google.com https://www.google-analytics.com
frame-src 'self' 'unsafe-inline' https://www.facebook.com/ https://api.motion.ai/
img-src 'self' 'unsafe-inline' 'unsafe-eval' https://lt45.net/ www.lt45.net/"
connect-src 'self' wss://onlinezakladki.ru https://*.yandex.ru wss://*.yandex.net https://*.bing.com
script-src  'self' 'unsafe-inline' 'unsafe-eval' data: about: https://*.yandex.ru https://*.yandex.net https://*.wikipedia.org https://*.mail.ru https://*.google.ru https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.adguard.com https://*.bootstrapcdn.com https://*.jquery.com https://duckduckgo.com https://*.yahoo.com/ https://*.bing.com
img-src  'self' data: http://*.onlinezakladki.ru https://*.yandex.ru https://*.yandex.ua https://*.yandex.com https://*.webvisor.org https://*.webvisor.com https://yastatic.net https://*.gstatic.com https://*.google-analytics.com
style-src 'self' 'unsafe-inline' data: https://*.bootstrapcdn.com/ https://*.googleapis.com
font-src 'self' https://*.bootstrapcdn.com https://fonts.gstatic.com https://*.skype.com
child-src 'self' blob: data: https://*.youtube.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ssl.google-analytics.com"
"script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleadservices.com *.bizographics.com *.facebook.net pro.fontawesome.com *.stripe.com js.hs-scripts.com js.hs-analytics.net js.hsleadflows.net *.intercom.io js.intercomcdn.com *.tinymce.com googleads.g.doubleclick.net *.linkedin.com"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://howwegettonext.com:443 https://*.howwegettonext.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.natenom.com https://*.natenom.de
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.rawgit.com cdn.jsdelivr.net
style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net
"default-src 'self' data: https://www.facebook.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.googletagmanager.com https://capmetro.hafas.cloud https://maps.google.com https://action.dstillery.com https://www.google.com https://apis.google.com https://www.gstatic.com https://s.thebrighttag.com https://translate.googleapis.com http://s.btstatic.com https://s.btstatic.com https://geo1.ggpht.com https://geo2.ggpht.com https://geo3.ggpht.com https://cbks0.googleapis.com https://geo0.ggpht.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com http://www.youtube.com https://ssl.google-analytics.com https://fonts.googleapis.com https://gishost-osm-b.hacon.de https://s3.amazonaws.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de
frame-src 'self' https://app.powerbi.com https://tagmanager.google.com https://www.googletagmanager.com https://app.capmetro.org https://www.google.com/ http://www.youtube.com https://i.icomoon.io https://s3.amazonaws.com https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud
child-src 'self' https://tagmanager.google.com https://www.googletagmanager.com http://www.youtube.com https://translate.google.com https://s3.amazonaws.com https://capmetro.hafas.de https://capmetro.hafas.cloud
frame-ancestors 'self' https://app.powerbi.com https://tagmanager.google.com https://www.googletagmanager.com https://translate.google.com http://www.youtube.com https://capmetro.hafas.de https://capmetro.hafas.cloud
script-src 'self' 'unsafe-inline' https://connect.facebook.net https://cdnjs.cloudflare.com https://tagmanager.google.com  https://www.googletagmanager.com https://bs.serving-sys.com https://googleads.g.doubleclick.net https://www.googleadservices.com/ https://www.googletagmanager.com http://s.btstatic.com/ https://static.ctctcdn.com https://static.ctctcdn.com/ https://apis.google.com https://translate.googleapis.com https://s.btstatic.com  https://s.thebrighttag.com https://maps.google.com https://maps.googleapis.com https://fonts.googleapis.com https://s3.amazonaws.com https://ssl.google-analytics.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://tagmanager.google.com  https://www.googletagmanager.com https://translate.googleapis.com/ https://fonts.googleapis.com https://s3.amazonaws.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-mjezodzmy2utyzc3ns00zgjmltkyyjytzjm5zjnhnmfjnwqy'
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.google-analytics.com *.pinterest.com *.googleadservices.com *.facebook.com *.facebook.net *.myfonts.net *.addthis.com *.googleapis.com apis.google.com"
"default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://epochemagazine.org:443 https://*.epochemagazine.org:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://quip-amazon-cdn.com https://quip-cdn.com
"script-src https://*.googleapis.com https://cdn.dashjs.org https://*.adobedtm.com http://*.akamaihd.net https://*.akamaihd.net https://*.fluor.com https://*.typekit.net 'unsafe-inline' 'unsafe-eval'"
"frame-ancestors 'self' beobachter.ch *.beobachter.ch hypoplus.ch *.hypoplus.ch handelszeitung.ch *.handelszeitung.ch bilanz.ch *.bilanz.ch"
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-mzm4mzaymzqtzjizny00yzrhlwe2nmmtntmyota2ngrmmzvk'
"default-src 'self' https://*.cloudfront.net https://cloudfront-labs.amazonaws.com https://player.youku.com https://in.hotjar.com wss://ws2.hotjar.com https://insights.hotjar.com https://vars.hotjar.com https://bid.g.doubleclick.net https://certify.alexametrics.com wss://ws.pusherapp.com https://gpndatacom.freshdesk.com wss://chat.freshdesk.com https://*.pusher.com https://sockjs.pusher.com https://js.pusher.com https://maps.googleapis.com https://d36mpcpuzc4ztk.cloudfront.net https://chat.freshdesk.com https://www.google.pl https://www.facebook.com https://connect.facebook.net https://www.google.com https://www.youtube.com https://fonts.gstatic.com https://checkout.txpmnts.com https://checkout.gpnpay.com https://stats.g.doubleclick.net http://docs.guzzlephp.org https://www.google-analytics.com https://*.freshchat.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://ga.clearbit.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://static.hotjar.com https://certify-js.alexametrics.com https://stats.pusher.com https://chat.freshdesk.com https://js.pusher.com https://freegeoip.net https://connect.facebook.net https://d36mpcpuzc4ztk.cloudfront.net https://checkout.txpmnts.com https://checkout.gpnpay.com https://www.googletagmanager.com https://www.google-analytics.com https://*.freshchat.com
style-src 'self' 'unsafe-inline' https://d36mpcpuzc4ztk.cloudfront.net https://fonts.googleapis.com http://docs.guzzlephp.org https://*.freshchat.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.siteswithcontent.com cdn.contentsitesrv.com cdnjs.cloudflare.com *.googletagmanager.com *.yadro.ru fonts.gstatic.com yandex.ru *.yandex.ru google-analytics.com *.google-analytics.com yastatic.net www.facebook.com s1vesta.com *.s1vesta.com s2blosh.com *.s2blosh.com sw1block.com *.sw1block.com rtb.com.ru bael5.variti.net actionteaser.ru *.actionteaser.ru marketgid.com *.marketgid.com tovarro.com *.tovarro.com mirs.com *.mirs.com criteo.com *.criteo.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.banktestov.ru banktestov.ru an.yandex.ru cdn.ampproject.org adservice.google.am adservice.google.nl adservice.google.de adservice.google.cz adservice.google.ca adservice.google.lv www.googletagservices.com adservice.google.us adservice.google.com.tj adservice.google.co.nz adservice.google.ee adservice.google.lt adservice.google.es adservice.google.it adservice.google.fr adservice.google.co.il adservice.google.kg adservice.google.pl adservice.google.co.uz adservice.google.az adservice.google.co.uk yastatic.net https://www.googletagmanager.com https://adservice.google.com adservice.google.com.ua adservice.google.md https://adservice.google.ru adservice.google.kz adservice.google.by googleads.g.doubleclick.net www.aliexpress.com adservice.aliexpress.com *.alicdn.com https://www.googleapis.com clients1.google.com cse.google.com https://login.vk.com img.yandex.net clck.yandex.ru www.google.com www.google.ru www.gstatic.com yandex.st pagead2.googlesyndication.com vk.com userapi.com mc.yandex.ru www.google-analytics.com https://pagead2.googlesyndication.com ajax.googleapis.com
img-src 'self' data: www.banktestov.ru banktestov.ru an.yandex.ru *.mds.yandex.net www.google.co.nz www.google.by www.google.kz www.google.com.ua www.google.am www.google.fr www.google.es www.google.kg www.google.az www.google.co.uz www.google.md www.google.lt www.google.de www.google.ca www.google.cz www.google.co.il www.google.nl www.google.us www.google.com.tj www.google.lv www.google.co.uk https://csi.gstatic.com https://www.google.ru dmtracking2.alibaba.com www.aliexpress.com adservice.aliexpress.com *.alicdn.com https://stats.g.doubleclick.net https://www.googleapis.com clients1.google.com *.2mdn.net https://*.2mdn.net pagead2.googlesyndication.com www.google.pl www.google.ee www.google.com vk.com yastatic.net counter.yadro.ru mc.yandex.ru www.google-analytics.com
frame-src 'self' openu.ru yastatic.net adservice.aliexpress.com cse.google.com cse.google.ru awaps.yandex.ru *.doubleclick.net https://*.doubleclick.net *.googleadservices.com https://*.googleadservices.com *.googlesyndication.com https://*.googlesyndication.com https://login.vk.com vk.com https://vk.com www.google.ru
script-src data: 'unsafe-inline' 'unsafe-eval' https:
"connect-src 'self' https://checkout.stripe.com https://sentry.io https://www.google-analytics.com
"frame-src 'self' *.edjin.com *.hotmaths.com.au *.cambridge.org *.cambridge.edu.au www.youtube.com *.google.com *.googleapis.com https://view.ceros.com https://cdn.edjin.com https://media.edjin.com https://www.youtube.com *.surveymonkey.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.nl https://www.google.com.sg https://www.google.com.my https://www.google.fr https://www.google.de https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ca https://www.google.co.in https://www.google.com.hk https://www.google-analytics.com https://www.googleadservices.com https://fonts.googleapis.com https://maps.googleapis.com https://www.googletagmanager.com https://csi.gstatic.com https://maps.gstatic.com https://www.gstatic.com https://www.youtube.com https://apps.sitecore.net https://connect.facebook.net
img-src 'self' data: https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.nl https://www.google.com.sg https://www.google.com.my https://www.google.fr https://www.google.de https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ca https://www.google.co.in https://www.google.com.hk https://www.google-analytics.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://img.youtube.com https://www.facebook.com
frame-src 'self' https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.nl https://www.google.com.sg https://www.google.com.my https://www.google.fr https://www.google.de https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ca https://www.google.co.in https://www.google.com.hk https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.youtube.com https://youtu.be https://apps.sitecore.net
font-src 'self' data: https://www.intive.com https://intive-uat-cd.azurewebsites.net https://intive-uat-cm.azurewebsites.net https://intive-dev-single.azurewebsites.net https://fonts.googleapis.com https://fonts.gstatic.com
"default-src https: wss: 'unsafe-inline' 'unsafe-eval'
"default-src https: 'unsafe-inline' 'unsafe-eval' wss://*.inspectlet.com data:
script-src https: 'unsafe-inline' 'unsafe-eval' data:
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.magicsignup.com *.olark.com analytics.twitter.com api.stripe.com cdn.mxpnl.com cdn.syndication.twimg.com cdnjs.cloudflare.com certsimple.com js.stripe.com magicsignup.com platform.twitter.com seal.digicert.com static.ads-twitter.com syndication.twitter.com
style-src 'self' 'unsafe-inline' certsimple.com platform.twitter.com static.olark.com
img-src 'self' abs.twimg.com analytics.twitter.com cdn.mxpnl.com certsimple.com data: log.olark.com logo.clearbit.com pbs.twimg.com platform.twitter.com q.stripe.com s.gravatar.com seal.digicert.com static.olark.com syndication.twitter.com t.co
connect-src 'self' *.olark.com api.mixpanel.com api.rollbar.com api.stripe.com certsimple.com syndication.twitter.com
frame-src js.stripe.com platform.twitter.com player.vimeo.com static.olark.com syndication.twitter.com
"script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https https://*.google.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.jquery.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
img-src 'self' blob: https https://*.google.com https://*.googleusercontent.com http://*.ytimg.com https://*.googleapis.com https://*.gstatic.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
font-src 'self' http://*.googleapis.com https://*.gstatic.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
media-src 'self' blob: https https://*.youtube.com https://*.ggpht.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
frame-src 'self' https https://*.google.com https://cloudflare.com https://*.cloudflare.com https://gaceta.sepres.gob.ni https://*.sepres.gob.ni https://lagaceta.gob.ni https://*.lagaceta.gob.ni
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com
font-src 'self' *.gstatic.com *.bootstrapcdn.com data:
script-src https: 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net www.coincap.io www.google-analytics.com
font-src https: data: 'self' fonts.googleapis.com fonts.gstatic.com
frame-src https: 'self' www.youtube.com w.soundcloud.com html5-player.libsyn.com player.youku.com v.youku.com
child-src https: 'self' www.youtube.com w.soundcloud.com html5-player.libsyn.com
"default-src https://domainnameshop.com https://domainname.shop https://domene.shop https://www.domeneshop.no 'unsafe-inline'
img-src https://domainnameshop.com https://domainname.shop https://domene.shop https://www.domeneshop.no
frame-src https://domainnameshop.com https://domainname.shop https://domene.shop https://www.domeneshop.no"
img-src https://*  http://*  https://www.bettingpro.com data:
"default-src 'self' button.moddb.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.vo.msecnd.net *.googleapis.com maps.gstatic.com www.googletagmanager.com www.google-analytics.com cdnjs.cloudflare.com code.jquery.com use.fontawesome.com *.facebook.net evanshalshaw.com stratstone.com *.carstore.com intranet.local pendragonplc.local pendragon.calltracks.com *.googleadservices.com googleads.g.doubleclick.net
"frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.comwww.verywell.com *.qa.aws.verywell.com atlas.verywell.com atlas.local.verywell.com https://specials.verywell.com"
"script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com trustedsurf.com:443 ads.exoclick.com main.exoclick.com syndication.exoclick.com
img-src 'self' 'unsafe-inline' http: https: data:
"frame-src 'self' https://www.youtube.com/ https://www.google.com/ https://*.authorize.net/ https://*.doubleclick.net/ https://*.blackhawk.com/"
script-src 'self' *.uhaul.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com
img-src assets.braintreegateway.com *.cloudfront.net stats.g.doubleclick.net  maps.gstatic.com  maps.googleapis.com s3.eu-west-2.amazonaws.com 'self' csi.gstatic.com  www.google-analytics.com www.facebook.com
script-src data: 'unsafe-eval' 'self' tagmanager.google.com www.googletagmanager.com/gtm.js 'unsafe-inline' platform.twitter.com/widgets.js *.braintreegateway.com  www.google-analytics.com www.gstatic.com maps.googleapis.com maps.gstatic.com connect.facebook.net facebook.com www.facebook.com
style-src 'unsafe-inline' fonts.googleapis.com/css tagmanager.google.com 'self'
frame-src *.kaptcha.com *.braintreegateway.com www.youtube.com syndication.twitter.com  platform.twitter.com www.facebook.com https://1697160.fls.doubleclick.net 'self'
font-src fonts.googleapis.com/css fonts.googleapis.com fonts.gstatic.com 'self'
connect-src *.braintreegateway.com *.greggs.co.uk *.braintree-api.com 'self'"
"frame-ancestors 'self' *.taxact.com *.taxactonline.com secure.balancefin.com"
img-src 'self' d1s9dnlmdewoh1.cloudfront.net d26jga8jjsa591.cloudfront.net www.google-analytics.com
"frame-ancestors 'self' *.ratingruneta.ru ratingruneta.ru https://mc.yandex.ru https://yastatic.net webvisor.com"
"default-src 'self' 'unsafe-eval' data: *.gstatic.com *.visualwebsiteoptimizer.com *.google-analytics.com *.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http://www.googleadservices.com http://*.googletagmanager.com http://*.doubleclick.net http://*.visualwebsiteoptimizer.com http://www.gstatic.com http://bat.bing.com
style-src 'self' 'unsafe-inline' https: http://hello.myfonts.net
img-src 'self' data: https: *.gravatar.com http://*.visualwebsiteoptimizer.com http://bat.bing.com
font-src 'self' data: https: http://maxliving.com
connect-src 'self' https://*.trackduck.com https://stats.g.doubleclick.net https://*.doubleclick.net http://*.visualwebsiteoptimizer.com
frame-src 'self' https://www.youtube.com https://www.google.com https://www.eventbrite.ca https://www.eventbrite.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://bid.g.doubleclick.net https://*.visualwebsiteoptimizer.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.idsdoc.com https://idsdoc.com https://localhost:*
connect-src 'self' https://*.idsdoc.com:* https://idsdoc.com:* wss://*.idsdoc.com:* wss://idsdoc.com:* https://localhost:* wss://localhost:*
img-src 'self' http://go2.microsoft.com http://silverlight.dlservice.microsoft.com https://www.google-analytics.com
"default-src 'self' 'unsafe-inline' https://fast.fonts.net https://use.fontawesome.com https://www.youtube.com https://s.ytimg.com https://tools.euroland.com http://bitrix.info http://enplus.ru http://www.enplus.ru https://enplus.ru https://www.enplus.ru
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.openbadges.org *.readspeaker.com *.stripe.com *.vimeocdn.com *.youtube.com connect.facebook.net s.ytimg.com wchat.freshchat.com www.google-analytics.com www.google.com www.googleapis.com www.googletagmanager.com www.gstatic.com https://kozea.github.io/pygal.js/2.0.x/pygal-tooltips.min.js
frame-src 'self' *.readspeaker.com *.stripe.com *.vimeo.com *.vzaar.com *.webpush.freshchat.com *.youtube.com wchat.freshchat.com www.google.com
media-src 'self' *.amazonaws.com *.myeducator.com *.readspeaker.com *.vimeo.com *.vzaar.com *.youtube.com
img-src 'self' data: *.amazonaws.com *.facebook.com *.google-analytics.com stats.g.doubleclick.net
style-src 'self' 'unsafe-inline' *.readspeaker.com fonts.googleapis.com wchat.freshchat.com
media-src js.intercomcdn.com xtc-staging-artifacts.s3-eu-west-1.amazonaws.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-staging-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com
child-src share.intercom.io bid.g.doubleclick.net 8285986.fls.doubleclick.net www.youtube.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.msecnd.net app.intercom.io widget.intercom.io js.intercomcdn.com monaco-cdn-int.azureedge.net https://www.google-analytics.com accessibility-bookmarklets.org uhf.microsoft.com c.s-microsoft.com assets.onestore.ms connect.facebook.net www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net www.google.com platform.twitter.com static.ads-twitter.com analytics.twitter.com tag.marinsm.com pixel-geo.prfct.co http://localhost:8097 mobilecenter.azureedge.net
style-src 'self' 'unsafe-inline' monaco-cdn-int.azureedge.net accessibility-bookmarklets.org/ uhf.microsoft.com c.s-microsoft.com assets.onestore.ms mobilecenter.azureedge.net
font-src 'self' 'unsafe-inline' data: js.intercomcdn.com fonts.gstatic.com assets.onestore.ms c.s-microsoft.com
connect-src 'self' appcenter.ms install.appcenter.ms *.intercom.io uploads.intercomcdn.com *.cloudfront.net wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.visualstudio.com *.hockeyapp.net *.blob.core.windows.net https://notify.bugsnag.com https://sessions.bugsnag.com https://graph.microsoft.com appcenter.ms install.appcenter.ms *.xamarin.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com wss://build-live-prod.trafficmanager.net https://api-prod-east-us2.prod.avalanch.es:8088 https://file.appcenter.ms mobilecenter.azureedge.net"
"frame-ancestors 'self' *.dnc.io 'unsafe-inline' default-src"
"default-src 'self' bid.g.do www.google.com www.google.co.uk www.googleadservices.com www.google-analytics.com player.vimeo.com vars.hotjar.com www.facebook.com connect.facebook.net staticxx.facebook.com t.co scontent.cdninstagram.com stats.g.doubleclick.net w.soundcloud.com www.youtube.com static.hotjar.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ajax.googleapis.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com connect.facebook.com static.hotjar.com connect.facebook.net platform.twitter.com static.ads-twitter.com analytics.twitter.com script.hotjar.com www.google.com/recaptcha/api.js www.gstatic.com stats.g.doubleclick.net
connect-src 'self' *.hotjar.com wss://*.hotjar.com www.google-analytics.com
frame-src 'self' bid.g.do bid.g.doubleclick.net www.google.com www.googleadservices.com player.vimeo.com vars.hotjar.com connect.facebook.net staticxx.facebook.com w.soundcloud.com www.youtube.com www.facebook.com
img-src 'self' data: www.google-analytics.com www.google.com www.google.co.uk www.facebook.com t.co scontent.cdninstagram.com stats.g.doubleclick.net googleads.g.doubleclick.net"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://hipersonica.com:443 https://*.hipersonica.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' asset 'unsafe-inline' bitrix.info https://motorov.net https://motorov.net.js.1c-bitrix-cdn.ru cdnjs.cloudflare.com code.jquery.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru http://googletagmanager.com/ https://googletagmanager.com/ http://*.googletagmanager.com/ https://*.googletagmanager.com/ http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/ http://vk.com/ https://vk.com/ http://retailcrm.pro/ https://retailcrm.pro/ http://*.retailcrm.pro/ https://*.retailcrm.pro/ http://roistat.com/ https://roistat.com/ http://*.roistat.com/ https://*.roistat.com/ https://*.yandex.ru http://webvisor.com https://webvisor.com http://*.webvisor.com https://*.webvisor.com http://yastatic.net https://yastatic.net http://*.yastatic.net https://*.yastatic.net http://www.google-analytics.com https://www.google-analytics.com http://front.facetz.net https://front.facetz.net http://autocontext.begun.ru https://autocontext.begun.ru http://ssp.rambler.ru https://ssp.rambler.ru 'unsafe-eval' gap://ready http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://freegeoip.net https://freegeoip.net https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://grastin.ru https://grastin.ru
object-src 'self' http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://motorov.net https://motorov.net.css.1c-bitrix-cdn.ru fonts.googleapis.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/ http://roistat.com/ https://roistat.com/ http://*.roistat.com/ https://*.roistat.com/
img-src * data: blob: http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech
media-src 'self' http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech
child-src 'self' http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://grastin.ru https://grastin.ru
font-src 'self' https://motorov.net.css.1c-bitrix-cdn.ru fonts.gstatic.com http://giftd.tech https://giftd.tech http://*.giftd.tech https://*.giftd.tech http://mango-office.ru/ https://mango-office.ru/ http://*.mango-office.ru/ https://*.mango-office.ru/
connect-src 'self' https://motorov.net http://giftd.ru https://giftd.ru http://*.giftd.ru https://*.giftd.ru http://yandex.ru https://yandex.ru http://*.yandex.ru https://*.yandex.ru http://bitrix.info https://bitrix.info http://www.1c-bitrix.ru https://www.1c-bitrix.ru http://www.google-analytics.com https://www.google-analytics.com http://giftd.tech https://giftd.tech http://*.giftd.tech http://api.sypexgeo.net https://api.sypexgeo.net http://api.dostavka.guru https://api.dostavka.guru https://*.giftd.tech https://top-fwz1.mail.ru http://top-fwz1.mail.ru http://retailcrm.pro/ https://retailcrm.pro/ http://*.retailcrm.pro/ https://*.retailcrm.pro/ wss://motorov.net
"script-src 'unsafe-inline' 'unsafe-eval' https://prabhuusa.com https://www.prabhuusa.com https://seal.verisign.com/getseal https://trustsealinfo.websecurity.norton.com https://www.websecurity.symantec.com https://seal.websecurity.norton.com
img-src https://www.prabhuusa.com https://prabhuusa.com https://seal.verisign.com/getseal https://trustsealinfo.websecurity.norton.com https://www.websecurity.symantec.com https://seal.websecurity.norton.com
"default-src 'self' https://www.s1gateway.com https://my.matterport.com/ https://claroarg.s1gateway.com https://chat.claroarg.s1gateway.com http://www.googletagmanager.com http://agentcore.s3.amazonaws.com http://agentbot.s3.amazonaws.com https://www.ssbue-nwc.com/ http://www.ssbue-nwc.com/ http://pagead2.googlesyndication.com http://d2fl436cxqx5bs.cloudfront.net http://prod-agentim.agentbot.net http://cdn.agentbot.net http://*.inbenta.com http://*.sohosq-nwc.com.ar http://ad.doubleclick.net http://red.natura.cl http://adserve.atedra.com http://*.hotjar.com http://*.google.com http://ajax.aspnetcdn.com http://adapter.aivo.co http://*.gstatic.com http://*.googleapis.com http://*.clarovideo.net http://*.claromusica.com http://*.facebook.com http://*.facebook.net http://www.claromusica.com http://*.googleadservices.com http://claroarg.s1gateway.com http://corp.maplink.com.br  http://*.doubleclick.net http://claro-ar.agentbot.net http://tienda.claro.com.ar http://cdn.jsdelivr.net http://apibot.agentbot.net http://apibot2.agentbot.net http://*.google.com http://s.ytimg.com http://*.google.com.mx http://red.natura.cl http://www.google-analytics.com  http://agentbot.net http://rawgit.com http://auth0.com http://pusher.com http://intercom.io http://gravatar.com http://cloudfront.net http://jsdelivr.net http://rollbar.com http://ravenjs.com http://google-analytics.com http://s3.amazonaws.com http://adapter.aivo.co data: 'unsafe-inline' 'unsafe-eval' https://www.youtube.com"
"default-src 'self' *.wfp.org d2z2hh3whwc4ml.cloudfront.net *.google.com *.googletagmanager.com survey.g.doubleclick.net www.google-analytics.com www.gstatic.com s7.addthis.com *.addthisedge.com *.jwpsrv.com *.jwpcdn.com jwpltx.com content.jwplatform.com *.facebook.com 'unsafe-inline' 'unsafe-eval'
"frame-src 'self' www.dudaferragens.com.br *.facebook.com *.twitter.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.tolvnow.com *.addthis.com
font-src 'self' widget.customer-alliance.com gstatic.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.customer-alliance.com *.googleapis.com *.datatables.net *.google.com *.gstatic.com
style-src 'self' 'unsafe-inline' datatables.net googleapis.com
"default-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.google.com *.google-analytics.com *.gstatic.com *.facebook.net *.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com www.googletagmanager.com *.cloudflare.com ajax.googleapis.com code.jquery.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com
img-src 'self' maps.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com
"default-src https: blob: 'unsafe-inline' 'unsafe-eval'
font-src 'self' data: vjs.zencdn.net cdnjs.cloudflare.com fonts.gstatic.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://uxplanet.org:443 https://*.uxplanet.org:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https: 'self' 'unsafe-inline' 'unsafe-eval'
frame-src 'self' https://apis.google.com https://www.google.com/recaptcha/ https://signin.kontomatik.com/"
frame-ancestors 'unsafe-inline' 'unsafe-eval' 'self' *.webvisor.com webvisor.com *.yandex.ru *.yandex.net http:
prefetch-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.coinswitch.co
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://*.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://*.coinswitch.co https://www.googletagmanager.com https://cdn.mxpnl.com https://*.google.com https://*.googleapis.com https://cdn.polyfill.io https://js.driftt.com
connect-src 'self' https://api.coingecko.com https://restcountries.eu https://*.googleapis.com https://*.coinmarketcap.com https://*.coinswitch.co https://*.cryptocompare.com
img-src 'self' https://alb.reddit.com https://s3.amazonaws.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://assets.zendesk.com https://*.coinswitch.co https://s3.ap-south-1.amazonaws.com https://s3-ap-southeast-1.amazonaws.com https://www.gstatic.com https://s3-ap-south-1.amazonaws.com https://*.google.com https://*.google.* https://*.googleapis.com data:
style-src 'self' 'unsafe-inline' https://*.coinswitch.co https://*.googleapis.com https://assets.zendesk.com
font-src 'self' https://themes.googleusercontent.com https://*.coinswitch.co https://fonts.gstatic.com data:
frame-src https://assets.zendesk.com https://*.facebook.com https://tautt.zendesk.com https://js.driftt.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wufoo.com
img-src 'self' budget.gov.au *.budget.gov.au www.google-analytics.com 'unsafe-inline' data:
script-src 'self' budget.gov.au *.budget.gov.au www.google-analytics.com www.googletagmanager.com 'unsafe-inline'
style-src 'self' 'unsafe-inline' budget.gov.au *.budget.gov.au
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://robinhood.engineering:443 https://*.robinhood.engineering:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
frame-src 'self' https://fast.wistia.com/ https://fast.wistia.net/ https://*.360yield.com/ https://*.facebook.com/ https://disqus.com/ https://devbridge.disqus.com/             https://*.vimeo.com/ https://www.youtube.com/ https://*.slideshare.net https://slideshare.net https://go.pardot.com/ https://*.twitter.com/ https://*.olark.com             https://*.featureupvote.com blob:
"default-src 'self' https://endpoint1.brubank.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com/analytics.js
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com
font-src 'self'  https://fonts.gstatic.com https://fonts.googleapis.com https://use.typekit.net"
"style-src 'self' 'unsafe-inline' hello.myfonts.net https://fonts.googleapis.com https://theappreciationengine.com https://tagmanager.google.com
img-src 'self' data: 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com http://www.movienewsletters.net https://as.showcasecinemas.com https://www.facebook.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://theappreciationengine.com/framework/js/1890 https://apis.google.com https://maps.googleapis.com https://www.googletagmanager.com/gtm.js https://as.showcasecinemas.com https://am.showcasecinemas.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://www.google-analytics.com https://connect.facebook.net https://tagmanager.google.com
script-src 'self' 'unsafe-inline' https: 'nonce-vtzh1azetirlp+8jwoy6dtyngci=' 'strict-dynamic' https://www.google-analytics.com https://app.trustev.com https://www.googletagmanager.com https://connect.facebook.net https://use.typekit.net
script-src 'self' 'nonce-71e18ef2-eaa2-4497-9d8f-3cadf0c97bfd' 'unsafe-eval' apis.google.com www.google-analytics.com assets.adobedtm.com cdn.jsdelivr.net play.vidyard.com pixel.quantserve.com edge.quantserve.com secure.quantserve.com rules.quantcount.com cdn.ravenjs.com use.typekit.net v2.zopim.com"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.by https://*.yandex.by static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.by *.yandex.by
font-src 'self' https://yastatic.net zen.yandex.by static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://ok.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.by https://passport.yandex.by wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.by *.yandex.by
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.by https://*.yandex.by awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.by *.yandex.by
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.by https://www.yandex.by https://pass.yandex.by https://mc.yandex.by zen.yandex.by an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.by www.yandex.by suggest.yandex.by
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.by static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
script-src 'self' 'unsafe-inline' https://ajax.cloudflare.com https://platform.twitter.com https://www.google-analytics.com https://cdn.syndication.twimg.com
style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com data:
img-src 'self' data: https://www.paypalobjects.com https://syndication.twitter.com https://platform.twitter.com https://ton.twimg.com https://pbs.twimg.com https://www.google-analytics.com www.ifj.org
frame-src https://platform.twitter.com https://syndication.twitter.com https://www.google.com https://www.facebook.com
"frame-ancestors 'self' http://mvc.myvemtest.com http://myvem.com http://vem.com http://mvc.myvem.com https://mvc.nms.vg http://mvc.nms.vg
"default-src data: 'self' 'unsafe-inline' https://vjs.zencdn.net *.blogis.net m-shes.ru buawdshes.ru porno365online.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d12ux87dkit87z.cloudfront.net https://ssl.google-analytics.com http://www.google-analytics.com https://www.facebook.com https://mystrom.ch https://www.mystrom.ch"
"default-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com https://www.google.com https://google.com www.gstatic.com www.gov.il code.angularjs.org
script-src 'self' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com 'sha256-1gig1ei7abkbfq8rvwk7j2meeoilut5+tblxyancyta=' 'sha256-yebnganu2vnhbkglh1wpbqwtnbziphhkj2moxz3svha=' 'sha256-7jkemgknzqenszthy6o71kmdy2oge1zmevviukd/dl4=' 'sha256-dhzrwuf4myxzqeg15rszzbc6uiuqwunpf53/n4gdfro=' 'sha256-27brqvwzn9o74rm/8dwex1hpb/i+eh4q733lqghgxve=' 'sha256-xjez/pxau+fvkl8t+pzfwosomjm5kutjwbf/4zbay6w=' 'sha256-ulpmpb9pplbtvd850n5qn5gmf3naz+v+ftc1+ertxmm='
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com
"default-src 'self' https *.orridge.eu www.google-analytics.com
script-src 'self' https: *.jquery.com  'unsafe-inline' 'unsafe-eval'
style-src 'self'  https: fonts.googleapis.com 'unsafe-inline'"
style-src 'self' 'nonce-afe1aea0-0a12-46eb-9562-d916b5ca707e' https://fonts.googleapis.com/icon https://fonts.googleapis.com/css
script-src https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js 'nonce-87051920-61ca-45b5-a376-7fa074d04a35' https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.6-rc.0/js/select2.min.js https://cdn.jsdelivr.net/npm/marked/marked.min.js https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js https://www.googletagmanager.com/gtag/js https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.google-analytics.com/analytics.js
"script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com ajax.googleapis.com code.jquery.com www.youtube.com  connect.facebook.net s.ytimg.com www.googletagmanager.com maps.google.com maps.googleapis.com maps.gstatic.com js.agkn.com c.betrad.com d.agkn.com staticxx.facebook.com static.agkn.com sk-ii-desktop-my-cdn.azureedge.net res.cloudinary.com"
script-src 'self' 'nonce-cgwq4gmelqak82q9udkekditucbyrejj40s0klaaex0=' 'unsafe-eval' *.vistek.ca ajax.aspnetcdn.com *.klevu.com www.google-analytics.com js.hs-analytics.net js.hs-scripts.com js.hsleadflows.net js.hscollectedforms.net js.hsforms.net forms.hsforms.com forms.hubspot.com www.paypalobjects.com *.paypal.com www.googleadservices.com connect.facebook.net www.facebook.com *.turnto.com *.doubleclick.net maps.googleapis.com www.google.com *.ladesk.com *.iubenda.com *.steelhousemedia.com
img-src 'self' data: *.vistek.ca *.vistek.net prophotoblog.ca d1c86o3nm55du5.cloudfront.net s3.amazonaws.com *.ytimg.com js.klevu.com stats.g.doubleclick.net www.google.com www.google.ca www.facebook.com www.paypal.com track.hubspot.com maps.gstatic.com maps.googleapis.com *.turnto.com *.adsrvr.org *.adsymptotic.com *.steelhousemedia.com
frame-src 'self' *.vistek.ca *.youtube.com *.vimeo.com *.paypal.com *.ladesk.com *.google.com *.iubenda.com *.turnto.com *.doubleclick.net forms.hsforms.com forms.hubspot.com
"script-src 'self' 'unsafe-inline' https://apis.google.com https://www.googletagmanager.com https://www.google-analytics.com"
frame-ancestors 'self' *.byjus.com byjus.com *.byjusweb.com *.tllms.com www.google.com
script-src https: 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com cdnjs.cloudflare.com js-agent.newrelic.com www.google.com www.googleadservices.com k12questions.tllms.com
script-src 'self' https://js.intercomcdn.com https://widget.intercom.io https://www.googletagmanager.com https://d20luy73ujukeu.cloudfront.net https://www.google-analytics.com
connect-src 'self' *.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io"
"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdn.onesignal.com https://onesignal.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.doubleclick.net https://connect.facebook.net
worker-src 'self' https://cdn.onesignal.com https://onesignal.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.doubleclick.net https://connect.facebook.net"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.5thavenue.org https://instantencore.com https://*.google.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.quantserve.com https://*.quantcount.com https://*.facebook.net https://*.zopim.com https://browser-update.org https://*.adroll.com https://*.aaa.com https://*.krxd.net https://*.cdnwidget.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.net https://bat.bing.com https://csp.withgoogle.com https://www.gstatic.com https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://connect.facebook.net https://*.livechatinc.com https://gateway.bluesnap.com/js/ https://includestest.ccdc02.com/ https://*.hotjar.com/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://ajax.googleapis.com/ https://optimize.google.com/ https://platform.twitter.com/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com/ https://optimize.google.com/
font-src 'self' https://themes.googleusercontent.com https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ data:
frame-src https://s-static.ak.facebook.com https://*.livechatinc.com https://www.google.com/recaptcha/ https://vars.hotjar.com/ 'self' https://optimize.google.com/ https://*.facebook.com/ https://platform.twitter.com/
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.ingbank.pl
\t\t                          script-src  'self' data: https://www.google-analytics.com https://checkout.stripe.com
\t\t                          img-src     'self' data: https:
\t\t                          font-src    'self' data: https: blob:
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.cloudfront.net *.cloudfl.net *.pingdom.net *.googleapis.com *.instagram.com *.google.com *.gstatic.com *.twitter.com *.cloudflare.com cdn.rawgit.com rec.smartlook.com
img-src 'self' data:  *.cloudflare.com *.ggpht.com *.fbcdn.net *.facebook.com *.cdninstagram.com *.googleapis.com maps.gstatic.com www.google.com www.google.cz www.google-analytics.com stats.g.doubleclick.net *.prg.aero apollo.prg.aero rec.smartlook.com
frame-src 'self' *.prg.aero prg.fltmaps.com www.google.com *.twitter.com rec.smartlook.com
script-src 'self' 'unsafe-eval' data: 'unsafe-inline' https://service.liveperson.net https://lptag.liveperson.net https://www.google-analytics.com https://js.locatorsearch.com
img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com
frame-src 'self' https://lpcdn.lpsnmedia.net https://tucson.locatorsearch.com https://www.youtube.com https://player.vimeo.com
child-src 'self' https://tucson.locatorsearch.com https://www.youtube.com https://player.vimeo.com
"default-src 'self' epwtest.ws.marketlinx.com beta.epropertywatch.corelogic.com beta-static.epropertywatch.corelogic.com dev.epropertywatch.corelogic.com dev-static.epropertywatch.corelogic.com www.epropertywatch.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' 127.0.0.1:* epwtest.ws.marketlinx.com www.epropertywatch.com www.epropertywatch.corelogic.com beta.epropertywatch.corelogic.com beta-static.epropertywatch.corelogic.com dev.epropertywatch.corelogic.com dev-static.epropertywatch.corelogic.com https://js.live.net https://apis.google.com www.googletagmanager.com https://www.google-analytics.com https://www.bing.com *.virtualearth.net
connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.bing.com *.virtualearth.net
img-src 'self' https://www.epropertywatch.com www.epropertywatch.corelogic.com beta-static.epropertywatch.corelogic.com dev.epropertywatch.corelogic.com dev-static.epropertywatch.corelogic.com epwtest.ws.marketlinx.com http://photos.ws.marketlinx.com https://photos.ws.marketlinx.com www.homeadvisor.com https://www.googletagmanager.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.bing.com *.virtualearth.net data:
style-src 'self' 'unsafe-inline' www.epropertywatch.com www.epropertywatch.corelogic.com beta.epropertywatch.corelogic.com beta-static.epropertywatch.corelogic.com dev.epropertywatch.corelogic.com dev-static.epropertywatch.corelogic.com epwtest.ws.marketlinx.com https://www.bing.com https://fonts.googleapis.com
frame-src 'self' https://www.chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://wsvar1.chasepaymentech.com https://wsvar2.chasepaymentech.com https://ws1.chasepaymentech.com https://ws2.chasepaymentech.com https://www.cvvnumber.com https://login.live.com https://accounts.google.com www.homeadvisor.com embedded.homeadvisor.com"
connect-src 'self' cdn.jsdelivr.net csi.gstatic.com pagead2.googlesyndication.com
font-src 'self' viewing.nyc *.viewing.nyc *.viewingnyc.dev fonts.gstatic.com data:
img-src 'self' viewing.nyc *.viewing.nyc *.viewingnyc.dev s3.amazonaws.com *.amazon-adsystem.com *.ssl-images-amazon.com *.assoc-amazon.com *.twimg.com *.twitter.com *.instagram.com *.facebook.com data:
script-src 'self' 'unsafe-inline' viewing.nyc *.viewing.nyc *.viewingnyc.dev pagead2.googlesyndication.com adservice.google.com *.amazon-adsystem.com *.twimg.com *.twitter.com *.instagram.com *.facebook.com *.facebook.net gleam.io js.gleam.io lightwidget.com *.lightwidget.com
style-src 'self' 'unsafe-inline' viewing.nyc *.viewing.nyc *.viewingnyc.dev *.twitter.com *.instagram.com *.facebook.com fonts.googleapis.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' spellcheck.boe.es svc.webspellchecker.net www.google-analytics.com ajax.googleapis.com
img-src 'self' spellcheck.boe.es data: www.google-analytics.com ajax.googleapis.com chart.apis.google.com servicios.mpr.es
style-src 'unsafe-inline' 'self' *.boe.es fonts.googleapis.com
child-src 'self' spellcheck.boe.es www.youtube.com afirma:
"script-src 'self' https://dc.ads.linkedin.com/ https://www.linkedin.com/ https://analytics.twitter.com/ https://px.ads.linkedin.com/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://connect.facebook.net https://bat.bing.com https://collector-1623.tvsquared.com https://s.ytimg.com https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://ajax.googleapis.com https://dl.episerver.net https://platform.twitter.com https://tagmanager.google.com 'unsafe-inline' 'unsafe-eval'
"script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-eval'
"frame-src 'self' https://www.youtube.com http://contre-le-diabete.rouge-le-fil.com/ https://formationdiabete.federationdesdiabetiques.org/ http://www.contrelediabete.fr/ https://don.federationdesdiabetiques.org/ https://www.dailymotion.com/ https://player.vimeo.com/ https://www.google.com/"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com https://apis.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.gstatic.com data:
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com
img-src 'self' https://*.googleapis.com https://*.w.org https://csi.gstatic.com https://maps.gstatic.com https://secure.gravatar.com https://www.google-analytics.com https://www.google.com data:
"frame-ancestors 'self' *.edock.it *.storeden.com *.shippypro.com"
img-src 'self' data: http://www.b2i.us https://stats.g.doubleclick.net https://maps.googleapis.com https://www.google.com https://maps.google.com https://maps.gstatic.com https://csi.gstatic.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://i.ytimg.com
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://maps.googleapis.com https://maps.google.com https://maps.gstatic.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.b2i.us
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com maps.googleapis.com *.addthis.com m.addthisedge.com graph.facebook.com widgets.pinterest.com calculators.gbst.com form.jotform.co cdn.jotfor.ms js.jotform.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net js.adsrvr.org connect.facebook.net
style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com calculators.gbst.com cdn.jotfor.ms www.jotform.com
img-src 'self' bankofus.com.au maps.google.com maps.gstatic.com calculators.gbst.com cdn.jotfor.ms events.jotform.com www.google-analytics.com stats.g.doubleclick.net js.adsrvr.org www.facebook.com www.googletagmanager.com data:
frame-src 'self' s7.addthis.com submit.jotform.co widgets.jotform.io www.googletagmanager.com keyfactssheet.infochoice.com.au insight.adsrvr.org www.facebook.com match.adsrvr.org
frame-ancestors 'self' keyfactssheet.infochoice.com.au dsum-sec.casalemedia.com www.facebook.com insight.adsrvr.org widgets.jotform.io
form-action 'self' bankofus.com.au submit.jotform.co www.facebook.com
"frame-ancestors 'self' www.jobs.ch www.jobup.ch www.itjobs.ch ictjobs.ch"
"script-src 'self' 'unsafe-inline' 'unsafe-eval'      https://djtflbt20bdde.cloudfront.net     https://ajax.aspnetcdn.com     https://www.google-analytics.com    https://ajax.googleapis.com     https://pagead2.googlesyndication.com    https://cdnjs.cloudflare.com    https://cdn.jsdelivr.net    https://checkmystreet.disqus.com    https://maps.googleapis.com   https://widget.trustpilot.com    https://www.comparemymove.com    https://adservice.google.com    https://adservice.google.co.uk   https://adservice.google.ie   https://contextual.media.net
img-src https: 'self'    data: https://rudy.adsnative.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' https://tabor.ru http://tabor.ru *.tabor.ru tabor.ru m.tabor.ru http://m.tabor.ru https://m.tabor.ru http: vk.com *.vk.com vk.me *.vk.me vk.me *.vk.me fbcdn.net *.fbcdn.net akamaihd.net *.akamaihd.net mycdn.me *.mycdn.me yandex.ru *.yandex.ru yadro.ru *.yadro.ru https: vk.com *.vk.com vk.me *.vk.me vk.me *.vk.me fbcdn.net *.fbcdn.net akamaihd.net *.akamaihd.net mycdn.me *.mycdn.me yandex.ru *.yandex.ru yadro.ru *.yadro.ru
connect-src * 'self' file: data: blob: filesystem:
script-src https: wss: blob: 'unsafe-inline' 'unsafe-eval'
"frame-ancestors https://usabilitytools.com https://www.elektrum.lv https://static.elektrum.lv https://mans.elektrum.lv https://card.elektrum.lv https://elektrum.lv"
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com
script-src 'self' 'nonce-lq/lrweqyzfqd15asgfe7ahzs+kt7xy91clbwemrwry=' 'unsafe-eval' *.vistek.ca ajax.aspnetcdn.com *.klevu.com www.google-analytics.com js.hs-analytics.net js.hs-scripts.com js.hsleadflows.net js.hscollectedforms.net js.hsforms.net forms.hsforms.com forms.hubspot.com www.paypalobjects.com *.paypal.com www.googleadservices.com connect.facebook.net www.facebook.com *.turnto.com *.doubleclick.net maps.googleapis.com www.google.com *.ladesk.com *.iubenda.com *.steelhousemedia.com
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.md https://*.yandex.md static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.md *.yandex.md
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.md https://passport.yandex.md wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.md *.yandex.md
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.md https://*.yandex.md *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.md *.yandex.md
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.md https://www.yandex.md https://pass.yandex.md https://mc.yandex.md an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.md www.yandex.md suggest.yandex.md
frame-src 'self' https://*.talkus.io https://www.youtube-nocookie.com https://*.youtube.com
img-src 'self' https://coinflux.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://s3-eu-west-1.amazonaws.com https://avatars.slack-edge.com https://a.slack-edge.com https://www.gravatar.com https://*.talkus.io https://talkus.io https://www.google-analytics.com https://www.google.com https://assets.windowsphone.com https://www.google.ro/ads https://*.veinteractive.com data: https://www.googletagmanager.com
connect-src 'self' https://coinflux.com wss://coinflux.com https://*.algolia.net https://*.algolianet.com https://ipinfo.io https://www.googleadservices.com https://google.ro/ads https://apm-engine.meteor.com https://www.talkus.io https://sock.talkus.io https://www.google-analytics.com https://stats.g.doubleclick.net wss://sock.talkus.io https://*.veinteractive.com https://coinflux.s3-eu-west-1.amazonaws.com
script-src 'self' 'unsafe-inline' https://www.googleadservices.com https://www.googletagmanager.com https://www.talkus.io https://talkus.io https://www.google-analytics.com https://*.veinteractive.com 'sha256-jie9qgzcogjzjmu0oc0fidysnx0x4dwwqpz2adq5hkg=' 'sha256-ayayd7bag+gfazwhqbfxquusv2+qk02icehjg7w71so=' 'sha256-r2ayekrwpkp+bzhhrgwtugs1fobvmvw8w6bojizh3kq='"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.providesupport.com *.google-analytics.com *.siteimprove.com *.google.com *.cloudflare.com"
"default-src 'self' https://fonts.googleapis.com http://fonts.googleapis.com https://www.google-analytics.com https://fonts.gstatic.com/ https://use.fontawesome.com/
style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/font-awesome/  https://fonts.googleapis.com http://fonts.googleapis.com https://use.fontawesome.com/ https://maxcdn.bootstrapcnd.com/
font-src 'self' https://fonts.googleapis.com http://fonts.googleapis.com https://fonts.gstatic.com https://fonts.gstatic.com/ https://use.fontawesome.com https://maxcdn.bootstrapcdn.com/font-awesome/
script-src 'self'  'unsafe-inline'  https://ajax.googleapis.com http://ajax.googleapis.com https://www.google-analytics.com
"default-src 'self' https://seal.geotrust.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com *.s3.amazonaws.com 'unsafe-inline' 'unsafe-eval' data:
script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://*.sharethis.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://static.addtoany.com https://code.jquery.com cdn.jsdelivr.net https://*.instagram.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com fast.wistia.com fast.wistia.net *.wistia.com *.wistia.com form.jotform.com cdn.jotfor.ms secure.jotformpro.com submit.jotformpro.com
style-src 'self' 'unsafe-inline' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com
child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com fast.wistia.com fast.wistia.net *.wistia.com player.vimeo.com
connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net submit.jotformpro.com *.akamaihd.net *.litix.io *.wistia.com *.litix.io
img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io *.akamaihd.net fast.wistia.com embed.wistia.com embedwistia-a.akamaihd.net events.jotform.com cdn.jotfor.ms
media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com embed.wistia.com embedwistia-a.akamaihd.net
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://thefirstpenguin.jp:443 https://*.thefirstpenguin.jp:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors 'self' waldorfeducation.org *.waldorfeducation.org waldorfeducationorg.finalsite.com
script-src 'self' 'unsafe-inline' http://*.google-analytics.com https://*.google-analytics.com
img-src data: 'self' http://*.google-analytics.com https://*.google-analytics.com http://* https://*
script-src 'self' *.google-analytics.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'
"default-src 'self' 'unsafe-inline' s7.addthis.com www.google.com www.google-analytics.com s7.addthis.com m.addthisedge.com m.addthis.com www.gstatic.com pi.pardot.com go.3grc.co.uk fonts.gstatic.com fonts.googleapis.com player.vimeo.com i.vimeocdn.com f.vimeocdn.com fresnel.vimeocdn.com stats.g.doubleclick.net secure.gravatar.com s.w.org 'unsafe-eval' connect.facebook.net platform.twitter.com staticxx.facebook.com www.facebook.com syndication.twitter.com
img-src 'self' secure.gravatar.com s.w.org ps.w.org www.google-analytics.com stats.g.doubleclick.net data:"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' msg.playcanvas.com code.playcanvas.com https://js.stripe.com https://*.google.com https://*.google-analytics.com cdn.webglstats.com https://s3-eu-west-1.amazonaws.com"
frame-src 'self' https://www.google.com https://www.youtube.com https://analytics.google.com  https://google.exceedlms.com https://google.appitierre.com/
child-src 'self' https://www.google.com https://www.youtube.com https://analytics.google.com  https://google.exceedlms.com https://google.appitierre.com/
"frame-ancestors 'self' corning.com *.corning.com *.siteworx.com"
script-src 'unsafe-inline' 'self' moz-extension://288fa1cd-06c1-41a6-abce-568a94ceed14/_generated_background_page.html https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
style-src 'unsafe-inline' 'self' https://use.fontawesome.com/releases/v5.6.3/css/all.css moz-extension://288fa1cd-06c1-41a6-abce-568a94ceed14/"
script-src 'self' 'unsafe-inline' *.maps.yandex.net *.yandex.net *.googletagmanager.com *.mil.ru *.xn--90anlfbebar6i.xn--p1ai *.rambler.ru *.yandex.ru *.mail.ru *.google-analytics.com *.google.com
img-src 'self' *.mil.ru *.maps.yandex.net *.yandex.net yandex.net data: counter.yadro.ru *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru
frame-src 'self' *.mil.ru api-maps.yandex.ru *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtube.com *.youtu.be *.google.com
script-src 'unsafe-inline' 'nonce-b03045d989654ea79c650b19544f3432' 'strict-dynamic' https:
"script-src 'self' 'unsafe-inline' adservice.google.com *.doubleclick.net *.googleadservices.com *.googleanalytics.com *.google-analytics.com apis.google.com https://maps.googleapis.com https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.5.10/angular.min.js https://code.angularjs.org/1.5.10/angular-sanitize.min.js https://www.google.com/js/maia.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.googletagmanager.com tagmanager.google.com https://www.google.co.uk https://www.google.com/insights/consumersurveys/gk/static/hats-integration-release.js https://support.google.com/inapp/api.js https://www.gstatic.com/feedback/js/help/prod/service/screenshot.min.js http://www.google.com/tools/feedback/metric/report 'nonce-1xml7n3xzzkh'
"img-src 'self' http: https: *.google.com
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: *.ads-twitter.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.jotfor.ms *.jotform.com *.jotform.io *.jotformpro.com *.multiview.com *.paypal.com *.paypalobjects.com *.texmed.org *.twimg.com *.twitter.com *.unitednetworksofamerica.com *.yahooapis.com *.zkcdn.net code.jquery.com https://t.co
script-src 'unsafe-inline' 'nonce-fa612be4940bae15b019b36f9282c5ab' 'self' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com http://www.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com 'sha256-gfxb2zfv/yoinjhakyev+mq0l6bej2nylyogosl0gf4=' 'sha256-hzbywosvtrs+58f6nbh0owtcxdmprup0star4bojv84=' 'sha256-9wmix3lbtyjxnzojdlczdorq7wla7wnnghrrcxwfxcq=' 'sha256-xja5o6i4fp5n1ia4d2r4ig/hguk4unuqkp/49l2c7im='
img-src 'self' https://vk.com http://www.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net
script-src 'self' https: http: google-analytics.com kissmetrics.com cloudfront.net maps.googleapis.com 'nonce-mzyd6+rnm7rlihmc6t/q2w=='
"script-src 'unsafe-inline' 'unsafe-eval' 'self'  static.novler.com www.gstatic.com connect.facebook.net ajax.googleapis.com analytics.novler.com http://dq4irj27fs462.cloudfront.net http://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com telegram.org/js/games.js www.googletagmanager.com code.highcharts.com  www.google-analytics.com www.google.com load.sumome.com analytics.google.com ssl.gstatic.com ajax.cloudflare.com
script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv 'nonce-ndc1ywrkyjmtnzc3ni00y2jklwfmmgytn2m4zjkxzjk4ywu4'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://travishorn.com:443 https://*.travishorn.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' gdata.youtube.com content.googleapis.com api.tumblr.com
img-src 'self' data: *.tile.openstreetmap.org i.ytimg.com *.media.tumblr.com *.edgecastcdn.net
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://js.stripe.com 'self' 'unsafe-eval' 'unsafe-inline' https://checkout.stripe.com 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com 'self' 'unsafe-eval' 'unsafe-inline' https://mc.yandex.ru 'self' 'unsafe-eval' 'unsafe-inline' https://analytics.twitter.com 'self' 'unsafe-eval' 'unsafe-inline' https://widget.intercom.io 'self' 'unsafe-eval' 'unsafe-inline' https://googleads.g.doubleclick.net 'self' 'unsafe-eval' 'unsafe-inline' https://js.intercomcdn.com 'self' 'unsafe-eval' 'unsafe-inline' https://load.sumo.com 'self' 'unsafe-eval' 'unsafe-inline' https://sumo.b-cdn.net"
img-src 'self' blob: data: https://*.tile.openstreetmap.org"
img-src 'self' https: data: blob: https://mamot.fr
media-src 'self' https: data: https://mamot.fr
connect-src 'self' blob: https://mamot.fr wss://mamot.fr
"default-src 'self' data: blob: *.mega.co.nz *.mega.nz http://*.mega.co.nz http://*.mega.nz wss://*.karere.mega.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342
script-src 'self' *.mega.co.nz *.mega.nz data: blob:
style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz data: blob:
img-src 'self' *.mega.co.nz *.mega.nz data: blob:"
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://fromupnorth.com:443 https://*.fromupnorth.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com *.zopim.com connect.facebook.net promo.groupemedia.ca pixel.adacado.com bat.bing.com secure.adnxs.com use.typekit.net www.google.com www.gstatic.com
font-src 'self' data: v2.zopim.com use.typekit.net
img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.ca www.facebook.com v2assets.zopim.io v2.zopim.com bat.bing.com p.typekit.net www.googletagmanager.com gen.sendtric.com www.gstatic.com promo.groupemedia.ca
frame-src 'self' *.fls.doubleclick.net connect.facebook.net www.facebook.com app.shiphero.com *.moneris.com www.google.com promo.groupemedia.ca
connect-src 'self' wss://*.zopim.com performance.typekit.net stats.g.doubleclick.net www.google-analytics.com promo.groupemedia.ca
media-src 'self' v2.zopim.com player.vimeo.com *.vimeocdn.com gcs-vimeo.akamaized.net *.akamaized.net promo.groupemedia.ca
script-src 'self' 'unsafe-inline' https://checkout.stripe.com https://js.stripe.com www.google-analytics.com www.googletagmanager.com
connect-src 'self' https://checkout.stripe.com https://api.stripe.com www.google-analytics.com www.googletagmanager.com
img-src 'self' https://cldup.com https://q.stripe.com www.google-analytics.com
style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com
"style-src www.googletagmanager.com fonts.googleapis.com *.twitter.com 'unsafe-inline' *.facebook.net fonts.gstatic.com *.google.com https://media.titanbooks.com storage.googleapis.com *.akamaihd.net *.instagram.com *.youtu.be *.cdninstagram.com *.gstatic.com *.twimg.com *.cloudfront.net data: 'self' themes.googleusercontent.com *.youtube.com www.google-analytics.com *.googleapis.com *.facebook.com
img-src 'self' https://media.titanbooks.com https: data: dyn.media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net
default-src 'self' https://media.titanbooks.com 'unsafe-inline' data:
frame-src 'self' https://media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net data:
script-src 'self' https://media.titanbooks.com 'unsafe-inline' data: www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net
connect-src www.googletagmanager.com fonts.googleapis.com *.twitter.com *.facebook.net fonts.gstatic.com *.google.com https://media.titanbooks.com storage.googleapis.com *.akamaihd.net *.youtu.be *.instagram.com *.cdninstagram.com *.gstatic.com *.twimg.com *.cloudfront.net data: 'self' themes.googleusercontent.com dyn.media.titanbooks.com *.youtube.com https: www.google-analytics.com *.googleapis.com *.facebook.com
font-src 'self' https://media.titanbooks.com data: fonts.googleapis.com storage.googleapis.com fonts.gstatic.com themes.googleusercontent.com
child-src 'self' https://media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net data:"
script-src 'unsafe-inline' 'unsafe-eval' 'self' www.starface.de
"default-src 'self' 'unsafe-inline' 'unsafe-eval' *"
"default-src https : 'self' 'unsafe-inline'"
img-src 'self' data: blob: https://tracker.spreed.net
script-src 'self' https://tracker.spreed.net https://www.youtube.com https://s.ytimg.com
img-src 'self' *.amazonaws.com www.gravatar.com www.google-analytics.com jwpltx.com
media-src 'self' blob: data: *.amazonaws.com *.dubber.net
script-src 'self' data: ssl.p.jwpcdn.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval'
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.cipafilter.com
style-src 'self' 'unsafe-inline' data: https: *.cipafilter.com
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com
"script-src         'self'         'unsafe-inline'         'unsafe-eval'         blob:         d2e70e9yced57e.cloudfront.net         d2k0escgkdw2ev.cloudfront.net         *.googleapis.com         *.google.com         *.gstatic.com         *.google-analytics.com         www.googletagmanager.com         www.googleadservices.com         googleads.g.doubleclick.net         cdn.ampproject.org         bat.bing.com         s.yimg.com         cdn.taboola.com         sp.analytics.yahoo.com         *.facebook.com         connect.facebook.net         www.linkedin.com         www.reddit.com         *.twitter.com         *.linkedin.com         *.pinterest.com         *.reddit.com         www.dianomi.com         loadus.exelator.com         ct.buyright.com         affiliate.icclicktracker.com         amplify.outbrain.com         track.supersonicads.com         ads.trafficjunky.net         cdn.ckeditor.com         *.wistia.com         sentry.io         opensharecount.com
script-src 'self' data: 'unsafe-inline' 'unsafe-eval'
"default-src 'self' *.adbutler-kaon.com *.adbutler.com *.amazonaws.com *.doubleclick.net *.facebook.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.googlwe.com *.gravatar.com *.issuu.com *.isu.pub *.knack.com *.knackhq.com *.quantserve.com *.quantcount.com *.sharethis.com *.thekennelclub.org.uk *.twitter.com *.vimeocdn.com *.visualstudio.com *.wufoo.com *.youtube.com *.zmags.com adbutler-fermion.com our.umbraco.org packages.umbraco.org player.vimeo.com servedbyadbutler.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.adbutler-kaon.com *.adbutler.com *.amazonaws.com *.cloud-database.co *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.co.uk *.google.com *.googleapis.com *.googletagmanager.com *.issuu.com *.isu.pub *.knack.com *.knackhq.com *.msecnd.net *.quantserve.com *.quantcount.com *.sharethis.com *.thekennelclub.org.uk *.twitter.com *.wufoo.com *.zmags.com *.gstatic.com adbutler-fermion.com servedbyadbutler.com
style-src 'self' 'unsafe-inline' *.cloud-database.co *.google.co.uk *.google.com *.googleapis.com *.issuu.com *.isu.pub *.sharethis.com *.thekennelclub.org.uk
img-src 'self' data: *.adbutler-kaon.com *.cloud-database.co *.doubleclick.net *.facebook.com *.google-analytics.com *.google.co.uk *.google.com *.googleapis.com *.gravatar.com *.issuu.com *.isu.pub *.quantserve.com *.quantcount.com *.thekennelclub.org.uk *.twitter.com *.zmags.com adbutler-fermion.com dashboard.umbraco.org servedbyadbutler.com umbraco.tv
font-src 'self' data: *.gstatic.com *.cloud-database.co"
"default-src 'self' http://auction.hermann-historica.de/api/ http://auction.local.hermann-historica.de:81/api/ https://cdn.polyfill.io/v2/polyfill.min.js https://maxcdn.bootstrapcdn.com/font-awesome/ https://stackpath.bootstrapcdn.com/font-awesome/ *.bidjs.com *.shopware.de  *.shopware.com fonts.googleapis.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com fonts.gstatic.com code.jquery.com 'unsafe-inline' 'unsafe-eval'
img-src 'self' data: https://sbp-plugin-images.s3.amazonaws.com/ https://sbp-plugin-images.s3.eu-west-1.amazonaws.com/ https://*.amazonaws.com/sbp-plugin-images/ https://res.cloudinary.com/bidlogix/ https://res.cloudinary.com/bidlogix-test/ https://brighton-staging.eu-central-1.bidjs.com/ https://www.google-analytics.com https://stats.g.doubleclick.net/ https://www.googletagmanager.com/ https://www.google.com/ads/ https://www.google.de/ads/ https://ssl.gstatic.com/ https://www.gstatic.com/"
script-src 'self' 'unsafe-inline' ssl.google-analytics.com pagead2.googlesyndication.com adservice.google.com adservice.google.co.uk
script-src 'unsafe-eval' 'unsafe-inline' blob: https:
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://code.jquery.com https://www.gstatic.com https://www.google.com/recaptcha/api.js https://v2.zopim.com https://platform.twitter.com https://cdn.syndication.twimg.com
font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://v2.zopim.com/widget/fonts/zopim.ttf https://netdna.bootstrapcdn.com
frame-src https://www.slideshare.net https://www.google.com https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com
"frame-ancestors 'self' *.ratingruneta.ru ratingruneta.ru webvisor.com http://webvisor.com metrika.yandex.ru *.yandex.net"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.com.tr https://*.yandex.com.tr static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.com.tr *.yandex.com.tr
frame-src 'self' yabrowser: data: https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.com.tr https://passport.yandex.com.tr wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.com.tr *.yandex.com.tr
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.com.tr https://*.yandex.com.tr awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.com.tr *.yandex.com.tr avatars-fast.yandex.net favicon.yandex.net
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.com.tr https://www.yandex.com.tr https://pass.yandex.com.tr https://mc.yandex.com.tr an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.com.tr www.yandex.com.tr suggest.yandex.com.tr
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://play2.qbrick.com https://imasdk.googleapis.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://android.com https://windowsphone.com https://qbrick.com https://publisher.qbrick.com https://professional.player.qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.co.uk *.danskebank.dk https://www.danskebank.co.uk https://danid.dk *.danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com *.twitter.com https://syndication.twitter.com
frame-src 'self' https://android.com https://windowsphone.com https://qbrick.com *.qbrick.com *.112.2o7.net *.danskebank.co.uk *.danskebank.se *.danskebank.dk https://danid.dk *.danid.dk *.facebook.com *.facebook.net https://facebook.net https://*.facebook.net https://twitter.com *.omtrdc.net https://dpm.demdex.net https://static.licdn.com https://w3.org https://fbcdn.net https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com *.gstatic.com *.danskebank.e-boks.com https://danskebank.e-boks.com
script-src 'self' disqus.com c.disquscdn.com platform.instagram.com cdnjs.cloudflare.com scotthelme.disqus.com a.disquscdn.com go.disqus.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/scotthelme/
style-src 'self' c.disquscdn.com a.disquscdn.com fonts.googleapis.com cdnjs.cloudflare.com platform.twitter.com assets-cdn.github.com github.githubassets.com
img-src 'self' data: www.gravatar.com links.services.disqus.com referrer.disqus.com a.disquscdn.com cdn.syndication.twimg.com syndication.twitter.com pbs.twimg.com platform.twitter.com abs.twimg.com
child-src www.instagram.com twitter.com fusiontables.googleusercontent.com fusiontables.google.com www.google.com disqus.com www.youtube.com syndication.twitter.com platform.twitter.com www.youtube-nocookie.com
font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com fonts.googleapis.com
"script-src 'self' 'unsafe-inline' https://checkout.stripe.com https://browser.sentry-cdn.com https://assets.gfycat.com https://platform.twitter.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.google-analytics.com
"frame-src 'self' https://facebook.com *.facebook.com https://*.youcanbook.me https://www.google.com https://www.youtube.com *.doubleclick.net https://cdn.digitrust.mgr.consensu.org/
"default-src 'self' blob: wss: data: https:
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:
script-src 'unsafe-inline' 'unsafe-eval' https: 'self'
img-src 'self' data: https://www.google-analytics.com https://downloads.intercomcdn.com/
connect-src 'self' https://auth.iexcloud.io https://api.iexcloud.io https://api.iexcloud.io https://cloud.iexapis.com wss://iexcloud.io wss://tops.iexcloud.io wss://api.iexcloud.io wss://iexcloud.io https://api-iam.intercom.io/messenger/ https://nexus-websocket-a.intercom.io/ https://nexus-websocket-b.intercom.io/ wss://nexus-websocket-a.intercom.io/ wss://nexus-websocket-b.intercom.io/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptca.api.js https://js.stripe.com/v3/ https://widget.intercom.io/widget/lhos563b https://js.intercomcdn.com/ https://www.google-analytics.com https://www.googletagmanager.com/
script-src  'self' https://*.meruscase.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://platform.twitter.com/ https://*.google-analytics.com/ https://*.googletagmanager.com/ https://cdn.syndication.twimg.com/ https://merus-assets.s3.amazonaws.com/ https://*.facebook.net/ https://*.googleapis.com/ https://*.aspnetcdn.com/ https://*.microsoft.com https://maxcdn.bootstrapcdn.com/ https://*.youtube.com/ https://s.ytimg.com/
"script-src 'unsafe-inline' 'unsafe-eval' 'self' *.gstatic.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com *.google-analytics.com *.facebook.net *.yandex.ru *.pushwoosh.com *.criteo.net *.criteo.com"
connect-src 'self' data: https://*.algolia.net https://*.algolianet.com http://*.algolia.net http://*.algolianet.com https://*.autheos.com https://*.googleapis.com https://pastease.mopinion.com https://*.swogo.com https://uat-beam.hlserve.com https://www.google-analytics.com https://*.doubleclick.net wss://*.firebaseio.com https://*.getflowbox.com https://*.execute-api.eu-west-1.amazonaws.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://optimize.google.com https://collect.mopinion.com https://fonts.mopinion.com https://nextail.mopinion.com https://*.swogo.com https://tagmanager.google.com https://fonts.googleapis.com
font-src 'self' data: 'unsafe-inline' https://collect.mopinion.com https://daks2k3a4ib2z.cloudfront.net https://fonts.gstatic.com https://gstatic.mopinion.com https://nextail.mopinion.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://sslwidget.criteo.com https://static.criteo.net https://connect.facebook.net https://*.tradetracker.net https://*.doubleclick.net https://*.firebaseio.com https://*.firebaseapp.com https://www.google-analytics.com https://www.googleadservices.com https://maps.googleapis.com https://tpc.googlesyndication.com https://optimize.google.com https://maps.gstatic.com https://collect.mopinion.com https://deploy.mopinion.com https://nextail.mopinion.com https://tdn.r42tag.com https://admin.relay42.com https://*.swogo.com https://7288352.collect.igodigital.com https://www.googletagmanager.com https://tagmanager.google.com https://connect.getflowbox.com
script-src 'self' *.googleapis.com *.cloudflare.com *.projectmiso.biz http://portal.geneticalliance.org http://crmportal.geneticalliance.org http://*.trustortrash.org *.peerplatform.org *.google.com *.google-analytics.com *.gstatic.com *.tinymce.com 'unsafe-inline' 'unsafe-eval'  data:
style-src 'self' *.googleapis.com fonts.googleapis.com *.cloudflare.com  http://*.trustortrash.org *.peerplatform.org *.tinymce.com  'unsafe-inline'
img-src 'self' *.googleapis.com *.gstatic.com *.google-analytics.com  *.projectmiso.biz http://portal.geneticalliance.org http://crmportal.geneticalliance.org  http://*.geneticalliance.org http://*.trustortrash.org data:
media-src 'self' *.youtube.com *.vimeo.com http://*.geneticalliance.org
child-src 'self' *.youtube.com *.vimeo.com  http://*.trustortrash.org *.peerplatform.org *.google.com *.peerplatform.org *.traitwise.com *.privateaccess.com
font-src 'self' *.gstatic.com *.googleapis.com *.projectmiso.biz *.tinymce.com data:
"default-src 'self' https://kapi.kakao.com http://push.scienceall.com:8888 http://211.40.179.61 http://211.40.179.61:8080  https://push.scienceall.com:8888 https://login.kofac.re.kr http://scienceall.com http://www.podbang.com http://cdn.podbang.com https://certs.godaddy.com https://godaddy.com  https://*.godaddy.com http://www.youtube.com http://img.youtube.com  https://log.cizion.com https://was.livere.me http://www.scienceall.com http://s0.wordpress.com http://fonts.googleapis.com http://fonts.gstatic.com  http://opencontents.kofac.re.kr http://youtube.com https://scienceall.com https://api.livere.com http://m.addthis.com  http://postcode.map.daum.net  https://log.cizion.com http://www.sciencetimes.co.kr http://sciencelevelup.kofac.re.kr http://opencontents.kofac.re.kr http://cdn.pobbang.com http://s7.addthis.com http://www.facebook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.scienceall.com http://sceinceall.co.kr https://api.livere.com http://code.jquery.com http://d3js.org htts://211.20.179.61 http://211.40.179.61:8080 http://www.google-analytics.com  http://t1.daumcdn.net http://dmaps.daum.net http://dev.livere.co.kr  http://101.livere.co.kr  http://s0.wp.com http://developers.kakao.com http://m.addthisedge.com http://m.addthis.com http://s7.addthis.com  https://ssl.google-analytics.com https://connect.facebook.net http://s7.addthis.com http://wp.com
img-src 'self' https://bookthumb-phinf.pstatic.net  http://*.daum.net http://map3.daumcdn.net http://map2.daumcdn.net  http://dmaps.daum.net http://t1.daumcdn.net http://img.youtube.com  https://s3-ap-northeast-1.amazonaws.com https://stats.g.doubleclick.net http://www.google-analytics.com  http://101.livere.co.kr http://www.sciencetimes.co.kr https://ssl.google-analytics.com https://s-static.ak.facebook.com
style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com http://101.livere.co.kr
http://www.scienceall.com http://opencontents.kofac.re.kr http://youtube.com http://kapi.kakao.com  font-src 'self' http://cdn.pobbang.com http://scienceall.com http://fonts.gstatic.com https://themes.googleusercontent.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' pdh.org.gt 190.111.7.233 *.jquery.com *.google.com *.googleapis.com *.gstatic.com *.twitter.com *.facebook.net *.facebook.com *.google-analytics.com *.twimg.com *.datatables.net *.cloudflare.com *.bootstrapcdn.com *.googletagmanager.com
"default-src 'unsafe-inline' 'unsafe-eval' http://widget.mibbit.com  https: data:
img-src 'self' data: blob: https://i.ytimg.com https://gravatar.com https://avatars.githubusercontent.com https://*.twimg.com https://*.twitter.com https://*.4sqi.net https://*.media.tumblr.com https://graph.facebook.com https://*.facebook.com https://*.fbcdn.net https://*.fbsbx.com https://fbcdn-profile-a.akamaihd.net https://github.global.ssl.fastly.net https://chart.googleapis.com https://google.com https://www.google.com https://*.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.googleapis.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.pt https://google.pt https://numundo.org https://*.numundo.org https://*.tiles.mapbox.com https://*.tile.osm.org https://numundo-dev.imgix.net https://numundo.imgix.net https://blog.numundo.org https://www.facebook.com https://stats.g.doubleclick.net https://*.disqus.com https://*.mxpnl.com https://*.stripe.com https://*.intercomcdn.com https://*.intercomassets.com https://*.imgix.net https://medium.com https://*.medium.com https://www.coinpayments.net
"script-src 'self' 'unsafe-inline' script.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/ maps.googleapis.com 'unsafe-eval' translate.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com platform.instagram.com/en_us/embeds.js www.instagram.com/embed.js platform.twitter.com/widgets.js platform.twitter.com/js/ cdn.syndication.twimg.com/tweets.json connect.facebook.net www.facebook.com 'sha256-mnyiwrivzdv4crjparu0pw6f3lmnpqf08t9f7+ducz8=' 'sha256-fiadhpxewyqdiemxxifqtfiep1hzgqytjwlz7jvg0i0=' 'nonce-mwu2mzm0mjktmjgwyi00zjvhltg4ntqtotmyzmqynthkmzvm'
"default-src 'self' 'unsafe-inline' https://www.google-analytics.com http://ajax.googleapis.com https://www.googletagmanager.com https://assets.zendesk.com https://static.zdassets.com https://ekr.zdassets.com http://www.googletagmanager.com https://modusignsupport.zendesk.com https://*.modusign.co.kr https://cdn.polyfill.io http://widgets.getsitecontrol.com http://st.getsitecontrol.com https://app.getsitecontrol.com https://modusignsupport1521441305.zendesk.com https://www.ucert.co.kr http://ssif1.globalsign.com http://seal.globalsign.com https://player.vimeo.com
font-src 'self' data: http://st.getsitecontrol.com https://*.modusign.co.kr
img-src https://* 'self' https://github-atom-io-herokuapp-com.freetls.fastly.net data:
script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com https://www.google-analytics.com https://platform.twitter.com https://github-atom-io-herokuapp-com.freetls.fastly.net
"default-src 'self' https://administradordeserviciosapi.azure-api.net  https://www.google.com/ https://fonts.googleapis.com/ https://ssl.google-analytics.com/ https://fonts.gstatic.com/ https://ajax.googleapis.com/ wss://*.zopim.com/ 'unsafe-inline'
script-src 'self' https://www.googletagmanager.com/  https://ssl.google-analytics.com/ https://www.google.com/ https://www.gstatic.com/ https://google.com/ https://ajax.googleapis.com/ http://code.jquery.com/ https://*.zopim.com/ https://*.hotjar.com/ https://ajax.aspnetcdn.com/ http://www.google-analytics.com/ 'unsafe-inline' 'unsafe-eval'
style-src 'self' https://*.cloudflare.com/  http://code.jquery.com/ https://www.google.com/ https://www.jqueryscript.net/ https://ajax.aspnetcdn.com/ 'unsafe-inline'
frame-src 'self' https://*.hotjar.com/ https://www.google.com/ 'unsafe-inline'
img-src 'self' http://*.tinypic.com/ https://*.doubleclick.net  http://code.jquery.com/ https://*.zopim.com/ https://ajax.aspnetcdn.com/ https://ssl.google-analytics.com/ http://www.google-analytics.com/ 'unsafe-inline'
font-src 'self' data: https://*.cloudflare.com/  https://*.zopim.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ 'unsafe-inline'
connect-src 'self' https://*.mercadopublico.cl/ https://administradordeserviciosapi.azure-api.net/ https://*.hotjar.com/ wss://*.zopim.com/ 'unsafe-inline'"
"default-src 'self' data: *.squareland.ru *.yandex.ru *.rambler.ru
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vk.com https://yastatic.net https://st.top100.ru *.googlesyndication.com https://ssl.google-analytics.com *.gstatic.com *.google.com *.yandex.ru
frame-src 'self' https://youtube.com *.google.com *.doubleclick.net *.youtube.com *.yandex.ru https://vk.com https://login.vk.com
script-src 'self' 'unsafe-eval' ssl.google-analytics.com d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net
img-src 'self' ssl.google-analytics.com stats.g.doubleclick.net d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net
"script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.google.com apis.google.com ajax.googleapis.com connect.facebook.net platform.twitter.com test-script.dotmetrics.net script.dotmetrics.net w.sharethis.com ws.sharethis.com wd.sharethis.com t.sharethis.com www.gstatic.com www.youtube.com tagmanager.google.com s.ytimg.com count-server.sharethis.com www.googleapis.com api.instagram.com sprymedia.co.uk adex.dotmetrics.net i.tryinteract.com
"font-src 'self' fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com v2.zopim.com smartsupp-widget-161959.c.cdn77.org data:"
"default-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' https:
script-src blob: data: 'self' 'unsafe-eval' 'unsafe-inline' https:"
"default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
script-src * 'self' data:  blob: 'unsafe-inline' 'unsafe-eval'
object-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
style-src *  'self' data: blob: 'unsafe-inline' 'unsafe-eval'
img-src * 'self' data:  blob: 'unsafe-inline' 'unsafe-eval'
media-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
frame-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
font-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
connect-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' *.googleapis.com *.googleanalytics.com 'unsafe-eval' *.google-analytics.com apis.google.com www.google.com *.gstatic.com *maps.googleapis.com https://maps.googleapis.com https://maps.gstatic.com
img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com
font-src 'self' fonts.googleapis.com/ themes.googleusercontent.com fonts.gstatic.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com/ themes.googleusercontent.com fonts.gstatic.com *.google.com *.googleapis.com"
script-src 'self' https://cdn.polyfill.io https://js.stripe.com https://storage.googleapis.com https://pay.google.com https://www.gstatic.com https://www.google-analytics.com 'nonce-vofq8trezhqldsvqtd1i4nrvx2xvfwatb9i3kc2u' 'unsafe-inline'
style-src 'self' https://cdnjs.cloudflare.com 'sha256-k4v9dzltf6e0ixp3xosec0riv7u+wgjrjvjwts/dmsw=' 'sha256-c1fu6tgmjwkntgbw8iqz4obbm+hv3zpaley6dkxwxy0=' 'nonce-vofq8trezhqldsvqtd1i4nrvx2xvfwatb9i3kc2u' 'unsafe-inline'
"default-src 'self' * 'unsafe-inline' 'unsafe-eval' data:"
"frame-ancestors  http://one.axa.com http://author.one.axa.com http://pre.one.axa.com http://author.pre.one.axa.com"
script-src 'self' https://ssl.heureka.cz https://*.zbozi.cz https://ajax.googleapis.com  https://www.google.com https://www.google-analytics.com   'nonce-hq2nafuyh9nptwz5jlfx'
connect-src 'self' blob: bam.nr-data.net a.tiles.mapbox.com plus.browsealoud.com syndication.twitter.com/settings z-m-graph.facebook.com graph.facebook.com s3.amazonaws.com/ehq-production-australia/ s3.amazonaws.com/ehq-production-europe/ s3.amazonaws.com/ehq-production-canada/ s3.amazonaws.com/ehq-production-us-california/ ehq-production-us-california.s3.amazonaws.com/ ehq-production-canada.s3.amazonaws.com/ ehq-production-australia.s3.amazonaws.com/ ehq-production-europe.s3.amazonaws.com/ ehq-production-us-california.s3.us-west-1.amazonaws.com/ ehq-production-canada.s3.ca-central-1.amazonaws.com/ ehq-production-australia.s3.ap-southeast-2.amazonaws.com/ ehq-production-europe.s3.eu-west-1.amazonaws.com/ s3-ap-southeast-2.amazonaws.com/ehq-production-australia/ s3-ca-central-1.amazonaws.com/ehq-production-canada/ s3-us-west-1.amazonaws.com/ehq-production-us-california/ s3-eu-west-1.amazonaws.com/ehq-production-europe/ s3.ca-central-1.amazonaws.com/ehq-production-canada/ https://www.google-analytics.com https://stats.g.doubleclick.net https://translate.googleapis.com
script-src 'self' data: 'unsafe-eval' cdn.jsdelivr.net cdnjs.cloudflare.com ajax.googleapis.com www.browsealoud.com plus.browsealoud.com maxcdn.bootstrapcdn.com www.google-analytics.com ssl.google-analytics.com api.mapbox.com assets.zendesk.com cdn.mxpnl.com cdn.ravenjs.com f1-oc.readspeaker.com epsg.io analytics.engagementhq.com platform.twitter.com cdn.syndication.twimg.com log.pinterest.com assets.pinterest.com connect.facebook.net www.googletagmanager.com translate.google.com s.ytimg.com www.youtube.com/iframe_api apis.google.com translate.googleapis.com s3-ap-southeast-2.amazonaws.com/ehq-bonfire-production/ d569gmo85shlr.cloudfront.net d2i63gac8idpto.cloudfront.net dksxg5o1pn16c.cloudfront.net d2gu4vothxmtom.cloudfront.net d3b3ehuo35wzeh.cloudfront.net d3sbxpiag177w8.cloudfront.net js-agent.newrelic.com bam.nr-data.net https://translate.googleapis.com https://s3-ap-southeast-2.amazonaws.com https://translate.google.com
font-src 'self' https: data: data://* use.typekit.net
img-src 'self' https: data: my.raspberrypi.org profiles-production.s3.eu-west-1.amazonaws.com p.typekit.net
script-src 'self' https: data: 'unsafe-inline' www.google-analytics.com www.googletagmanager.com use.typekit.net tagmanager.google.com
style-src 'self' https: 'unsafe-inline' use.typekit.net
connect-src 'self' wss://*.intercom.io https://*.intercom.io https://api.postcodes.io https://www.google-analytics.com https://*.typekit.net https://api-cdn.embed.ly https://*.stripe.com
"frame-src 'self' https://www.paypal.com/ https://www.sandbox.paypal.com/ https://service.force.com/ https://assets.braintreegateway.com https://a779320009.cdn.optimizely.com https://vars.hotjar.com https://psr.fuel451.com https://checkout.paypal.com https://js.stripe.com https://login.dotomi.com https://bid.g.doubleclick.net https://www.facebook.com https://accounts.google.com https://staticxx.facebook.com https://www.youtube.com https://assets.pinterest.com https://gizmodomedia.go2cloud.org https://sun-basket-meal-delivery-purchase.sjv.io https://tpc.googlesyndication.com https://connect.facebook.net https://web.facebook.com https://www.ojrq.net https://www.storygize.net https://go.influencerlogic.com
"frame-ancestors https://scstatehouse.gov http://scstatehouse.gov https://*.scstatehouse.gov http://*.scstatehouse.gov https://*.schouse.gov http://*.schouse.gov https://*.scsenate.gov http://*.scsenate.gov"
script-src 'unsafe-inline' 'unsafe-eval' fivetran.com *.fivetran.com fbcdn-dragon-a.akamaihd.net fb.me cdn.polyfill.io ajax.googleapis.com cdnjs.cloudflare.com www.googletagmanager.com cdn.segment.com api.segment.io www.googleadservices.com connect.facebook.net maps.googleapis.com www.google-analytics.com cdn.heapanalytics.com cdn.mxpnl.com fivetran.actonservice.com js.driftt.com code.jquery.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com www.google.com www.gstatic.com googleads.g.doubleclick.net hire.withgoogle.com a.quora.com snap.licdn.com pi.pardot.com s.adroll.com s7.addthis.com *.visualwebsiteoptimizer.com *.vwo.com andreasmb.github.io ct.capterra.com
worker-src fivetran.com *.fivetran.com *.visualwebsiteoptimizer.com *.vwo.com
style-src 'unsafe-inline' fivetran.com *.fivetran.com fonts.googleapis.com use.fontawesome.com *.visualwebsiteoptimizer.com *.vwo.com andreasmb.github.io
font-src data: fivetran.com *.fivetran.com fonts.gstatic.com fonts.googleapis.com use.fontawesome.com *.visualwebsiteoptimizer.com *.vwo.com
connect-src fivetran.com *.fivetran.com wss://websockets.fivetran.com wss://staging-websockets.fivetran.com *.algolianet.com *.algolia.net api.mixpanel.com api.segment.io event.api.drift.com *.visualwebsiteoptimizer.com *.vwo.com api.lever.co
child-src *.filepicker.io docs.google.com js.driftt.com *.youtube.com youtu.be giphy.com hire.withgoogle.com fivetran.com *.fivetran.com www.google.com/maps/embed *.visualwebsiteoptimizer.com *.vwo.com
media-src *.youtube.com youtu.be s3.amazonaws.com *.visualwebsiteoptimizer.com *.vwo.com
object-src fivetran.com *.fivetran.com *.visualwebsiteoptimizer.com *.vwo.com"
"script-src 'self' *.harbortest.com *.harborfreight.com cdns.brsrvr.com www.google-analytics.com *.adobetag.com ea.harbortest.com:9143 assets.moovweb.net *.gstatic.com cdn.tt.omtrdc.net harborfreight.tt.omtrdc.net ea.harborfreight.com:9143 px.owneriq.net *.res-x.com seal.verisign.com *.google.com *.igodigital.com *.akamaihd.net *.googleadservices.com *.google-analytics.com *.g.doubleclick.net *.powerreviews.com *.demdex.net *.mouseflow.com *.fastly.net *.sitelabweb.com mpsnare.iesnare.com *.googleapis.com *.payeezy.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net *.nmgassets.com *.turnto.com 'unsafe-eval' 'unsafe-inline'
img-src 'self' blob: data: *.harborfreight22.com *.harbortest.com *.harborfreight.com p.brsrvr.com *.akamaihd.net akamai.mathtag.com *.edgecastcdn.net *.www.turnto.com *.youtube.com *.ytimg.com *.vimeocdn.com px.owneriq.net *.g.doubleclick.net www.google-analytics.com *.ggpht.com *.google.com images.scanalert.com *.powerreviews.com *.facebook.com scontent.xx.fbcdn.net ssl.gstatic.com *.sitelabweb.com *.igodigital.com *.cloudinary.com *.moovweb.net *.googleapis.com *.abmr.net *.gstatic.com *.nr-data.net *.norton.com *.nmgplatform.com cdn.ywxi.net
"img-src 'self' *.slushe.com data: *.affect3d.com affect3dstore.com *.imgur.com www.google-analytics.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.google.com *.googleanalytics.com *.google-analytics.com *.youtube.com *.googleapis.com *.googletagmanager.com
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com tagmanager.google.com
media-src 'self' data: *.googleapis.com storage.googleapis.com
connect-src 'self' *.google.com *.googleapis.com data:
font-src 'self' themes.googleusercontent.com *.gstatic.com fonts.googleapis.com
frame-src 'self' *.google.com *.youtube.com *.doubleclick.net
img-src 'self' *.gstatic.com *.googleusercontent.com *.google-analytics.com data: maps.googleapis.com storage.googleapis.com *.cdninstagram.com *.youtube.com"
"connect-src 'self' wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru https://yandex.kz https://*.yandex.kz static.yandex.sx brotli.yastatic.net et.yastatic.net *.serving-sys.com an.yandex.ru awaps.yandex.ru storage.mds.yandex.net music.yandex.ru music-browser.music.yandex.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st yandex.kz *.yandex.kz
font-src 'self' https://yastatic.net zen.yandex.kz static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net
frame-src 'self' yabrowser: data: https://ok.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net https://pass.yandex.kz https://passport.yandex.kz wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net yandex.kz *.yandex.kz
img-src 'self' data: https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru https://yandex.kz https://*.yandex.kz awaps.yandex.net *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net *.moatads.com avatars.mds.yandex.net bs.serving-sys.com an.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.tns-counter.ru yandex.st yandex.kz *.yandex.kz
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru https://yandex.kz https://www.yandex.kz https://pass.yandex.kz https://mc.yandex.kz zen.yandex.kz an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net z.moatads.com bs.serving-sys.com secure-ds.serving-sys.com zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru awaps.yandex.ru yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net yandex.kz www.yandex.kz suggest.yandex.kz
style-src 'self' 'unsafe-inline' https://yastatic.net https://home.yastatic.net zen.yandex.kz static.yandex.sx brotli.yastatic.net et.yastatic.net zen.yandex.ru yabro1.zen-test.yandex.ru main.zdevx.yandex.ru yastatic.net home.yastatic.net
img-src 'self' data: https://*.intercomcdn.com https://www.google-analytics.com https://downloads.intercomcdn.com/
connect-src 'self' https://auth.iexcloud.io https://api.iexcloud.io https://api.iexcloud.io https://cloud.iexapis.com wss://iexcloud.io wss://tops.iexcloud.io wss://api.iexcloud.io wss://iexcloud.io https://api-iam.intercom.io/messenger/ https://nexus-websocket-a.intercom.io/ https://nexus-websocket-b.intercom.io/ wss://nexus-websocket-a.intercom.io/ wss://nexus-websocket-b.intercom.io/ https://www.google-analytics.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js https://www.google-analytics.com https://js.stripe.com/v3/ https://widget.intercom.io/widget/lhos563b https://js.intercomcdn.com/ https://www.googletagmanager.com
"default-src www.aselsan.com.tr www.google-analytics.com www.youtube.com 'unsafe-inline' 'unsafe-eval'"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com
style-src 'self' 'unsafe-inline' *.googlecode.com *.jquery.com
media-src 'self' twitter.com *.youtube.com soundcloud.com
img-src 'self' imgur.com *.twitter.com data:"
"default-src 'self' *.continuum.ie ajax.aspnetcdn.com webinator.continuous.ie static.ads-twitter.com lptag.liveperson.net lpcdn.lpsnmedia.net *.googletagmanager.com platform.twitter.com analytics.twitter.com accdn.lpsnmedia.net lo.v.liveperson.net ajax.googleapis.com servedby.flashtalking.com accreditation.datacash.com *.googleadservices.com 2866153.fls.doubleclick.net googleads.g.doubleclick.net use.typekit.net static.addtoany.com ib.adnxs.com *.google.com *.google.ie *.google-analytics.com code.jquery.com service.gamma.ie *.t.co d1j07uq9klr1j0.cloudfront.net service.autoaddress.ie api.autoaddress.ie dev.virtualearth.net edge.quantserve.com connect.facebook.net rules.quantcount.com *.youtube.com s.ytimg.com r.turn.com secure.quantserve.com ds-aksb-a.akamaihd.net *.facebook.com *.thrive-csr.com 'unsafe-eval' 'unsafe-inline'
img-src 'self' data: *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com *.hubspot.com *.hubspot.net *.amazonaws.com *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com *.automatedlogic.com *.bapihvac.com *.aic-wireless.com *.dwyer-inst.com *.kmccontrols.com *.alerton.com *.honeywell.com *.kele.com *.functionaldevices.com *.veris.com *.belimo.us *.inteccontrols.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://decentralize.today:443 https://*.decentralize.today:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"frame-ancestors 'self' rels.info *.rels.info relsvaluation.info *.relsvaluation.info vss20.com *.vss20.com vpsuite.com *.vpsuite.com primevaluation.com *.primevaluation.com acslinks.com *.acslinks.com evalueit.com *.evalueit.com relsvaluation.com *.relsvaluation.com acisky.com *.acisky.com"
connect-src ws://localhost:* https://www.google-analytics.com https://fonts.googleapis.com https://api.stripe.com https://*.nebenan.de https://*.mesvoisins.fr
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://500ish.com:443 https://*.500ish.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' www.arminwolf.at *.arminwolf.at ws: wws: *.youtube.com *.vimeo.com *.facebook.com platform.twitter.com twitter.com *.twitter.com *.twimg.com *.googleapis.com *.facebook.net *.gstatic.com *.google.com *.wp.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net *.soundcloud.com soundcloud.com *.scribd.com *.slideshare.net *.speakerdeck.com *.tumblr.com *.instagram.com *.flickr.com code.jquery.com uebermedien.de data: 'unsafe-inline' 'unsafe-eval'
connect-src wss: ws: https: http: www.google-analytics.com stats.g.doubleclick.net
img-src 'self' data: static.intercomassets.com www.google-analytics.com www.google.com www.google.com.br stats.g.doubleclick.net www.facebook.com ssl.gstatic.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' stats.pusher.com connect.trezor.io widget.intercom.io js.intercomcdn.com connect.facebook.net www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com www.googleadservices.com googleads.g.doubleclick.net
style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com"
"default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com
script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adsafeprotected.com *.serving-sys.com https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.strategyzer.com https://apis.google.com/js/platform.js https://doug1izaerwt3.cloudfront.net/d750a6b3d5caf6f17a613ab3c7cd89578e7c7da8.1.js https://i.kissmetrics.com/i.js https://js.honeybadger.io/v0.4/honeybadger.min.js https://platform.linkedin.com/in.js https://use.typekit.net/scu6kxz.js https://widget.uservoice.com/wdffycygafsdjwfbtxu8w.js https://www.youtube.com/iframe_api https://js.intercomcdn.com/shim.0a7132dd.js https://js.intercomcdn.com/frame.92c89987.js https://js.recurly.com/v3/recurly.js https://api.recurly.com https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io https://cdnjs.cloudflare.com/ajax/libs/authy-form-helpers/2.3/form.authy.min.js 'nonce-lqfpr92zqipqzatccvvwhx7xaw/l2ojjnt2qlgeqy2c='
"default-src nxmlabs.com https://fonts.googleapis.com/ https://fonts.gstatic.com/ 'unsafe-inline'
script-src nxmlabs.com https://www.googletagmanager.com/ https://www.google-analytics.com/analytics.js https://cdnjs.cloudflare.com/ 'unsafe-inline'
"default-src 'unsafe-inline' 'unsafe-eval' https: data:"
script-src 'self' *.transunion.com *.mxpnl.com *.addthis.com *.vols7feed.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'
script-src 'self' 'nonce-56fed852-7f7b-467d-8ca3-021349dc3d55' 'unsafe-inline' cdn.polyfill.io *.facebook.net *.google.com *.taglr.com *.cloudflare.com http://static.clevertap.com https://d2r1yp2w7bby2u.cloudfront.net https://*.cloudfront.net http://wzrkt.com https://*.amazonaws.com *.hockeycurve.com/taglr-001.js *.googletagmanager.com *.googleadservices.com http://ads.google.com/ *.youtube.com/ http://googleads.g.doubleclick.net/
script-src https: 'unsafe-inline' 'unsafe-eval' 'self' *.google.com *.maps.google.com *.googletagmanager.com *.facebook.com *.google-analytics.com
"default-src 'self' *.yandex.net yandex.net webvisor.com *.webvisor.com *.oboi-store.ru *.parketov-store.ru
script-src 'self' *.oboi-store.ru *.parketov-store.ru 'unsafe-inline' 'unsafe-eval' *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com vk.com *.vk.com https://vk.com https://*.vk.com userapi.com ok.ru *.ok.ru googletagmanager.com *.googletagmanager.com roistat.com *.roistat.com callbackhunter.com *.callbackhunter.com addthis.com *.addthis.com jivosite.com *.jivosite.com google-analytics.com *.google-analytics.com pinterest.com *.pinterest.com facebook.com *.facebook.com facebook.net *.facebook.net mail.ru *.mail.ru fb.com *.fb.com planner5d.com *.planner5d.com https://planner5d.com https://*.planner5d.com begun.ru *.begun.ru disqus.com *.disqus.com odnoklassniki.ru *.odnoklassniki.ru clickfrog.ru *.clickfrog.ru comagic.ru *.comagic.ru googleadservices.com *.googleadservices.com linkedin.com *.linkedin.com google.com *.google.com *.addthisedge.com addthisedge.com *.rambler.ru rambler.ru *.hellobar.com *.cartprotector.com *.getsitecontrol.com *.kxcdn.com https://yastatic.net *.disquscdn.com *.google.ru https://tracker.convead.io https://s.mixmarket.biz
child-src 'self' *.oboi-store.ru *.parketov-store.ru youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru googletagmanager.com *.googletagmanager.com roistat.com *.roistat.com callbackhunter.com *.callbackhunter.com addthis.com *.addthis.com jivosite.com *.jivosite.com google-analytics.com *.google-analytics.com pinterest.com *.pinterest.com facebook.com *.facebook.com fb.com *.fb.com planner5d.com *.planner5d.com https://planner5d.com https://*.planner5d.com begun.ru *.begun.ru disqus.com *.disqus.com odnoklassniki.ru *.odnoklassniki.ru clickfrog.ru *.clickfrog.ru google.com *.google.com google.ru *.google.ru yandex.ru *.yandex.ru *.cartprotector.com cartprotector.com *.yandex.net yandex.net webvisor.com *.webvisor.com https://tracker.convead.io http://hightsearch.com
object-src 'self' * *.oboi-store.ru *.parketov-store.ru
img-src 'self' * data: *.oboi-store.ru *.parketov-store.ru https://planner5d.com https://*.planner5d.com planner5d.com *.planner5d.com clickfrog.ru *.clickfrog.ru
font-src 'self' * data: *.oboi-store.ru *.parketov-store.ru
connect-src 'self' * https://planner5d.com https://*.planner5d.com planner5d.com *.planner5d.com
style-src 'unsafe-inline' 'unsafe-eval' 'self' * *.oboi-store.ru *.parketov-store.ru
media-src 'self' *.oboi-store.ru *.parketov-store.ru callbackhunter.com *.callbackhunter.com comagic.ru *.comagic.ru jivosite.com *.jivosite.com
frame-src 'self' irpages2.equitystory.com charts3.equitystory.com easyhr.io www.google-analytics.com ajax.googleapis.com www.youtube.com
font-src 'self' data: fonts.gstatic.com localhost:8888 smartsupp-widget-161959.c.cdn77.org
connect-src 'self' *.monkeytracker.cz localhost:8888 *.google.com *.googleapis.com *.google-analytics.com *.cloudflare.com *.addthis.com *.smartsupp.com wss://s14.smartsupp.com *.smartlook.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com *.googletagmanager.com *.google-analytics.com *.monkeytracker.cz *.googleadservices.com *.smartsuppchat.com *.facebook.net *.doubleclick.net *.imedia.cz *.cloudflare.com *.affilbox.cz *.addthis.com *.addthisedge.com *.adroll.com smartsupp-widget-161959.c.cdn77.org d.adroll.com rec.smartlook.com *.fg.cz
frame-src 'self' www.youtube.com *.iplatba.cz localhost:8888 *.affilbox.cz *.addthis.com *.facebook.com *.imedia.cz affiliateclub.go2cloud.org
child-src 'self' www.youtube.com *.iplatba.cz localhost:8888 *.affilbox.cz *.addthis.com *.facebook.com *.imedia.cz affiliateclub.go2cloud.org
img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com *.googletagmanager.com *.google-analytics.com *.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie *.imedia.cz smartsupp-files-161959.c.cdn77.org d.adroll.com *.facebook.com us-u.openx.net idsync.rlcdn.com ib.adnxs.com x.bidswitch.net ads.yahoo.com s.amazon-adsystem.com dpm.demdex.net pippio.com match.rundsp.com global.ib-ibi.com *.fg.cz *.trikator.cz
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.monkeytracker.cz *.google.com *.cloudflare.com smartsupp-widget-161959.c.cdn77.org *.fg.cz
style-src 'self' 'unsafe-eval' 'unsafe-inline' https:"
frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://www.youtube.com https://tautt.zendesk.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.bing.com *.linkedin.com *.doubleclick.net ssl.google-analytics.com www.google.com *.licdn.com cdnjs.cloudflare.com *.createsend1.com connect.facebook.net facebook.com *.sojern.com *.google.com ajax.googleapis.com www.googleapis.com code.visitor-track.com ml314.com www.rumiview.com assets.adobedtm.com use.typekit.net reservations.liedlodge.org www.gstatic.com public.tockify.com assets.pinterest.com www.jscache.com www.tripadvisor.com static.tacdn.com
img-src 'self' ml314.com www.googleapis.com *.gstatic.com cdn.otstatic.com *.pinterest.com *.facebook.com *.google.com *.doubleclick.net *.google-analytics.com www.google-analytics.com code.visitor-track.com *.bing.com p.typekit.net i.ytimg.com www.rumiview.com sync.multiview.com arbordayfarm.org arborday.org www.arborday.org www.tripadvisor.com p.travelsmarter.net widget.criteo.com dis.us.criteo.com www.google.com
font-src 'self' data: use.typekit.net *.liedlodge.org fonts.gstatic.com static.tacdn.com
style-src 'self' 'unsafe-inline' data: use.typekit.net *.google.com cdn.otstatic.com www.google.com *.googleapis.com  reservations.liedlodge.org public.tockify.com static.tacdn.com
frame-src *.matterport.com *.vimeo.com www.youtube.com *.createsend1.com *.google.com tockify.com *.doubleclick.net
"default-src data: 'self' 'unsafe-inline' https://vjs.zencdn.net *.blogis.net m-shes.ru buawdshes.ru pornoprofi.com
script-src 'self' https://apis.google.com https://platform.twitter.com https://ssl.google-analytics.com https://api.github.com https://slexblog.disqus.com https://go.disqus.com https://*.disquscdn.com
img-src 'self' https://gravatar.com https://www.google.com https://ssl.gstatic.com https://ssl.google-analytics.com https://referrer.disqus.com https://juggler.services.disqus.com https://*.disquscdn.com data:
frame-src 'self' https://platform.twitter.com https://accounts.google.com https://player.vimeo.com https://www.youtube.com https://apis.google.com https://disqus.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://noc.kolabsys.com
script-src 'unsafe-eval' 'unsafe-inline' 'self' https://*.googleapis.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://connect.facebook.net
style-src 'unsafe-inline' 'self' https://*.googleapis.com https://tagmanager.google.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://api.filepicker.io https://js.hs-analytics.net https://js.hs-scripts.com https://js.pusher.com https://stats.pusher.com https://api.filestackapi.com https://widget.intercom.io https://js.intercomcdn.com https://fullstory.com https://www.google-analytics.com
connect-src 'self' wss://*.pusher.com https://*.pusher.com https://rs.fullstory.com https://www.filestackapi.com
img-src 'self' 'unsafe-inline' data: https://cdn.filestackcontent.com https://maps.gstatic.com https://maps.googleapis.com https://track.hubspot.com"
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com *.googleadservices.com *.google.com data:
style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net
img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com slimbox.eu *.doubleclick.net
font-src data: 'self' *.gstatic.com cdn.jsdelivr.net
script-src 'self' 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com www.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com www.googleadservices.com *.gstatic.com *.googleapis.com connect.facebook.net sjs.bizographics.com static.hotjar.com script.hotjar.com secure.leadforensics.com snap.licdn.com googleads.g.doubleclick.net *.linkedin.com *.adnxs.com *.polyfill.io *.jsdelivr.net
img-src 'self' data: *.g.doubleclick.net www.google-analytics.com www.facebook.com www.google.com www.google.ca *.gstatic.com secure.adnxs.com *.linkedin.com *.gravatar.com
frame-src 'self' www.google.com www.youtube.com *.g.doubleclick.net *.hotjar.com *.elegantthemes.com
connect-src 'self' apis.google.com snap.licdn.com *.hotjar.com wss://*.hotjar.com *.adnxs.com
"default-src 'self' https://maps.google.com *.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.intercomcdn.com *.s3.amazonaws.com/campayn/
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://js.intercomcdn.com/ https://www.google.com https://maps.googleapis.com  https://s3.ca-central-1.amazonaws.com https://www.google-analytics.com/analytics.js https://widget.intercom.io/widget/uwbbdh5l https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
img-src 'self' https://campayn.s3.amazonaws.com/ http://s3.amazonaws.com/s3_campayn.com/ http://s3.amazonaws.com/campayn/ https://s3.amazonaws.com/campayn/ s3.amazonaws.com/campaynnet/ *.staticflickr.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ http://s3.amazonaws.com/s3_campayn-dev.com/ https://s3.amazonaws.com/s3_campayn.com/ data: https://www.google-analytics.com/collect *.intercomcdn.com *.campayn.test campayn.test *.campayn.com campayn.com alek.campayn.com *.campayn.net campayn.net https://www.gravatar.com/ http://i1.wp.com https://i1.wp.com https://static.intercomassets.com/ https://ssl.google-analytics.com https://www.google-analytics.com/r/collect https://s-static.ak.facebook.com https://assets.zendesk.com
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gravatar.com https://fonts.gstatic.com https://assets.zendesk.com
font-src 'self' https://js.intercomcdn.com/fonts/ https://themes.googleusercontent.com https://fonts.gstatic.com
frame-src 'self' https://www.google.com/recaptcha/ https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://secure.rightsignature.com/ https://widget.intercom.io/
"default-src 'self' data: https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.googletagmanager.com https://capmetro.hafas.cloud https://maps.google.com https://action.dstillery.com https://www.google.com https://apis.google.com https://www.gstatic.com https://s.thebrighttag.com https://translate.googleapis.com http://s.btstatic.com https://s.btstatic.com https://geo1.ggpht.com https://geo2.ggpht.com https://geo3.ggpht.com https://cbks0.googleapis.com https://geo0.ggpht.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com http://www.youtube.com https://ssl.google-analytics.com https://fonts.googleapis.com https://gishost-osm-b.hacon.de https://s3.amazonaws.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de
script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://tagmanager.google.com  https://www.googletagmanager.com https://bs.serving-sys.com https://googleads.g.doubleclick.net https://www.googleadservices.com/ https://www.googletagmanager.com http://s.btstatic.com/ https://static.ctctcdn.com https://static.ctctcdn.com/ https://apis.google.com https://translate.googleapis.com https://s.btstatic.com  https://s.thebrighttag.com https://maps.google.com https://maps.googleapis.com https://fonts.googleapis.com https://s3.amazonaws.com https://ssl.google-analytics.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud
"default.src unedbarbastro.es google.com 'unsafe-inline'  'unsafe-eval'"
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://maps.google.com https://maps.google.com https://ajax.googleapis.com https://www.google-analytics.com https://www.google.com https://cdn.rawgit.com https://maps.googleapis.com https://maps.gstatic.com https://ssl.google-analytics.com
style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://fonts.googleapis.com https://fast.fonts.com https://www.google.com
img-src 'self' data: https://maps.google.com https://maps.googleapis.com http://maps.googleapis.com https://cdn.rawgit.com https://raw.githubusercontent.com https://ssl.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com
"script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.reviewability.com rb.whitespark.ca disqus.com *.disqus.com *.disquscdn.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.facebook.com *.facebook.net *.boldchat.com *.verragio.com *.doubleclick.net *.paypalobjects.com *.paypal.com
frame-src 'self' https://*.verragio.com https://*.facebook.com https://*.google.com https://disqus.com https://widget.reviewability.com https://*.youtube.com"
"default-src https://greektrack.com:443 https://www.greektrack.com:443 https://*.youtube.com https://*.twitter.com https://*.google.com https://cdn.jsdelivr.net https://*.paypal.com https://*.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://cdn.rawgit.com
style-src 'unsafe-inline' https://greektrack.com:443 https://www.greektrack.com:443 https://*.gstatic.com https://cdn.jsdelivr.net https://cdn.datatables.net https://*.google.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com
script-src https://greektrack.com:443 https://www.greektrack.com:443 https://*.zopim.com https://*.zdassets.com https://*.capterra.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net https://*.ads-twitter.com https://*.facebook.net https://*.bing.com https://*.gstatic.com https://*.facebook.net https://*.googletagmanager.com https://*.googleadservices.com https://*.twitter.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://cdn.rawgit.com https://*.google.com https://www.google-analytics.com https://*.googleapis.com https://malsup.github.io https://*.wepay.com 'unsafe-inline' 'unsafe-eval'
frame-src https://greektrack.com:443 https://www.greektrack.com:443 https://*.twitter.com http://*.wepay.com https://*.wepay.com https://*.facebook.com https://*.facebook.net https://*.google.com https://*.youtube.com
connect-src https://greektrack.com:443 https://www.greektrack.com:443 wss://*.zopim.com https://*.zopim.com https://*.zipim.com https://*.zdassets.com https://*.zendesk.com https://*.google-analytics.com https://*.doubleclick.net
font-src https://*.greektrack.com https://*.zopim.com https://cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/fonts/slick.woff https://cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/fonts/slick.ttf https://*.gstatic.com  https://maxcdn.bootstrapcdn.com data:
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com apis.google.com *.googletagmanager.com *.youtube.com maps.gstatic.com *.google-analytics.com platform.twitter.com connect.facebook.net cdn.jsdelivr.net piwik.koumbit.net
frame-src 'self' *.youtube.com apis.google.com accounts.google.com *.googletagmanager.com platform.twitter.com *.facebook.com s-static.ak.facebook.com archive.org"
"script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://maps.googleapis.com https://fonts.googleapis.com https://browser-update.org http://browser-update.org https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ajax.googleapis.com https://www.facebook.com https://platform.twitter.com https://maps.googleapis.com https://cdn.ckeditor.com https://www.caat.or.th
style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com https://fonts.googleapis.com https://www.facebook.com https://www.caat.or.th
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' speakerdeck.com www.google-analytics.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com cdn.jsdelivr.net assets.codepen.io production-assets.codepen.io ifttt.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://localhost:44301 https://*.teams.microsoft.com https://*.azurewebsites.net https://*.wistia.com https://*.wistia.net https://*.gstatic.com https://*.jquery.com https://*.cloudflare.com
script-src 'self' *.google.com  maps.googleapis.com www.google-analytics.com/analytics.js *.uservoice.com assets.uvcdn.com connect.facebook.net *.twitter.com cdn.syndication.twimg.com www.gstatic.com cdn.jsdelivr.net graph.facebook.com 'unsafe-inline' 'unsafe-eval'
style-src 'self' fonts.googleapis.com platform.twitter.com 'unsafe-inline'
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://eidolon.pub:443 https://*.eidolon.pub:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"script-src 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com/jquery-1.11.2.min.js stats.g.doubleclick.net *.addthis.com m.addthisedge.com https://seal.thawte.com *.cloudfront.net
img-src 'self' extranet.acsysweb.com sitemanager.acsysinteractive.com stats.g.doubleclick.net *.thawte.com
frame-src 'self' https://*.cogitamus.de https://*.twitter.com https://*.facebook.com https://*.facebook.net https://*.trustarc.com https://*.issuu.com https://*.youtube.com https://*.youtube-nocookie.com https://*.addthis.com https://*.webmasterplan.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.aswatson.net https://*.feefo.com https://*.doubleclick.net https://*.peerius.com https://*.truste.com https://*.trustarc.com https://*.facebook.net https://*.twitter.com https://*.issuu.com https://*.getback.ch https://*.webmasterplan.com https://*.addthis.com https://*.addthisedge.com https://*.netlify.com https://*.cloudfront.net https://*.marionnaud.ch https://*.newrelic.com https://*.nr-data.net
connect-src 'self' https://*.feefo.com https://*.aswatson.net https://*.doubleclick.net https://*.netlify.com https://*.revieve.com https://*.webmasterplan.com https://*.addthis.com https://*.addthisedge.com
style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.fontawesome.com https://*.cloudfront.net https://*.getback.ch https://*.cloudflare.com https://*.netlify.com https://*.marionnaud.ch
font-src 'self' data: https://*.fonts.googleapis.com https://*.gstatic.com https://*.fonts.gstatic.com https://*.fontawesome.com https://*.cloudflare.com https://*.marionnaud.ch
"default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://ipredator.se https://*.ipredator.se
sandbox allow-forms allow-same-origin allow-scripts allow-top-navigation allow-popups
"default-src 'unsafe-eval' 'unsafe-inline' 'self' *.ltrade.com http://www.ltradestores.com *.doubleclick.net *.google.com *.google.cz *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gopay.com *.gstatic.com *.gopay.cz *.heureka.cz *.hledejceny.cz im9.cz *.imedia.cz *.zbozi.cz *.youtube.com d10lpsik1i8c69.cloudfront.net  *.luckyorange.com *.luckyorange.net *.pusher.com *.pusherapp.com wss://visitors.live secure.gravatar.com *.smartlook.com *.getsmartlook.com"
"default-src 'self' https://fonts.gstatic.com 'unsafe-inline' 'unsafe-eval' *
script-src 'self' https://maps.googleapis.com https://www.gstatic.com https://code.jquery.com/ui/1.10.4/jquery-ui.min.js 'unsafe-inline' 'unsafe-eval' *
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval' *
img-src 'self' data: https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval' *
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *
frame-src 'self' 'unsafe-inline' 'unsafe-eval' *"
"frame-ancestors 'self' http://www.convertpdftoword.net http://convertpdftoword.net http://www.biggine.com http://biggine.com"
font-src data: *.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.showerspares.com
script-src 'unsafe-eval' 'unsafe-inline' *.amazon.co.uk *.amazon.com *.payments-amazon.com *.amazonaws.com *.doubleclick.net *.facebook.net *.fontawesome.com *.google.com *.google-analytics.com *.googleapis.com *.googlecommerce.com *.gstatic.com *.hotjar.com *.ideal-postcodes.co.uk *.nssmerchants.com *.nsstravis.com *.olark.com *.showerspares.com *.trustpilot.com *.youtube.com *.ytimg.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ajax.googleapis.com https://code.jquery.com https://unpkg.com https://connect.facebook.net
style-src 'self' 'unsafe-inline' http://netdna.bootstrapcdn.com https://fonts.googleapis.com https://use.fontawesome.com/releases/v5.5.0/css/all.css
font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com http://netdna.bootstrapcdn.com https://use.fontawesome.com
"default-src 'self' 'unsafe-inline' data: datamix.io datamix.cloud datamix.design datamix.media www.facebook.com radio.immo cdn.card.pm about.card.pm q.stripe.com use.typekit.net p.typekit.net cdnjs.cloudflare.com code.jquery.com card.pm next.card.pm app.livechat.pm maxcdn.bootstrapcdn.com *.googleapis.com *.googleusercontent.com fonts.gstatic.com
script-src 'unsafe-eval' 'unsafe-inline' datamix.io datamix.cloud datamix.design datamix.media connect.facebook.net api.stripe.com q.stripe.com cdnjs.cloudflare.com d3m55resnjf8ja.cloudfront.net code.jquery.com card.pm about.card.pm next.card.pm app.livechat.pm maxcdn.bootstrapcdn.com *.googleapis.com *.googleusercontent.com fonts.gstatic.com
style-src datamix.io datamix.cloud datamix.design datamix.media cdnjs.cloudflare.com d3m55resnjf8ja.cloudfront.net use.typekit.net p.typekit.net code.jquery.com card.pm next.card.pm app.livechat.pm maxcdn.bootstrapcdn.com *.googleapis.com *.googleusercontent.com fonts.gstatic.com maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com *.googleapis.com *.googleusercontent.com fonts.gstatic.com 'unsafe-inline'
script-src 'nonce-a84882c6-f4b4-4dd4-98ff-afc5fde11f77' 'unsafe-inline' 'unsafe-eval' https: http: https://*.maps.googleapis.com https://*.cdn.polyfill.io https://*.google-analytics.com https://*.csi.gstatic.com https://*.stats.g.doubleclick.net https://fonts.googleapis.com data:
img-src 'self' data: gtrk.s3.amazonaws.com mlsvc01-prod.s3.amazonaws.com *.constantcontact.com www.google.com cdnjs.cloudflare.com www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net static.doubleclick.net www.gravatar.com i.simpli.fi *.gstatic.com *.googleapis.com maps.googleapis.com *.umbraco.tv umbraco.tv *.zopim.com *.cdn77.org flexiengine.azurewebsites.net *.azureedge.net
frame-ancestors 'self' *.thinglink.com cdn.thinglink.me *.tlsrv.net teams.microsoft.com *.teams.microsoft.com *.skype.com
"default-src 'unsafe-inline' 'unsafe-eval' https: data: www.youtube.com s.ytimg.com *.cicbiogune.es *.googleapis.com *.gstatic.com *.google-analytics.com
connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://getpocket.com https://muditalab.com:443 https://*.muditalab.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'
"default-src 'self' 'unsafe-inline' 'unsafe-eval' fast.fonts.net *.hubspot.com *.hsforms.net *.sharethis.com *.consensu.org *.google-analytics.com *.getclicky.com *.twitter.com *.addthis.com *.googleapis.com *.vimeo.com *.youtube.com *.googlecode.com *.media-server.com *.livestream.com *.hs-scripts.com *.hs-analytics.net *.googletagmanager.com *.twimg.com *.doubleclick.net *.cludo.com *.pcisecuritystandards.org *.force.com *.hsforms.com *.gstatic.com *.wowza.com *.amazonaws.com *.akamaihd.net blob:
script-src 'self'  'unsafe-eval' 'unsafe-inline' *.pingdom.net https://prdapp02.xisecurenet.com/
frame-ancestors 'self' www.tristatefinancial.net  www.midatlanticcapital.net  ownerslounge.welkresorts.com  www.myaccountinquiry.com  test.myaccountinquiry.com
connect-src 'self' https://api.useinsider.com/ https://location.api.useinsider.com/ https://hit.api.useinsider.com https://fwd.api.useinsider.com/ https://surfer.seasonalife.com/* *.surfer.seasonalife.com *.seasonalife.com https://category-collector.api.useinsider.com/ https://image.useinsider.com/ https://*.api.useinsider.com https://search.fwd.com.hk/ wss://directline.botframework.com *.botframework.com http://search.fwd.com.hk/ https://search.fwd.com.ph/ http://search.fwd.com.ph/ https://connect.fwd.co.th https://line.fwd.co.th https://portal.fwd.com.vn wss://*.zopim.com *.maxmind.com api.map.baidu.com *.adnxs.com *.turn.com *.adsrvr.org *.facebook.com *.vimeo.com *.youtube.com *.taboola.com
script-src 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com  *.local *.dotdemos.com *.dot.jo iiabank.com.jo *.iiabank.com.jo
style-src 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.ckeditor.com exchange.jo  *.local *.dotdemos.com *.dot.jo iiabank.com.jo *.iiabank.com.jo
img-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.ckeditor.com *.googleapis.com *.google-analytics.com *.gstatic.com *.local *.dotdemos.com iiabank.com.jo *.iiabank.com.jo
media-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.googleapis.com *.gstatic.com *.google-analytics.com  *.local *.dotdemos.com *.dot.jo iiabank.com.jo *.iiabank.com.jo
frame-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com  *.local *.dotdemos.com *.dot.jo iiabank.com.jo *.iiabank.com.jo
font-src 'self' 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com  *.local *.dotdemos.com *.dot.jo iiabank.com.jo *.iiabank.com.jo
"default-src 'self' routing.verkehr.nrw *.geoportal.nrw *.nrw.de
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.geoportal.nrw *.nrw.de *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com www.gstatic.com
style-src 'self' 'unsafe-inline' *.geoportal.nrw *.nrw.de *.twitter.com *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com
frame-src 'self' data: blob: *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com services.bgr.de
child-src 'self' *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com
frame-ancestors 'self' *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com
media-src *.googleapis.com *.bootstrapcdn.com *.geoportal.nrw *.nrw.de
font-src 'self' data: *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com *.linkedin.com *.twitter.com
form-action 'self' *.linkedin.com *.twitter.com *.facebook.com *.google.com
frame-src 'self' *.linkedin.com *.twitter.com *.google.com *.elegantthemes.com *.youtube.com *.facebook.com
img-src 'self' data: *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.google.co.za *.googleapis.com *.gstatic.com *.google-analytics.com *.gravatar.com *.linkedin.com *.twitter.com *.twimg.com *.jquery.com
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com *.facebook.net *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com *.licdn.com *.linkedin.com *.twitter.com *.twimg.com *.getclicky.com *.google-analytics.com *.jquery.com *.jqueryui.com *.jsdelivr.net
style-src 'self' 'unsafe-inline' *.fontawesome.com *.google.com *.googleapis.com *.linkedin.com *.twitter.com *.twimg.com *.jquery.com
"default-src 'self' *.googletagmanager.com *.google-analytics.com *.serving-sys.com 'unsafe-inline' 'unsafe-eval'"
connect-src https: wss: 'self' *.tawk.to"
"default-src 'self' 'unsafe-inline' 'unsafe-eval'  https: data: http://fonts.googleapis.com http://fonts.gstatic.com http://www.google-analytics.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com http://graph.facebook.com http://widgets.pinterest.com http://maps.google.com http://csi.gstatic.com http://maps.gstatic.com http://maps.googleapis.com http://www.linkedin.com http://api-public.addthis.com http://localhost http://www.youtube.com
script-src 'self' 'unsafe-eval' *.google-analytics.com www.googleadservices.com *.ads-twitter.com analytics.twitter.com connect.facebook.net *.doubleclick.net *.hotjar.com ajax.cloudflare.com *.site24x7rum.com *.disqus.com *.disquscdn.com *.civic.com *.woopra.com https://tokenmarket.zendesk.com wss://tokenmarket.zendesk.com https://static.zdassets.com https://ekr.zdassets.com 'unsafe-inline' 'nonce-judnr35snbq7yi4msrsazhb4lm'