Content-Security-Policy: object-src 'self'; frame-src 'self' ableton: bandcamp.com www.facebook.com optimize.google.com embed.spotify.com open.spotify.com w.soundcloud.com player.vimeo.com www.youtube-nocookie.com www.youtube.com ljsp.lwcdn.com brandfolder.com www.instagram.com crowdin.com; default-src 'self' blob: data: https: ableton:; frame-ancestors 'self' ableton.lightning.force.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' api.soundcloud.com w.soundcloud.com www.youtube.com www.youtube-nocookie.com s.ytimg.com www.googleadservices.com googleads.g.doubleclick.net optimize.google.com connect.facebook.net recommender.scarabresearch.com static.scarabresearch.com analytics.tiktok.com www.googletagmanager.com www.instagram.com cdn.syndication.twimg.com platform.twitter.com syndication.twitter.com use.typekit.net cdn.crowdin.com crowdin.com cdn.matomo.cloud analytics.ableton.com cdn.jsdelivr.net chat.digitalgenius.com chat-assets.digitalgenius.com *.dgdeepai.com cdn.voiceflow.com cdn-resources.ableton.com; style-src 'self' 'unsafe-inline' optimize.google.com fonts.googleapis.com platform.twitter.com ton.twimg.com use.typekit.net cdn.crowdin.com cdn.jsdelivr.net cdn.voiceflow.com cdn-resources.ableton.com; report-uri /csp/report/