Content-Security-Policy: default-src 'self' https://*.appsync-api.eu-central-1.amazonaws.com/graphql; script-src 'self' 'unsafe-inline' static.eu.mygp.global; style-src 'self' 'unsafe-inline' static.eu.mygp.global static.mygp.global fonts.googleapis.com; img-src 'self' data: static.eu.mygp.global static.mygp.global; font-src 'self' fonts.gstatic.com fonts.googleapis.com static.mygp.global static.eu.mygp.global; connect-src 'self' api.eu.mygp.global https://*.appsync-api.eu-central-1.amazonaws.com/graphql cms.internal.mygp.global static.eu.mygp.global; frame-src 'self'