Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://moonx-dev.com https://*.moonx-dev.com https://www.google.com https://www.gstatic.com https://sonicsdk.mastercard.com https://assets.adobedtm.com https://cdn.cookielaw.org https://*.onetrust.com; connect-src 'self' https://*.sanity.io https://moonx-dev.com https://*.moonx-dev.com https://x-iframe.moonpay.com https://www.google.com https://api.ethpass.xyz https://metadata.hypermint.com https://cdn.cookielaw.org https://*.onetrust.com https://*.adobedc.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://moonx-dev.com https://*.moonx-dev.com https://cdn.cookielaw.org https://*.onetrust.com; font-src 'self' data: https://fonts.gstatic.com https://moonx-dev.com https://*.moonx-dev.com https://cdn.cookielaw.org https://*.onetrust.com; img-src 'self' data: blob: https://cdn.sanity.io https://metadata.hypermint.com https://storage.googleapis.com https://hypermint-metadata.s3.eu-west-1.amazonaws.com https://moonx-dev.com https://*.moonx-dev.com https://cdn.cookielaw.org https://*.onetrust.com https://www.mastercard.com/content/dam/mccom/shared/ma_symbol.png; media-src 'self' data: blob: https://cdn.sanity.io https://metadata.hypermint.com https://storage.googleapis.com https://hypermint-metadata.s3.eu-west-1.amazonaws.com; frame-src 'self' https://moonx-dev.com https://*.moonx-dev.com https://x-iframe.moonpay.com https://www.google.com https://cdn.cookielaw.org https://*.onetrust.com; frame-ancestors 'self'