Content-Security-Policy: upgrade-insecure-requests; default-src 'self' 'unsafe-inline' https: data:; base-uri 'self'; img-src * data: blob:; script-src 'self' 'unsafe-inline' blob: https://ep2.adraffinityquality.google https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cdn.mouseflow.com; script-src-elem 'self' 'unsafe-inline' blob: https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cdn.mouseflow.com https://ep2.adtrafficquality.google; object-src 'none';