Content-Security-Policy: default-src 'self'; script-src 'self' core.spreedly.com global.localizecdn.com js.stripe.com applepay.cdn-apple.com 'report-sha256'; style-src 'unsafe-inline' fonts.googleapis.com; img-src * data:; font-src data: fonts.gstatic.com; connect-src 'self' google.com pay.google.com tez.google.com www.google.com checkout-service.paddle.com checkout-analytics.paddle.com create-checkout.paddle.com core.spreedly.com ld.paddle.com global.localizecdn.com o522631.ingest.sentry.io; frame-src *; manifest-src 'self'; upgrade-insecure-requests; report-uri https://paddlecfe.report-uri.com/r/t/csp/enforce; report-to default, default-src 'self'; script-src 'self' core.spreedly.com global.localizecdn.com js.stripe.com applepay.cdn-apple.com 'report-sha256'; style-src 'unsafe-inline' fonts.googleapis.com; img-src * data:; font-src data: fonts.gstatic.com; connect-src 'self' google.com pay.google.com tez.google.com www.google.com checkout-service.paddle.com checkout-analytics.paddle.com create-checkout.paddle.com core.spreedly.com ld.paddle.com global.localizecdn.com o522631.ingest.sentry.io; frame-src *; manifest-src 'self'; upgrade-insecure-requests; report-uri https://paddlecfe.report-uri.com/r/t/csp/enforce; report-to default