Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'nonce-Podclez3ZFmLxf1J7DFuIA==' 'strict-dynamic' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' *.czno.com; style-src-attr 'unsafe-inline'; img-src 'self' data: *.mtch.com blob: https:; font-src 'self' *.match.com *.cookielaw.org *.onetrust.com *.optanon.com *.gstatic.com *.googleapis.com *.czno.com; connect-src 'self' https: blob: ; frame-src 'self' *.match.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.adtrafficquality.google *.adnxs.com *.criteo.com *.criteo.net *.rubiconproject.com ads.pubmatic.com js-sec.indexww.com *.pinterest.com *.snapchat.com *.facebook.com *.match.com *.mtch.com *.arkoselabs.com *.nift.me; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' *.facebook.com; frame-ancestors 'self' *.match.com; manifest-src 'self'; worker-src 'self' blob:; report-uri /csp-violation-report;