Content-Security-Policy: default-src 'self'; style-src 'self' https://fonts.googleapis.com https://fast.fonts.net; font-src 'self' https://fonts.googleapis.com https://fast.fonts.net https://fonts.gstatic.com; script-src 'self' https://www.google.com https://www.gstatic.com; form-action https://webto.salesforce.com; navigate-to www.facebook.com twitter.com www.linkedin.com *.dataxltd.com *.equifax.com www.lend360.org www.bankrate.com; frame-ancestors none; frame-src 'self' https://www.google.com