Content-Security-Policy: style-src 'self'  'unsafe-inline' *.bootstrapcdn.com code.jquery.com fonts.googleapis.com *;     default-src 'self' 'unsafe-inline' api.monek.com *.cloudflare.com cdnjs.com code.jquery.com stackpath.bootstrapcdn.com api.ipify.org applepay.cdn-apple.com cdn.monek.com google.com www.google.com pay.google.com;    img-src 'self' code.jquery.com fonts.gstatic.com 'unsafe-inline' data: *;     font-src 'self' *.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com 'unsafe-inline'  data:;   report-uri https://uri-reports.monek.com