Content-Security-Policy: default-src 'self' https://cdn.cookielaw.org https://stackpath.bootstrapcdn.com http://cdn.jsdelivr.net; font-src 'self' data: http://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.cookielaw.org http://cdn.jsdelivr.net; script-src 'self' 'unsafe-eval' https://cdn.cookielaw.org https://www.googletagmanager.com https://*.hotjar.com https://www.google-analytics.com https://geolocation.onetrust.com 'sha256-5VrVgGfPbUH5IoPb+tGodpswZad/XDHQfqHeVD0LMG4=' 'sha256-39NUTso4+01x9NXuXEuJtt++27tSUxclHBWperx5HEQ='; img-src 'self' https://*.eu-west-1.amazonaws.com https://cdn.cookielaw.org https://www.google-analytics.com https://assets.qliro.com; connect-src 'self' https://cdn.cookielaw.org https://*.hotjar.com https://www.google-analytics.com https://api.qliro.dev https://privacyportal-eu.onetrust.com; frame-src https://vars.hotjar.com; frame-ancestors https://api.qliro.dev;