Content-Security-Policy: font-src 'self' https://*.mozilla.net https://*.mozilla.org; img-src 'self' data: https://*.mozilla.net https://*.mozilla.org https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://*.mozilla.org https://*.mozilla.net; script-src 'self' 'unsafe-inline' data: https://*.mozilla.org https://*.mozilla.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com; connect-src: 'self' https://www.google-analytics.com; default-src 'self' *.cdn.mozilla.net assets.mozilla.net www.youtube-nocookie.com