Content-Security-Policy: base-uri 'self'; default-src 'self' 'unsafe-inline' *.doubleclick.net www.facebook.com uk.cdn-net.com six.cdn-net.com *.analytics.google.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org *.google-analytics.com connect.facebook.net facebook.com cdn.jsdelivr.net *.doubleclick.net apps.bazaarvoice.com display.ugc.bazaarvoice.com *.pricespider.com *.mapbox.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdnjs.cloudflare.com/ajax/libs/socket.io/2.3.0/socket.io.slim.js cdnjs.cloudflare.com/ajax/libs/handlebars.js/3.0.3/handlebars.runtime.min.js cdnjs.cloudflare.com/ajax/libs/handlebars.js/3.0.3/handlebars.min.js *.googletagmanager.com *.adimo.co *.adimouat.co 4dvq37jqcg.execute-api.eu-west-1.amazonaws.com *.mikmak.ai *.swaven.com tagmanager.google.com stats.g.doubleclick.net c.amazon-adsystem.com apis.google.com *.clarity.ms; style-src 'self' 'unsafe-inline' fonts.googleapis.com display.ugc.bazaarvoice.com cdn.pricespider.com api.tiles.mapbox.com/mapbox-gl-js/v1.8.1/mapbox-gl.css *.mikmak.ai *.swaven.com *.google-analytics.com tagmanager.google.com; object-src 'none'; form-action 'self' www.facebook.com stg.api.bazaarvoice.com; font-src 'self' data: fonts.gstatic.com *.mikmak.ai *.swaven.com *.static-swaven.com; worker-src 'self' blob:; child-src blob:; connect-src 'self' api.contentstack.com eu-api.contentstack.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com cookies-data.onetrust.io *.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.google.com stats.g.doubleclick.net api.evrythng.io sgtm.durex.se/ phx-promoplatform-api-pl-prod.promoplatform.rbcloud.io digital-lds-application-web-production.frankfurt.rbdigitalcloud.com ot-proxy-api-ch2-xdp265.m3jzw3-2.deu-c1.cloudhub.io ot-proxy-api-cf6r4v.m3jzw3-2.deu-c1.cloudhub.io *.algolia.net *.algolianet.com *.algolia.io *.gcp.cloud.es.io cognito-idp.eu-central-1.amazonaws.com stg.api.bazaarvoice.com *.pricespider.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com identitytoolkit.googleapis.com firestore.googleapis.com securetoken.googleapis.com *.adimo.co *.adimouat.co 4dvq37jqcg.execute-api.eu-west-1.amazonaws.com *.mikmak.ai *.swaven.com facebook.com connect.facebook.net eu-rest-preview.contentstack.com api.evrythng.io *.clarity.ms; img-src 'self' data: eu-images.contentstack.com images.salsify.com cdn.cookielaw.org optanon.blob.core.windows.net www.facebook.com www.google.com www.google.pl network-stg-a.bazaarvoice.com *.pricespider.com cdn.jsdelivr.net/gh/lipis/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net *.mikmak.ai *.swaven.com *.static-swaven.com stats.g.doubleclick.net ssl.gstatic.com storage.googleapis.com *.bing.com *.clarity.ms; frame-src www.tiktok.com www.instagram.com www.facebook.com www.youtube.com www.youtube-nocookie.com develop.dtukelhhqa2x2.amplifyapp.com main.dtukelhhqa2x2.amplifyapp.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ display.ugc.bazaarvoice.com stg.api.bazaarvoice.com *.doubleclick.net *.adimo.co *.adimouat.co *.mikmak.ai *.swaven.com *.contact-us-reckitt.com *.contentstack.com cdn.shopify.com