Content-Security-Policy: default-src blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;script-src *.facebook.com static.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://*.google-analytics.com *.google.com;style-src data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com *.fbsbx.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' *.fbsbx.com https://*.google-analytics.com *.doubleclick.net;font-src *.fbsbx.com fbsbx.com *.fbcdn.net data: https://fonts.gstatic.com;img-src *.facebook.com *.fbsbx.com *.fbcdn.net data: blob: https://*.google-analytics.com;media-src data: blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;child-src data: blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;frame-src *.instagram.com *.facebook.com https://*.youtube.com *.twitter.com;manifest-src data: blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;object-src data: blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;worker-src data: blob: *.fbcdn.net *.facebook.com *.fbsbx.com connect.facebook.net;