Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://togetherjs.com/togetherjs-min.js https://static.cloudflareinsights.com https://cdn.ably.io https://cdnjs.cloudflare.com https://ajax.googleapis.com https://code.highcharts.com https://dcqn38zkfmbl3.cloudfront.net https://maps.google.com https://maps.googleapis.com https://checkout.stripe.com https://js.stripe.com/v3/; style-src 'self' 'unsafe-inline' https://checkout.stripe.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://dcqn38zkfmbl3.cloudfront.net https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://internet-up.ably-realtime.com https://checkout.stripe.com https://export.highcharts.com https://rest.ably.io wss://realtime.ably.io; font-src 'self' data: https://dcqn38zkfmbl3.cloudfront.net https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://youtube.com https://checkout.stripe.com https://js.stripe.com; img-src 'self' data: https://dcqn38zkfmbl3.cloudfront.net https://dddqjukkk2hop.cloudfront.net https://*.stripe.com https://sovasystems.com https://shippo-static.s3.amazonaws.com https://sova.cc https://i.ytimg.com https://khms0.googleapis.com https://khms1.googleapis.com https://maps.gstatic.com https://maps.google.com https://maps.googleapis.com; manifest-src 'self'; media-src 'self' https://dddqjukkk2hop.cloudfront.net; worker-src 'self' blob:;