Content-Security-Policy: default-src 'self' localhost:3001 *.liberis.com *.us.liberis.com *.liberis.co.uk *.liberisfinance.com www.facebook.com www.facebook.com/* 'nonce-uQ24i7WEX4G4+GaLozj80Q==';script-src 'self' localhost:3001 *.intercom.io *.liberis.com *.us.liberis.com *.liberis.co.uk *.liberisfinance.com *.smartlook.cloud *.smartlook.com *.mixpanel.com *.trustpilot.com cdn.mxpnl.com cdn4.mxpnl.com www.googletagmanager.com https://googleads.g.doubleclick.net js.driftt.com widget.drift.com 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' 'nonce-uQ24i7WEX4G4+GaLozj80Q==';connect-src 'self' localhost:3001 https://localhost:3001/journey *.intercom.io wss://nexus-europe-websocket.intercom.io *.liberis.com *.us.liberis.com *.liberis.co.uk *.liberisfinance.com *.smartlook.cloud *.smartlook.com *.mixpanel.com *.trustpilot.com cdn.mxpnl.com cdn4.mxpnl.com www.googletagmanager.com www.google-analytics.com cdn.cookielaw.org stats.g.doubleclick.net 850-joa-856.mktoresp.com privacyportal-eu.onetrust.com geolocation.onetrust.com region1.google-analytics.com *.liberis.co.uk/ *.liberis.com/ *.us.liberis.com/ 'nonce-uQ24i7WEX4G4+GaLozj80Q==';img-src 'self' data: www.googletagmanager.com www.google.co.uk www.google.com https://googleads.g.doubleclick.net www.google-analytics.com www.facebook.com www.google.co.uk/* www.google.com/* www.facebook.com/* www.google-analytics.com/* https://googleads.g.doubleclick.net/* cdn.cookielaw.org https://liberisproductioncdn.blob.core.windows.net/ *.trustpilot.com 'nonce-uQ24i7WEX4G4+GaLozj80Q==';worker-src 'self' blob: 'nonce-uQ24i7WEX4G4+GaLozj80Q==';style-src 'self' https: 'unsafe-inline';frame-src 'self' data: localhost:3001 *.liberis.com *.us.liberis.com *.liberis.co.uk *.liberisfinance.com *.facebook.com *.facebook.com/* js.driftt.com widget.driftt.com *.trustpilot.com *;frame-ancestors http://localhost:10004 *.liberis.com *.us.liberis.com *.liberis.co.uk *.liberisfinance.eu *.liberisfinance.com *;media-src 'self' js.driftt.com;base-uri 'self';font-src 'self' https: data:;form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests