Content-Security-Policy: default-src 'self' wss: 'unsafe-inline' 'unsafe-eval' blob: data: lr.cebroker.com fonts.googleapis.com fonts.gstatic.com www.googletagmanager.com *.google.com stats.g.doubleclick.net www.google-analytics.com googleads.g.doubleclick.net connect.facebook.net www.clarity.ms *.typekit.net; font-src 'self' *;