Content-Security-Policy: default-src 'self' *.ivpn.net;img-src * data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ivpn.net *.braintreegateway.com  *.braintree-api.com *.paypal.com *.paypalobjects.com *.execute-api.us-east-1.amazonaws.com *.cardinalcommerce.com;style-src 'self' 'unsafe-inline' *.ivpn.net;connect-src 'self' *.ivpn.net *.cardinalcommerce.com *.braintree-api.com *.braintreegateway.com *.paypal.com  api.coingecko.com;frame-src 'self' *;