Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' jufe.b-cdn.net cdn.firstpromoter.com *.iubenda.com unpkg.com fonts.gstatic.com www.googletagmanager.com www.g2.com cdn.jsdelivr.net www.youtube.com youtube.com snap.licdn.com px.ads.linkedin.com *.albacross.com connect.facebook.net www.facebook.com *.optinly.net www.cloudflare.com ajax.googleapis.com www.google.com *.analytics.google.com data: https: