Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://fonts.googleapis.com https://maps.google.com https://ssl.google-analytics.com https://fonts.gstatic.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://code.jquery.com https://cdnjs.cloudflare.com https://code.highcharts.com https://ajax.googleapis.com https://cdn.datatables.net https://kit.fontawesome.com https://ka-f.fontawesome.com https://ka-p.fontawesome.com/