Content-Security-Policy: script-src 'self' 'unsafe-eval' 'nonce-ljaoOeS3fAFEWJ+zR6PAZg==' 'sha256-skfpv3jludIkbCo92CZ++mpUi39+FAOo1Y/z4H1DVD8=' 'sha256-M49WTpqTNHSroIcZRJnSHDRIAwXdchsBx7c/2aL793E=' http: https: https://magento.loverte.com/ https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com; style-src 'self' https: 'unsafe-inline' https://magento.loverte.com/; img-src data: http: https: www.googletagmanager.com; object-src 'none'; base-uri 'self'; child-src 'self'; font-src 'self' data: fonts.gstatic.com widget.dixa.io use.typekit.net chat.digitalgenius.com; frame-src *.facebook.com assets.braintreegateway.com *.youtube.com *.youtu.be *.vimeo.com *.google.com app.certainly.io *.klaviyo.com metrics.loverte.com www.googletagmanager.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com