Content-Security-Policy: default-src 'self' *.luno.com; script-src 'self' 'unsafe-inline' *.luno.com *.framer.com framer.com framerusercontent.com sdk.privacy-center.org www.googletagmanager.com cdn.amplitude.com *.google-analytics.com web-sdk-cdn.singular.net; style-src 'self' 'unsafe-inline' *.luno.com *.framer.com framerusercontent.com fonts.googleapis.com; img-src 'self' data: blob: *.luno.com *.framer.com framerusercontent.com *.lunostatic.com; font-src 'self' *.luno.com fonts.gstatic.com framerusercontent.com; connect-src 'self' *.luno.com *.framer.com *.framerstatic.com framerusercontent.com sdk-api-v1.singular.net api2.amplitude.com *.amplitude.com *.google-analytics.com; frame-src 'self' *.luno.com *.framer.com framer.com www.googletagmanager.com; media-src 'self' *.luno.com framerusercontent.com; object-src 'none'; base-uri 'self'; form-action 'self' *.luno.com; frame-ancestors 'self' *.luno.com; report-uri /csp_report;