Content-Security-Policy: frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.rawgit.com *.newrelic.com *.nr-data.net *.mrlender.com *.typekit.net *.facebook.net *.reviews.co.uk *.mouseflow.com *.google.co.uk *.google.com *.googletagservices.com *.googlesyndication.com *.livechatinc.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.console.glassboxsaas.com *.glassboxdigital.io *.gbqofs.com *.report.gbss.io *.gbqofs.io *.cookie-script.com *.adtrafficquality.google;