Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.mygp.global https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://api.adalytics.adastra.digital/ https://idv.ondato.com https://kycid.ondato.com https://join.ondato.com https://www.googletagmanager.com https://cdn.cookielaw.org https://geolocation.onetrust.com; object-src 'self' https://static.mygp.global; font-src 'self' https://fonts.gstatic.com https://kit-free.fontawesome.com https://kit-pro.fontawesome.com https://static.mygp.global; img-src 'self' https://static.mygp.global https://cdn.cookielaw.org data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://kit-free.fontawesome.com https://kit-pro.fontawesome.com https://static.mygp.global  https://cdn.cookielaw.org https://geolocation.onetrust.com; child-src 'none'; frame-src https://www.youtube.com https://www.google.com/recaptcha/ https://liberis.eu.auth0.com https://contracts.liberis.com https://idv.ondato.com https://www.googletagmanager.com https://cdn.cookielaw.org https://geolocation.onetrust.com; connect-src 'self' *.amazonaws.com api.adalytics.adastra.digital static.mygp.global kycid.ondato.com idv.ondato.com join.ondato.com https://www.google.com/recaptcha/api2/clr https://cdn.cookielaw.org  https://geolocation.onetrust.com https://privacyportal.onetrust.com; report-uri /csp/report; report-to /csp/report