Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: piwik.esc-now.de code.jquery.com cdnjs.cloudflare.com; connect-src 'self' sync.readcube.com piwik.esc-now.de ghost.org; img-src 'self' piwik.esc-now.de static.ghost.org ghost.org blob: data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; frame-ancestors 'self' scenery.graphics; font-src 'self' fonts.gstatic.com netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com scenery.graphics; media-src 'self' ghost.org scenery.graphics;