Content-Security-Policy: script-src 'self' scgops.com:* www.scgops.com:*  *.newrelic.com *.nr-data.net ajax.googleapis.com www.google.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com www.mapquest.com api.tiles.mapbox.com code.jquery.com www.mapquestapi.com 'unsafe-inline' 'unsafe-eval';