Content-Security-Policy: default-src 'self' https://*.securetrustbank.com https://*.googletagmanager.com;; connect-src 'self' https://*.securetrustbank.com https://*.google-analytics.com https://*.googletagmanager.com https://*.civiccomputing.com https://*.trustpilot.com;; img-src 'self' https://*.securetrustbank.com data: https://*.google-analytics.com https://*.google.com https://*.google.co.uk https://*.googletagmanager.com https://*.gstatic.com https://*.trustpilot.com;; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.securetrustbank.com https://*.googletagmanager.com https://static.srcspot.com https://*.google-analytics.com https://*.trustpilot.com;; style-src 'self' 'unsafe-inline' https://*.securetrustbank.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.trustpilot.com;; font-src 'self' https://*.securetrustbank.com https://*.gstatic.com;; frame-src 'self' https://*.securetrustbank.com https://ir.tools.investis.com https://*.youtube.com https://*.youtube-nocookie.com https://*.investis.com https://*.trustpilot.com;; frame-ancestors 'self'