Content-Security-Policy: default-src 'none';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://s0.wp.com https://c0.wp.com https://chimpstatic.com https://secure.gravatar.com https://stats.wp.com https://maps.googleapis.com;style-src 'self' 'unsafe-inline' https://s0.wp.com https://c0.wp.com https://fonts-api.wp.com https://0.gravatar.com;font-src 'self' data: https://fonts.wp.com https://fonts-api.wp.com https://s0.wp.com https://c0.wp.com;base-uri 'self';manifest-src 'self';connect-src 'self' https://maps.googleapis.com; frame-src * https://*.dintero.com