Content-Security-Policy: default-src 'self' https://*.muvstok.com.br https://*.pecas2b.com.br; script-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.muvstok.com.br https://*.pecas2b.com.br 'unsafe-inline'; style-src 'self' https://*.muvstok.com.br https://*.pecas2b.com.br https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.muvstok.com.br https://*.pecas2b.com.br data:; font-src 'self' https://fonts.gstatic.com https://*.muvstok.com.br https://*.pecas2b.com.br; connect-src 'self' https://*.pecas2b.com.br https://*.api.pecas2b.com.br https://*.api.muvstok.com.br https://accounts.serviceshub.com.br https://*.googleapis.com https://*.google-analytics.com https://*.muvstok.com.br https://us-central1-muv-stock.cloudfunctions.net https://*.whatsparts.com.br https://*.whatsauto.com.br wss://*.whatsparts.com.br wss://*.whatsauto.com.br; frame-src 'self' https://accounts.serviceshub.com.br https://*.muvstok.com.br https://*.pecas2b.com.br; object-src 'none'; frame-ancestors 'self';