Content-Security-Policy: default-src * 'unsafe-inline' data: blob: https:; script-src 'self' https://api.geevisit.com https://*.geetest.com https://dn-staticdown.qbox.me https://*.waves.exchange https://cdn.ravenjs.com https://wavesplatform.innocraft.cloud https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.google-analytics.com https://www.googletagmanager.com https://chatwoot.best-support.online/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://coinomat.com https://*.wavesplatform.com https://*.wvservices.com https://*.wavesnodes.com https://connect.facebook.net https://keycloak.wvservices.exchange https://impersonate-dev.wvservices.exchange 'unsafe-inline' 'unsafe-eval' blob:; upgrade-insecure-requests; report-uri https://waves-exchange.report-uri.com/r/d/csp/enforce