Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' js.stripe.com https://use.typekit.net; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com/ https://fonts.googleapis.com https://use.typekit.net; font-src 'self' https://use.typekit.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com https://use.typekit.net https://use.typekit.com data:; img-src 'self' dxon1zq5mn5s7.cloudfront.net assets.languageweaver.com https://p.typekit.net https://custom-themes-eu.assets.languageweaver.com blob: data:; frame-src 'self' js.stripe.com; object-src 'none'; media-src 'self' assets.languageweaver.com;