Content-Security-Policy: default-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' wss://*.yahoo.com https://img.yec.tw https://*.yimg.com https://*.yahoo.com https://*.yahooapis.com https://staging-reeldeal.ec.yahoo.com:4443 https://*.oath.com https://ecstorewebview https://ecauctionwebview https://ecshoppingwebview https://*.juiker.net https://*.amazonaws.com https://*.googleapis.com https://*.google.com https://*.google.com.tw https://*.google-analytics.com https://*.googletagmanager.com https://www.youtube.com https://cdnjs.cloudflare.com wss://*.straas.net https://*.straas.net https://*.criteo.com https://*.criteo.net https://pixel.rubiconproject.com https://contextual.media.net https://sync.outbrain.com https://ib.adnxs.com https://secure.adnxs.com https://x.bidswitch.net https://s.ad.smaato.net https://c.bing.com https://criteo-sync.teads.tv https://gum.criteo.com https://ups.analytics.yahoo.com https://rtb-csync.smartadserver.com https://r.casalemedia.com https://adx.dable.io https://sync.aralego.com https://sync-criteo.ads.yieldmo.com https://ad.360yield.com https://id5-sync.com https://eb2.3lift.com https://simage2.pubmatic.com https://cm.g.doubleclick.net https://*.scupio.com https://*.doubleclick.net https://sync.aralego.com https://pixel.advertising.com https://*.facebook.com https://*.facebook.net https://*.gstatic.com https://blog.lalacube.com/mei/ https://unpkg.com/ https://cdn.jsdelivr.net https://*.cloudfront.net wss://*.iot.blendvision.com https://api.one.blendvision.com https://time.akamai.com https://showroom.one.blendvision.com https://flags.platform.blendvision.com https://api.platform.blendvision.com https://*.cdp.kkstream.io https://staging-reeldeal.ec.yahoo.com:4443 https://canary-reeldeal.ec.yahoo.com:4443 https://mas.bsmi.gov.tw;frame-src 'self' https://*.yahoo.com https://*.straas.net https://*.youtube.com https://*.facebook.com https://*.criteo.com https://*.criteo.net https://*.scupio.com https://*.google.com https://*.doubleclick.net https://showroom.one.blendvision.com https://nonprod.securetoken.network https://securetoken.network;frame-ancestors 'self' https://*.yahoo.com;media-src * data: blob:;font-src * data: blob:;img-src * data: blob:;object-src;report-uri /fe/report-violation