Content-Security-Policy: default-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.googletagmanager.com *.google-analytics.com *.facebook.net *.cookiefirst.com; font-src 'self' https: data:; img-src 'self' https: data: *.facebook.com *.googletagmanager.com qtsp.viavansi.com *.viavansi.com; connect-src 'self' https: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.facebook.com *.cookiefirst.com; frame-src 'self' https: *.googletagmanager.com *.facebook.com *.cookiefirst.com; worker-src 'self' blob:;, default-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.googletagmanager.com *.google-analytics.com *.facebook.net *.cookiefirst.com; font-src 'self' https: data:; img-src 'self' https: data: *.facebook.com *.googletagmanager.com; connect-src 'self' https: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.facebook.com *.cookiefirst.com; frame-src 'self' https: *.googletagmanager.com *.facebook.com *.cookiefirst.com; worker-src 'self' blob:; report-to default;

Content-Security-Policy-Report-Only: default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; frame-ancestors 'self'; report-uri https://b9u7tqjq.uriports.com/reports/report; report-to default