Content-Security-Policy: default-src 'self'; font-src 'self' https://*.questback.com https://fonts.gstatic.com data: *.leadoo.com; script-src 'self' https://*.questback.com *.leadoo.com https://matomo.dev.int.questback.com https://matomo.questback.com 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://s.ytimg.com https://www.google.com https://www.gstatic.com; connect-src 'self' wss://livechat.leadoo.com https://academy.questback.com *.leadoo.com https://matomo.dev.int.questback.com https://matomo.questback.com https://cdn.brandfetch.io; img-src 'self' https://academy.questback.com https://web2.questback.com https://*.questback.com https://*.brandfetch.io https://*.gstatic.com *.leadoo.com  https://s3.eu-west-1.amazonaws.com/res.leadoo.com/ data: https://www.google.com blob:; style-src 'self' https://*.questback.com *.leadoo.com 'unsafe-inline' https://fonts.googleapis.com ; child-src 'self' https://*.questback.com https://www.youtube.com https://docs.google.com; frame-src 'self' https://*.questback.com https://www.youtube.com https://docs.google.com https://www.google.com https://academy.questback.com *.leadoo.com; worker-src https: blob:; media-src *.leadoo.com;