Content-Security-Policy: default-src https:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; font-src data: https:; frame-ancestors 'self'; connect-src https: wss://*.liveperson.net;, default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' *.dftest.eu *.df.eu; connect-src 'self' https: wss://*.liveperson.net https://*.lpsnmedia.net;