Content-Security-Policy: default-src 'self';        base-uri 'self';        connect-src 'self' https://images.ctfassets.net https://cdn.analytics.bitmex.com https://static.zdassets.com https://ekr.zdassets.com https://bitmex.zendesk.com https://bitmex1743997403.zendesk.com https://api.smooch.io wss://api.smooch.io https://api.analytics.bitmex.com https://o1146016.ingest.sentry.io https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/g/collect https://analytics.google.com https://stats.g.doubleclick.net https://mc.yandex.ru wss://mc.yandex.ru https://mc.yango.com https://eu.asas.yango.com https://bitmexcopytrading.com;        script-src 'self' https://sentry.devsf.bitmex https://cdn.analytics.bitmex.com https://static.zdassets.com https://ekr.zdassets.com https://bitmex.zendesk.com https://bitmex1743997403.zendesk.com https://api.smooch.io wss://api.smooch.io https://www.googletagmanager.com https://www.google-analytics.com https://mc.yango.com/metrika/int_yango.js https://mc.yandex.ru/metrika/tag.js https://mc.yandex.ru/metrika/tag_phono.js https://mc.yango.com/metrika/tag_phono.js 'unsafe-eval' 'nonce-MdVuN82HZBaqvR6B' 'nonce-5221de9d49bab2ccad2ba693c249cc09';        style-src 'self' 'unsafe-inline';        child-src 'self' blob:;        img-src 'self' https://secure.adnxs.com https://insight.adsrvr.org https://sp.analytics.yahoo.com https://delivery.adnuntius.com https://ww2.affinity.net https://www.facebook.com https://q.quora.com https://tr.outbrain.com https://dsp-ap.eskimi.com data: blob: *;        media-src 'self' https://videos.ctfassets.net http://videos.ctfassets.net blob:;        object-src 'none';        font-src 'self';        form-action 'self';        frame-ancestors 'self' https://app.contentful.com https://*.contentful.com;        block-all-mixed-content;        report-uri https://o1146016.ingest.sentry.io;        frame-src 'self' https://bitmexcopytrading.com https://www.youtube.com http://www.youtube.com https://bitmex.freshdesk.com/ https://player.vimeo.com/ https://docs.google.com https://*.google.com https://*.googleapis.com blob:;