Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' code.etracker.com www.etracker.de default.signalize.com api.signalize.com; img-src 'self' data: api.signalize.com cdn.signalize.com i.ytimg.com; style-src 'self' 'unsafe-inline' api.signalize.com code.etracker.com; font-src 'self' data: api.signalize.com; connect-src 'self' www.etracker.de api.signalize.com; frame-src 'self' www.youtube-nocookie.com; form-action 'self'; base-uri 'self'; media-src 'self'; frame-ancestors https://newapp.etracker.com;