Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: www.googletagmanager.com www.google-analytics.com cache.img.gmo.jp siteseal.gmo-cybersecurity.com gmo-cybersecurity.com seal.atlas.globalsign.com api1.value-domain.com www.value-server.com www.coreserver.jp www.google.co.jp code.jquery.com connect.facebook.net  www.google.com googleads.g.doubleclick.net static.cloudflareinsights.com static.ads-twitter.com minerva-deliver.sp.gmossp-sp.jp  *.clarity.ms analytics.twitter.com t.co www.googleadservices.com analytics.google.com stats.g.doubleclick.net ;