Content-Security-Policy: default-src 'self';connect-src 'self' *.cloudflare.com *.google-analytics.com stats.g.doubleclick.net ;frame-src 'self' doubleclick.net bid.g.doubleclick.net cse.google.com google.com;script-src 'self' 'strict-dynamic' 'nonce-8de133c94336d5c5fa667abb5d06027e547afc517b71c4cadc300f315f1c6390' 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net apis.google.com www.googleadservices.com googleadservices.com www.google-analytics.com google-analytics.com;script-src-elem 'self' 'strict-dynamic' 'nonce-8de133c94336d5c5fa667abb5d06027e547afc517b71c4cadc300f315f1c6390' 'unsafe-inline' apis.google.com google-analytics.com www.google-analytics.com www.googleadservices.com googleadservices.com googleads.g.doubleclick.net cse.google.com scr.kaspersky-labs.com www.google.com google.com www.googletagmanager.com;font-src 'self' data: fonts.gstatic.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com www.google.com google.com;img-src 'self' data: *;report-uri /csp-report