Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://cdnjs.cloudflare.com https://cdn.emailjs.com https://www.google.com https://apis.google.com https://accounts.google.com https://www.recaptcha.net https://recaptchaenterprise.googleapis.com https://cdn.moyasar.com https://www.googletagmanager.com https://www.clarity.ms https://www.tiktok.com https://*.tiktok.com https://*.tiktokcdn.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://www.instagram.com https://*.cdninstagram.com https://static.elfsight.com https://*.elfsight.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.moyasar.com https://accounts.google.com https://static.elfsight.com https://*.elfsight.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://static.elfsight.com https://*.elfsight.com; img-src 'self' data: blob: https://*.tile.openstreetmap.org https://*.tile.opentopomap.org https://*.basemaps.cartocdn.com https://*.googleapis.com https://*.gstatic.com https://*.firebasestorage.app https://firebasestorage.googleapis.com https://*.googleusercontent.com https://lh3.googleusercontent.com https://picsum.photos https://fastly.picsum.photos https://images.unsplash.com https://*.unsplash.com https://upload.wikimedia.org https://*.wikimedia.org https://cdn.brandfetch.io https://www.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms https://*.cdninstagram.com https://*.tiktokcdn.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://*.fbcdn.net https://*.elfsight.com https://*.elfsightcdn.com; connect-src 'self' https://nominatim.openstreetmap.org https://*.googleapis.com https://*.firebaseio.com https://*.cloudfunctions.net wss://*.firebaseio.com https://accounts.google.com https://securetoken.googleapis.com https://api.emailjs.com https://generativelanguage.googleapis.com https://api.moyasar.com https://api.open-meteo.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://*.clarity.ms https://www.tiktok.com https://*.tiktok.com https://*.tiktokv.com https://*.tiktokcdn.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://www.instagram.com https://*.cdninstagram.com https://*.elfsight.com https://core.service.elfsight.com https://*.elfsightcdn.com; frame-src 'self' https://www.youtube.com https://www.google.com https://accounts.google.com https://*.firebaseapp.com https://zl-tours.firebaseapp.com https://recaptchaenterprise.googleapis.com https://www.tiktok.com https://*.tiktok.com https://www.instagram.com https://www.facebook.com https://www.snapchat.com https://*.snapchat.com https://*.elfsight.com; object-src 'none'; base-uri 'self';