csp all day

gistfile1.txt

    contentSecurityPolicy: {
      'default-src': "'none'",
      'script-src': "'self' 'unsafe-eval' 'unsafe-inline' use.typekit.net https://script.crazyegg.com https://js.stripe.com http://cdn.ravenjs.com http://www.google-analytics.com https://maps.googleapis.com https://mts1.googleapis.com http://www.googleadservices.com/pagead/conversion_async.js",
      'font-src': "'self' data://* use.typekit.net https://csi.gstatic.com https://fonts.gstatic.com",
      'connect-src': "'self' http://localhost:9000 https://api-sandbox.billforward.net/v1/tokenization/pre-auth https://api-sandbox.billforward.net/v1/tokenization/auth-capture https://app.getsentry.com http://roost.freshdesk.com/helpdesk/tickets.json",
      'img-src': "'self' p.typekit.net https://s3-us-east-1.amazonaws.com//AR-logos https://s3.amazonaws.com https://go.goroost.com data: app.getsentry.com http://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com https://mts1.googleapis.com https://mts0.googleapis.com",
      'style-src': "'self' 'unsafe-inline' use.typekit.net https://fonts.googleapis.com",
      'media-src': "'self'",
      'frame-src': "https://js.stripe.com",
      'report-uri': 'uri'
    },