Content-Security-Policy

default-src 'none'; script-src 'self' 'unsafe-eval' 'nonce-e7r6s3d4Tj' https://www.google-analytics.com https://moncompte.paris.fr; connect-src 'self' https://matomo.apps.paris.fr; style-src 'self' 'unsafe-inline' https://matomo.apps.paris.fr https://fonts.googleapis.com https://moncompte.paris.fr; font-src 'self' https://fonts.gstatic.com https://moncompte.paris.fr; img-src 'self' https://matomo.apps.paris.fr https://matomo.3douest.com https://connect1.3douest.com https://taxe.3douest.com https://connectdev.3douest.com data: blob:; frame-src 'self' https://matomo.3douest.com https://www.youtube.com https://v70-auth.paris.fr https://player.vimeo.com https://www.dailymotion.com; form-action 'self'; base-uri 'self'; object-src 'self'