default-src 'self'; script-src 'unsafe-inline' 'self' https://cdnjs.cloudflare.com https://code.jquery.com https://www.google-analytics.com https://www.youtube.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.google-analytics.com https://www.reddit.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self' https://www.youtube.com; img-src 'self' https://*.redditmedia.com https://i.ytimg.com https://raw.githubusercontent.com; manifest-src 'self'; media-src 'self';