<?xml version="1.0" encoding="UTF-8"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <!--
        @DO - unless they actually change it to block instead of report, probably not worth the effort to
        keep up-to-date other than to reduce annoying console logs
        -->
        <policy id="connect-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="bam_nr_data" type="host">bam.nr-data.net</value>
                <value id="doubleclick" type="host">*.doubleclick.net</value>
                <value id="google" type="host">*.google.com</value>
                <value id="googleapis" type="host">*.googleapis.com</value>
                <value id="google_analytics" type="host">*.google-analytics.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="djoglobalinc.tt.omtrdc.ne" type="host">djoglobalinc.tt.omtrdc.net</value>
                <value id="mouseflow" type="host">*.mouseflow.com</value>
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
        <policy id="font-src">
            <values>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="data" type="host">data:</value>
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
        <policy id="form-action">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="facebook" type="host">*.facebook.com</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="doubleclick" type="host">*.doubleclick.net</value>
                <value id="facebook" type="host">*.facebook.com</value>
                <value id="google" type="host">*.google.com</value>
                <value id="googleapis" type="host">*.googleapis.com</value>
                <value id="vimeo" type="host">*.vimeo.com</value>
                <value id="youtube" type="host">*.youtube.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
        <policy id="img-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="data" type="host">data:</value>
                <value id="facebook" type="host">*.facebook.com</value>
                <value id="google" type="host">*.google.com</value>
                <value id="gstatic" type="host">*.gstatic.com</value>
                <value id="via_placeholder" type="host">via.placeholder.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
        <policy id="media-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
        <policy id="script-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="bam_nr_data" type="host">bam.nr-data.net</value>
                <value id="cdnjs_cloudflare" type="host">cdnjs.cloudflare.com</value>
                <value id="cookielaw" type="host">*.cookielaw.org</value>
                <value id="connect_facebook" type="host">connect.facebook.net</value>
                <value id="doubleclick" type="host">*.doubleclick.net</value>
                <value id="google" type="host">*.google.com</value>
                <value id="googleapis" type="host">*.googleapis.com</value>
                <value id="gstatic" type="host">*.gstatic.com</value>
                <value id="js_agent_newrelic" type="host">js-agent.newrelic.com</value>
                <value id="player_vimeo" type="host">player.vimeo.com</value>
                <value id="youtube" type="host">*.youtube.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="bronto" type="host">*.bronto.com</value>
                <value id="mouseflow" type="host">*.mouseflow.com</value>
                <value id="olark" type="host">*.olark.com</value>
                <value id="osano" type="host">*.osano.com</value>
                <value id="tiqcdn" type="host">*.tiqcdn.com</value>
            </values>
        </policy>
        <policy id="style-src">
            <values>
                <value id="drcomfort" type="host">*.drcomfort.com</value>
                <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
                <value id="olark" type="host">*.olark.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
