Security Headers (4)X-Content-Type-Options: nosniffStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: DENYContent-Security-Policy: default-src 'self' *.google.com *.googleapis.com *.gstatic.com translate.google.com; frame-ancestors 'none'; frame-src 'self' *.stripe.com *.google.com; style-src 'self' *.google.com *.googleapis.com *.gstatic.com https://euc-widget.freshworks.com 'unsafe-inline'; font-src 'self' data: *.gstatic.com 'unsafe-inline'; img-src 'self' data: *.google.com *.googleapis.com *.gstatic.com translate.google.com power2-attachments.s3.eu-west-2.amazonaws.com; media-src 'self' power2-attachments.s3.eu-west-2.amazonaws.com; script-src 'self' *.google.com *.googleapis.com *.gstatic.com translate.google.com 'unsafe-inline'; script-src-elem 'self' *.google.com *.googleapis.com *.gstatic.com translate.google.com connect.facebook.net *.stripe.com https://euc-widget.freshworks.com https://power2sms.freshdesk.com *.sentry-cdn.com cdn.datatables.net 'unsafe-inline'; connect-src 'self' *.power2sms.co.uk *.google.com *.googleapis.com *.gstatic.com sentry.jonasfintech.co.uk https://euc-widget.freshworks.com https://power2sms.freshdesk.com *.facebook.com https://cdn.jsdelivr.net/npm/emoji-picker-element-data@%5E1/en/emojibase/data.json
