">
    <meta http-equiv="Content-Security-Policy"
          content="base-uri 'self';
                   default-src 'self';
                   img-src data: https:;
                   object-src 'none';
                   script-src 'self'
                              'sha256-v8v3RKRPmN4odZ1CWM5gw80QKPCCWMcpNeOmimNL2AA='
                              https://www.googletagmanager.com
                              https://*.carbonads.com
                              https://*.carbonads.net
                