CSP Data for: viator.com


child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.criteo.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action 'self' https://accounts.google.com/* https://*.facebook.com https://www.cdn-net.com; frame-ancestors 'self' *.cdn-net.com; frame-src *.youtube.com *.googletagmanager.com *.criteo.net https://*.facebook.com 'self' *.hotjar.com *.g.doubleclick.net *.criteo.com *.cdn-net.com; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.google.la *.google.com.kw *.google.com.tw *.google.mw *.google.bt *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu g.cn *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.criteo.com *.google.co.ck bat.bing.com *.google.com.au *.google.com.bo *.google.cf *.google.st *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.hotjar.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.criteo.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action 'self' https://accounts.google.com/* https://*.facebook.com https://www.cdn-net.com; frame-ancestors 'self' *.cdn-net.com; frame-src *.youtube.com *.googletagmanager.com *.criteo.net https://*.facebook.com 'self' *.hotjar.com *.g.doubleclick.net *.criteo.com *.cdn-net.com; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.google.la *.google.com.kw *.google.com.tw *.google.mw *.google.bt *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.awin1.com *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu g.cn *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.criteo.com *.google.co.ck bat.bing.com *.google.com.au *.google.com.bo *.google.cf *.google.st *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.hotjar.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.criteo.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://*.facebook.com 'self' https://*.paypal.com https://accounts.google.com/* https://www.cdn-net.com; frame-ancestors *.viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de *.vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr *.cdn-net.com; frame-src *.tripadvisor.ca *.googletagmanager.com https://*.facebook.com *.tripadvisor.de 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.criteo.net *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au *.criteo.com *.tripadvisor.nl *.g.doubleclick.net *.tripadvisor.com.br; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.zanox.com *.google.com.kw *.google.la *.google.mw *.google.bt *.google.com.tw *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my https://*.paypal.com *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr https://media.tacdn.com/media/ *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.clicktripz.com *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.awin1.com *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu g.cn *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.criteo.com *.google.co.ck *.google.cf bat.bing.com *.google.com.au *.google.com.bo *.google.st *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.hotjar.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com *.tamgrt.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.criteo.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://*.facebook.com 'self' https://*.paypal.com https://accounts.google.com/* https://www.cdn-net.com; frame-ancestors *.viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de *.vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr *.cdn-net.com; frame-src *.tripadvisor.ca *.googletagmanager.com https://*.facebook.com *.tripadvisor.de 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.criteo.net *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au *.criteo.com *.tripadvisor.nl *.g.doubleclick.net *.tripadvisor.com.br; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.zanox.com *.google.com.kw *.google.la *.google.mw *.google.bt *.google.com.tw *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my https://*.paypal.com *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr https://media.tacdn.com/media/ *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.clicktripz.com *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.awin1.com *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu g.cn *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.criteo.com *.google.co.ck *.google.cf bat.bing.com *.google.com.au *.google.com.bo *.google.st *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.hotjar.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com *.tamgrt.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src 'self' *.criteo.com *.facebook.com https://cache.vtrcdn.com/; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://accounts.google.com/*; frame-ancestors *.viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de *.vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr *.cdn-net.com; frame-src *.tripadvisor.ca *.googletagmanager.com https://*.facebook.com *.tripadvisor.de 'self' *.vtrcdn.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.criteo.net *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au *.criteo.com *.tripadvisor.nl *.g.doubleclick.net *.tripadvisor.com.br; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.google.la *.google.com.kw *.google.com.tw *.google.mw *.google.bt *.zanox.com *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my https://*.paypal.com *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr https://media.tacdn.com/media/ *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.clicktripz.com *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.awin1.com *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.google.com.au *.google.co.ck *.google.com.bo *.google.cf *.google.st bat.bing.com *.criteo.com *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.zenaps.com *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com *.tamgrt.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.pardot.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src 'self' *.criteo.com *.facebook.com https://cache.vtrcdn.com/; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://accounts.google.com/*; frame-ancestors *.viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de *.vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr *.cdn-net.com; frame-src *.tripadvisor.ca *.googletagmanager.com https://*.facebook.com *.tripadvisor.de 'self' *.vtrcdn.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.criteo.net *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au *.criteo.com *.tripadvisor.nl *.g.doubleclick.net *.tripadvisor.com.br; img-src *.google.pn *.google.co.kr *.google.bi *.google.co.bw *.google.so *.google.fm *.google.com.pr *.google.ps *.google.com.bz *.google.si *.google.ie *.google.lu *.google.com.pk *.google.cd *.google.com.sa *.google.co.pn *.google.co.uk *.google.bj *.google.com.ly *.google.com.qa *.google.co.vi *.google.vg *.google.cat *.google.io *.google.com.gh *.google.ch *.google.kg *.google.co.ao *.google.sm *.google.com.mm *.google.kz *.google.tm *.google.gr *.google.ee *.google.ca *.google.cn *.google.com.br *.google.com.bd *.google.cv *.google.be *.google.com.gi *.google.tn *.google.co.ve *.google.cg *.google.ht *.google.com.cy *.google.az *.google.md *.google.ac *.google.ki *.google.co.jp *.google.ml *.google.com.np data: *.google.la *.google.com.kw *.google.com.tw *.google.mw *.google.bt *.zanox.com *.google.lt *.google.com.mt *.google.cz *.google.lk *.googleadservices.com *.google.ba *.facebook.com *.google.com.tj *.google.tl *.google.com.sv *.google.li *.criteo.net *.google.at *.google.co.th *.google.cl *.google.pt googleads.g.doubleclick.net *.google.com.my https://*.paypal.com *.google.no *.google.al *.google.co.mz *.google.co.zw *.gstatic.com *.google.ae *.google.com.gt *.google.com.af https://cache.vtrcdn.com/ *.google.de *.google.com.eg *.google.ad https://cache-graphicslib.viator.com/graphicslib/ *.google.co.il *.google.ne *.google.com.ni *.google.pl *.google.com.ec *.google.com.vc *.google.com.hk *.google.by *.google.rs *.google.gm 'self' *.google.co.id *.google.co.ke *.google.ws *.google.co.cr https://media.tacdn.com/media/ *.google.com.pa *.google.ga *.google.com.ng *.google.cm *.google.ru *.google.nu *.google.co.ls *.google.sc *.google.com.kh *.google.mv *.google.co.uz *.google.gf *.google.dk *.google.com.ar *.google.co.tz *.google.com.om *.google.gy *.google.com.lb *.google.sk *.google.com.vn *.google.ge *.google.com.pe *.google.td *.google.hu *.google.com.bn *.google.ci *.google.com.py *.google.lv *.google.co.nz *.clicktripz.com *.google.bs *.google.com.mx *.google.com.lc *.google.com.sb *.google.co.ma *.google.sn *.google.com.ua *.google.nl *.google.com.ph *.google.hr *.google.mn *.google.sr *.google.mk *.google.tg *.awin1.com *.google.tt *.google.iq *.google.gg *.google.it *.google.ro *.google.tk *.google.am *.google.bg *.google.com.cu *.google.vu *.google.je *.google.hn *.viator.com *.google.mu *.google.com.jm *.google.co.za *.google.com.fj *.google.fr *.google.com.ag *.google.se *.google.com.pg *.google.com.uy *.google.dj *.google.gp *.google.com.bh *.google.dz *.google.bf *.google.fi *.google.com.nf *.google.com.sl *.google.com.et *.google.mg *.google.co.in *.google.jo *.google.cc *.google.to *.google.com *.google.co.ug *.google.com.ai *.google.com.na *.google.gl *.google.im *.google.as *.google.is *.google.com.sg *.google.com.tr *.google.es *.google.com.au *.google.co.ck *.google.com.bo *.google.cf *.google.st bat.bing.com *.criteo.com *.google.com.co *.google.dm *.google.nr *.google.rw *.google.sh *.zenaps.com *.google.co.zm *.google.me *.google.com.do *.google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.googleapis.com 'self' *.ytimg.com *.yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com *.tamgrt.com tagmanager.google.com *.cdn-net.com *.youtube.com *.newrelic.com *.pardot.com *.criteo.com bat.bing.com *.gstatic.com static.criteo.net https://cache.vtrcdn.com/ *.facebook.net s.yimg.com *.nr-data.net; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.authoritycrm.com *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/*; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.authoritycrm.com *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/* https://www.cdn-net.com; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://siteintercept.qualtrics.com https://cache.vtrcdn.com/ *.facebook.com *.paypal.com *.braintree-api.com 'self' wss://*.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf *.authoritycrm.com *.braintreegateway.com *.hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://*.facebook.com 'self' https://*.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/* https://www.cdn-net.com; frame-src *.tripadvisor.ca https://*.facebook.com *.tripadvisor.de *.paypal.com https://www.tamgrt.com/ 'self' *.vtrcdn.com *.hotjar.com *.tripadvisor.es *.tripadvisor.se *.tripadvisor.it *.tripadvisor.jp *.tripadvisor.dk *.cdn-net.com *.youtube.com *.tripadvisor.fr *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.au https://cache.vtrcdn.com/ *.tripadvisor.nl *.tripadvisor.com.br; img-src *.gstatic.com data: https://cache.vtrcdn.com/ *.facebook.com *.zanox.com *.viator.com *.zenaps.com 'self' https://*.paypal.com *.siteintercept.qualtrics.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src *.gstatic.com *.youtube.com https://cache.vtrcdn.com/ 'nonce' *.googleapis.com *.facebook.net 'self' s.yimg.com *.newrelic.com *.nr-data.net js-agent.newrelic.com *.ytimg.com *.tamgrt.com *.hotjar.com; style-src https://cache.vtrcdn.com/ *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 

#	Time Frame	Framing Control	TLS Enforce	Content Control	Third JS Parties	'unsafe-inline'	http / https / *	data:	Diffs	Normalized Policy
0	2018-02-08 - 2018-04-11	True	False	True	18	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .criteo.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action 'self' https://accounts.google.com/* https://.facebook.com https://www.cdn-net.com; frame-ancestors* 'self' .cdn-net.com; frame-src* .youtube.com .googletagmanager.com .criteo.net https://.facebook.com 'self' .hotjar.com .g.doubleclick.net .criteo.com .cdn-net.com; img-src .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .google.la .google.com.kw .google.com.tw .google.mw .google.bt .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu g.cn .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .criteo.com .google.co.ck bat.bing.com .google.com.au .google.com.bo .google.cf .google.st .google.com.co .google.dm .google.nr .google.rw .google.sh .google.co.zm .google.me .google.com.do .google.ms; media-src* 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .hotjar.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
1	2018-04-12 - 2018-05-16	True	False	True	18	False	False	False	1	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .criteo.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action 'self' https://accounts.google.com/* https://.facebook.com https://www.cdn-net.com; frame-ancestors* 'self' .cdn-net.com; frame-src* .youtube.com .googletagmanager.com .criteo.net https://.facebook.com 'self' .hotjar.com .g.doubleclick.net .criteo.com .cdn-net.com; img-src .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .google.la .google.com.kw .google.com.tw .google.mw .google.bt .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .awin1.com .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu g.cn .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .criteo.com .google.co.ck bat.bing.com .google.com.au .google.com.bo .google.cf .google.st .google.com.co .google.dm .google.nr .google.rw .google.sh .google.co.zm .google.me .google.com.do .google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .hotjar.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
2	2018-05-17 - 2018-06-27	True	False	True	19	False	False	False	27	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .criteo.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://.facebook.com 'self' https://.paypal.com https://accounts.google.com/* https://www.cdn-net.com; frame-ancestors .viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de .vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr .cdn-net.com; frame-src* .tripadvisor.ca .googletagmanager.com https://.facebook.com .tripadvisor.de 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .criteo.net .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au .criteo.com .tripadvisor.nl .g.doubleclick.net .tripadvisor.com.br; img-src .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .zanox.com .google.com.kw .google.la .google.mw .google.bt .google.com.tw .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my https://.paypal.com .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr https://media.tacdn.com/media/ .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .clicktripz.com .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .awin1.com .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu g.cn .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .criteo.com .google.co.ck .google.cf bat.bing.com .google.com.au .google.com.bo .google.st .google.com.co .google.dm .google.nr .google.rw .google.sh .google.co.zm .google.me .google.com.do .google.ms; media-src* 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .hotjar.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com .tamgrt.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
3	2018-06-28 - 2018-07-13	True	False	True	19	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .criteo.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://.facebook.com 'self' https://.paypal.com https://accounts.google.com/* https://www.cdn-net.com; frame-ancestors .viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de .vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr .cdn-net.com; frame-src* .tripadvisor.ca .googletagmanager.com https://.facebook.com .tripadvisor.de 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .criteo.net .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au .criteo.com .tripadvisor.nl .g.doubleclick.net .tripadvisor.com.br; img-src .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .zanox.com .google.com.kw .google.la .google.mw .google.bt .google.com.tw .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my https://.paypal.com .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr https://media.tacdn.com/media/ .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .clicktripz.com .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .awin1.com .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu g.cn .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .criteo.com .google.co.ck .google.cf bat.bing.com .google.com.au .google.com.bo .google.st .google.com.co .google.dm .google.nr .google.rw .google.sh .google.co.zm .google.me .google.com.do .google.ms; media-src* 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .hotjar.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com .tamgrt.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
4	2018-07-14 - 2018-08-08	True	False	True	19	False	False	False	11	child-src 'self' https://cache.vtrcdn.com/; connect-src 'self' .criteo.com .facebook.com https://cache.vtrcdn.com/; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://accounts.google.com/; frame-ancestors* .viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de .vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr .cdn-net.com; frame-src* .tripadvisor.ca .googletagmanager.com https://.facebook.com .tripadvisor.de 'self' .vtrcdn.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .criteo.net .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au .criteo.com .tripadvisor.nl .g.doubleclick.net .tripadvisor.com.br; img-src* .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .google.la .google.com.kw .google.com.tw .google.mw .google.bt .zanox.com .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my https://.paypal.com .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr https://media.tacdn.com/media/ .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .clicktripz.com .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .awin1.com .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .google.com.au .google.co.ck .google.com.bo .google.cf .google.st bat.bing.com .criteo.com .google.com.co .google.dm .google.nr .google.rw .google.sh .zenaps.com .google.co.zm .google.me .google.com.do .google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com .tamgrt.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .pardot.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com;
5	2018-08-09 - 2018-08-11	True	False	True	19	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src 'self' .criteo.com .facebook.com https://cache.vtrcdn.com/; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://accounts.google.com/; frame-ancestors* .viator.com https://www.viatorcom.nl 'self' https://www.viatorcom.de .vtrcdn.com https://www.viatorcom.no https://www.viatorcom.se https://www.viatorcom.fr .cdn-net.com; frame-src* .tripadvisor.ca .googletagmanager.com https://.facebook.com .tripadvisor.de 'self' .vtrcdn.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .criteo.net .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au .criteo.com .tripadvisor.nl .g.doubleclick.net .tripadvisor.com.br; img-src* .google.pn .google.co.kr .google.bi .google.co.bw .google.so .google.fm .google.com.pr .google.ps .google.com.bz .google.si .google.ie .google.lu .google.com.pk .google.cd .google.com.sa .google.co.pn .google.co.uk .google.bj .google.com.ly .google.com.qa .google.co.vi .google.vg .google.cat .google.io .google.com.gh .google.ch .google.kg .google.co.ao .google.sm .google.com.mm .google.kz .google.tm .google.gr .google.ee .google.ca .google.cn .google.com.br .google.com.bd .google.cv .google.be .google.com.gi .google.tn .google.co.ve .google.cg .google.ht .google.com.cy .google.az .google.md .google.ac .google.ki .google.co.jp .google.ml .google.com.np data: .google.la .google.com.kw .google.com.tw .google.mw .google.bt .zanox.com .google.lt .google.com.mt .google.cz .google.lk .googleadservices.com .google.ba .facebook.com .google.com.tj .google.tl .google.com.sv .google.li .criteo.net .google.at .google.co.th .google.cl .google.pt googleads.g.doubleclick.net .google.com.my https://.paypal.com .google.no .google.al .google.co.mz .google.co.zw .gstatic.com .google.ae .google.com.gt .google.com.af https://cache.vtrcdn.com/ .google.de .google.com.eg .google.ad https://cache-graphicslib.viator.com/graphicslib/ .google.co.il .google.ne .google.com.ni .google.pl .google.com.ec .google.com.vc .google.com.hk .google.by .google.rs .google.gm 'self' .google.co.id .google.co.ke .google.ws .google.co.cr https://media.tacdn.com/media/ .google.com.pa .google.ga .google.com.ng .google.cm .google.ru .google.nu .google.co.ls .google.sc .google.com.kh .google.mv .google.co.uz .google.gf .google.dk .google.com.ar .google.co.tz .google.com.om .google.gy .google.com.lb .google.sk .google.com.vn .google.ge .google.com.pe .google.td .google.hu .google.com.bn .google.ci .google.com.py .google.lv .google.co.nz .clicktripz.com .google.bs .google.com.mx .google.com.lc .google.com.sb .google.co.ma .google.sn .google.com.ua .google.nl .google.com.ph .google.hr .google.mn .google.sr .google.mk .google.tg .awin1.com .google.tt .google.iq .google.gg .google.it .google.ro .google.tk .google.am .google.bg .google.com.cu .google.vu .google.je .google.hn .viator.com .google.mu .google.com.jm .google.co.za .google.com.fj .google.fr .google.com.ag .google.se .google.com.pg .google.com.uy .google.dj .google.gp .google.com.bh .google.dz .google.bf .google.fi .google.com.nf .google.com.sl .google.com.et .google.mg .google.co.in .google.jo .google.cc .google.to .google.com .google.co.ug .google.com.ai .google.com.na .google.gl .google.im .google.as .google.is .google.com.sg .google.com.tr .google.es .google.com.au .google.co.ck .google.com.bo .google.cf .google.st bat.bing.com .criteo.com .google.com.co .google.dm .google.nr .google.rw .google.sh .zenaps.com .google.co.zm .google.me .google.com.do .google.ms; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .googleapis.com 'self' .ytimg.com .yahoo.com www.googleadservices.com 'nonce' www.googletagmanager.com .tamgrt.com tagmanager.google.com .cdn-net.com .youtube.com .newrelic.com .pardot.com .criteo.com bat.bing.com .gstatic.com static.criteo.net https://cache.vtrcdn.com/ .facebook.net s.yimg.com .nr-data.net; style-src https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com;
6	2018-08-12 - 2018-08-15	False	False	True	11	False	False	False	238	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .hotjar.com; default-src* 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
7	2018-08-16 - 2018-08-22	False	False	True	11	False	False	False	4	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
8	2018-08-23 - 2018-08-28	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
9	2018-08-29 - 2018-09-04	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
10	2018-09-05 - 2018-09-12	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
11	2018-09-13 - 2018-09-20	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
12	2018-09-21 - 2018-10-03	False	False	True	11	False	False	False	2	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
13	2018-10-04 - 2018-10-09	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
14	2018-10-10 - 2018-10-17	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
15	2018-10-18 - 2018-10-24	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
16	2018-10-25 - 2018-11-09	False	False	True	11	False	False	False	0	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .braintreegateway.com .hotjar.com; default-src 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
17	2018-11-10 - 2018-12-07	False	False	True	11	False	False	False	1	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .authoritycrm.com .braintreegateway.com .hotjar.com; default-src* 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/; frame-src* .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
18	2018-12-08 - 2018-12-14	False	False	True	11	False	False	False	1	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .authoritycrm.com .braintreegateway.com .hotjar.com; default-src* 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/* https://www.cdn-net.com; frame-src .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;
19	2018-12-15 - END	False	False	True	11	False	False	False	2	child-src 'self' https://cache.vtrcdn.com/; connect-src bam.nr-data.net https://siteintercept.qualtrics.com https://cache.vtrcdn.com/ .facebook.com .paypal.com .braintree-api.com 'self' wss://.hotjar.com/api/v1/client/ws https://graylog.hotjar.com:12443/gelf .authoritycrm.com .braintreegateway.com .hotjar.com; default-src* 'self'; font-src 'self' data: https://cache.vtrcdn.com/; form-action https://staging.cdn-net.com https://.facebook.com 'self' https://.paypal.com https://www.tamgrt.com/rt https://accounts.google.com/* https://www.cdn-net.com; frame-src .tripadvisor.ca https://.facebook.com .tripadvisor.de .paypal.com https://www.tamgrt.com/ 'self' .vtrcdn.com .hotjar.com .tripadvisor.es .tripadvisor.se .tripadvisor.it .tripadvisor.jp .tripadvisor.dk .cdn-net.com .youtube.com .tripadvisor.fr .tripadvisor.co.uk .tripadvisor.com .tripadvisor.com.au https://cache.vtrcdn.com/ .tripadvisor.nl .tripadvisor.com.br; img-src* .gstatic.com data: https://cache.vtrcdn.com/ .facebook.com .zanox.com .viator.com .zenaps.com 'self' https://.paypal.com .siteintercept.qualtrics.com https://media.tacdn.com/media/ https://cache-graphicslib.viator.com/graphicslib/; media-src* 'self' https://cache.vtrcdn.com/; object-src 'self' https://cache.vtrcdn.com/; report-uri report; script-src .gstatic.com .youtube.com https://cache.vtrcdn.com/ 'nonce' .googleapis.com .facebook.net 'self' s.yimg.com .newrelic.com .nr-data.net js-agent.newrelic.com .ytimg.com .tamgrt.com .hotjar.com; style-src* https://cache.vtrcdn.com/ .googleapis.com 'self' 'unsafe-inline' .google.com *.hotjar.com;