<?xml version="1.0" encoding="UTF-8"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="script-src">
            <values>
                <value id="weltpixel_ga4_gtm" type="host">*.googletagmanager.com</value>
                <value id="weltpixel_ga4_adservices" type="host">*.googleadservices.com</value>
                <value id="weltpixel_ga4_analytics_google" type="host">*.google.com</value>
                <value id="weltpixel_ga4_analytics_meta_pixel" type="host">*.facebook.net</value>
                <value id="weltpixel_ga4_analytics_reddit_pixel" type="host">*.redditstatic.com</value>
                <value id="weltpixel_ga4_analytics_reddit_pixel_config" type="host">*.reddit.com</value>
                <value id="weltpixel_ga4_analytics_tiktok_pixel" type="host">*.tiktok.com</value>
                <value id="unpkg_com" type="host">unpkg.com</value>
                <value id="weltpixel_ga4_doubleclick" type="host">*.doubleclick.net</value>
            </values>
        </policy>
        <policy id="style-src">
            <values>
                <value id="weltpixel_ga4_gtmdebug" type="host">*.tagmanager.google.com</value>
                <value id="weltpixel_ga4_gtmanager" type="host">*.googletagmanager.com</value>
                <value id="weltpixel_ga4_fonts" type="host">fonts.googleapis.com</value>
            </values>
        </policy>
        <policy id="img-src">
            <values>
                <value id="weltpixel_ga4_gstatic" type="host">*.gstatic.com</value>
                <value id="weltpixel_ga4_metapixel" type="host">*.facebook.com</value>
                <value id="weltpixel_ga4_redditpixel" type="host">*.reddit.com</value>
                <value id="weltpixel_ga4_analyitcs" type="host">*.google-analytics.com</value>
                <value id="weltpixel_ga4_tagmanager" type="host">*.googletagmanager.com</value>
                <value id="weltpixel_ga4_doubleclick" type="host">*.doubleclick.net</value>
                <value id="weltpixel_ga4_analytics_google" type="host">*.google.com</value>
                <value id="weltpixel_ga4_analytics_gstatic" type="host">*.gstatic.com</value>
            </values>
        </policy>
        <policy id="connect-src">
            <values>
                <value id="weltpixel_ga4_analytics" type="host">*.google-analytics.com</value>
                <value id="weltpixel_ga4_analytics_google" type="host">*.analytics.google.com</value>
                <value id="weltpixel_ga4_metapixel" type="host">*.facebook.net</value>
                <value id="weltpixel_ga4_reditpixel" type="host">*.redditstatic.com</value>
                <value id="weltpixel_ga4_reddit_pixel_config" type="host">*.reddit.com</value>
                <value id="weltpixel_ga4_tiktok_pixel_config" type="host">*.tiktok.com</value>
                <value id="weltpixel_ga4_doubleclick" type="host">*.doubleclick.net</value>
                <value id="weltpixel_ga4_server_side_tracking" type="host">*.run.app</value>
            </values>
        </policy>
        <policy id="form-action">
            <values>
                <value id="weltpixel_ga4_metapixel_com" type="host">*.facebook.com</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="weltpixel_ga4_gtm" type="host">*.googletagmanager.com</value>
                <value id="weltpixel_ga4_doubleclick" type="host">*.doubleclick.net</value>
            </values>
        </policy>
        <policy id="font-src">
            <values>
                <value id="weltpixel_ga4_gtm" type="host">fonts.gstatic.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
