<?xml version="1.0" encoding="UTF-8"?>

<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="connect-src">
            <values>
                <value id="axept.io" type="host">*.axept.io</value>
                <value id="google.fr" type="host">*.google.fr</value>
                <value id="dinhvan" type="host">*.dinhvan.com</value>
                <value id="tiktok" type="host">*.tiktok.com</value>
                <value id="google-analytics" type="host">*.google-analytics.com</value>
                <value id="doubleclick" type="host">*.doubleclick.net</value>
                <value id="pagead2" type="host">*.googlesyndication.com</value>
                <value id="pinterest" type="host">ct.pinterest.com</value>
                <value id="vimeo" type="host">*.vimeo.com</value>
                <value id="pinimg" type="host">s.pinimg.com</value>
                <value id="vimeo2" type="host">*.vimeocdn.com</value>
                <value id="tiktok" type="host">analytics.tiktok.com</value>
                <value id="vimeo3" type="host">vimeo.com</value>
            </values>
        </policy>
        <policy id="style-src">
            <values>
                <value id="dinhvan" type="host">*.dinhvan.com</value>
            </values>
        </policy>
        <policy id="img-src">
            <values>
                <value id="dinhvan" type="host">*.dinhvan.com</value>
                <value id="doubleclick" type="host">*.doubleclick.net</value>
                <value id="google.fr" type="host">*.google.fr</value>
                <value id="pagead2" type="host">*.googlesyndication.com</value>
                <value id="facebook" type="host">*.facebook.com</value>
            </values>
        </policy>
        <policy id="media-src">
            <values>
                <value id="dinhvan" type="host">*.dinhvan.com</value>
            </values>
        </policy>
        <policy id="script-src">
            <values>
				<value id="dinhvan" type="host">*.dinhvan.com</value>
                <value id="tiktok" type="host">*.tiktok.com</value>
                <value id="axept.io" type="host">*.axept.io</value>
                <value id="chimpstatic" type="host">chimpstatic.com</value>
                <value id="vimeo" type="host">*.vimeocdn.com</value>
                <value id="pinimg" type="host">s.pinimg.com</value>
                <value id="pinterest" type="host">ct.pinterest.com</value>
                <value id="facebook" type="host">*.facebook.net</value>
            </values>
        </policy>
        <policy id="font-src">
            <values>
                <value id="dinhvan" type="host">*.dinhvan.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
