Copy-paste CSP policies for Google Analytics, Google Fonts, Stripe, Intercom, Hotjar, and other common services. Tested and working.