fix: csp google

Author: icreated

_includes/header.html

@@ -8,7 +8,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="{{ site.description }}">
     <meta name="author" content="{{ site.author }}">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'sha256-P7/reEmHcoFfGGvy70/lKRNJz/Hh3c9DRNTwhhOjtLk=' https://www.googletagmanager.com https://www.google-analytics.com https://formkeep-production-herokuapp-com.global.ssl.fastly.net https://pym.nprapps.org; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://icreated.co https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://formkeep.com https://*.formkeep.com https://api.bloggify.net; frame-src https://formkeep.com https://*.formkeep.com;">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'sha256-P7/reEmHcoFfGGvy70/lKRNJz/Hh3c9DRNTwhhOjtLk=' https://www.googletagmanager.com https://www.google-analytics.com https://formkeep-production-herokuapp-com.global.ssl.fastly.net https://pym.nprapps.org; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://icreated.co https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://formkeep.com https://*.formkeep.com https://api.bloggify.net; frame-src https://formkeep.com https://*.formkeep.com;">
     <meta http-equiv="Strict-Transport-Security" content="max-age=31536000; includeSubDomains; preload">
     <meta http-equiv="Cross-Origin-Opener-Policy" content="same-origin">
     <link rel="shortcut icon" href="{{ 'favicon.ico?v=' | append: site.github.build_revision | relative_url }}">