Content-Security-Policy: base-uri 'self'; font-src 'self' https: data:; form-action 'self' https://www.facebook.com *.visualwebsiteoptimizer.com https://forms.hsforms.com; frame-ancestors 'self' https://cms.hosting.com; img-src 'self' https: data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://stablechat.mysecurecloudhost.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com  https://googleads.g.doubleclick.net; upgrade-insecure-requests; worker-src blob:;