Content-Security-Policy: default-src 'self' https://*.wistia.com https://*.wistia.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://*.wistia.com https://*.typekit.net blob:; font-src 'self' https://fonts.gstatic.com https://fonts.gstatic.com https://*.wistia.com https://*.typekit.net data:; script-src 'self' 'strict-dynamic' 'nonce-597a391286b4d2b9e7c66109bad104b4' https://www.googletagmanager.com https://*.wistia.com https://js.sentry-cdn.com; connect-src 'self' https://*.wistia.com https://*.wistia.net https://pipedream.wistia.com http://pipedream.wistia.com https://*.googleapis.com https://*.wizer-training.com https://*.test.wizer-training.com https://*.algolia.net https://*.ingest.sentry.io https://*.hubspot.com https://api.hsforms.com https://www.google-analytics.com https://*.litix.io https://sentry.io https://api.getrewardful.com https://*.google-analytics.com wss://ws.hotjar.com https://*.hotjar.io https://fast.appcues.com https://unleash.prodapps.wizerapps.net https://static.hsappstatic.net https://*.sentry.io https://browser.sentry-cdn.com; img-src 'self' https: blob: data:; media-src 'self' blob: data: https://*.wistia.net https://*.wistia.com https://storage.googleapis.com https://storage.wizer-training.com; frame-src https://fast.wistia.com https://fast.wistia.net https://js.stripe.com https://wizer-development.firebaseapp.com https://wizer-production.firebaseapp.com https://*.wizer-training.com; worker-src 'self' blob:; frame-ancestors 'none'; form-action 'self'; report-uri https://o206439.ingest.us.sentry.io/api/1325349/security/?sentry_key=5146e35cece64a0c8bc8f7de69a48a2c; report-to csp-endpoint