Content-Security-Policy: connect-src https://api.feedback.eu.pendo.io https://api.feedback.us.pendo.io https://api.hubapi.com https://*.hubspot.com https://forms.hscollectedforms.net https://*.receptive.io https://www.googletagmanager.com https://js.hs-banner.com https://*.pickaxeproject.com https://embed.pickaxeproject.com https://cdn.jsdelivr.net/gh/pickaxeproject/ https://pickaxe.co https://*.pickaxe.co https://pickaxeproject--v2-core-core-main.modal.run https://admin1.sitespect.com:3000 http://admin1.sitespect.com:3000 wss://admin1.sitespect.com:3000 ws://admin1.sitespect.com:3000 'self' https://recs.sitespect.net;default-src 'self' 'unsafe-inline' 'unsafe-eval';font-src * data: blob:;frame-src * data:;img-src * data: blob:;report-to sitespect-report;report-uri /log/CSP/PolicyViolations?csptoken=QCV3VBW8L1J4DFUYVRC7;script-src https://www.google.com https://js.hs-scripts.com https://*.receptive.io https://js.hsadspixel.net https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://feedback.pendo.io https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.hubspot.com https://api.feedback.eu.pendo.io https://js.usemessages.com https://js.hsleadflows.net https://*.pickaxeproject.com https://embed.pickaxeproject.com https://cdn.jsdelivr.net/gh/pickaxeproject/ https://cdn.jsdelivr.net/npm/marked/ https://unpkg.com/@lottiefiles/ https://pickaxe.co https://*.pickaxe.co https://admin1.sitespect.com:3000 http://admin1.sitespect.com:3000 wss://admin1.sitespect.com:3000 ws://admin1.sitespect.com:3000 'self' 'unsafe-inline' 'unsafe-eval';script-src-elem https://www.google.com https://js.hs-scripts.com https://*.receptive.io https://js.hsadspixel.net https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://feedback.pendo.io https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.hubspot.com https://api.feedback.eu.pendo.io https://js.usemessages.com https://js.hsleadflows.net https://*.pickaxeproject.com https://embed.pickaxeproject.com https://cdn.jsdelivr.net/gh/pickaxeproject/ https://cdn.jsdelivr.net/npm/marked/ https://unpkg.com/@lottiefiles/ https://pickaxe.co https://*.pickaxe.co https://admin1.sitespect.com:3000 http://admin1.sitespect.com:3000 wss://admin1.sitespect.com:3000 ws://admin1.sitespect.com:3000 'self' 'unsafe-inline' 'unsafe-eval';style-src-elem https://fonts.googleapis.com https://*.pickaxeproject.com https://embed.pickaxeproject.com https://cdn.jsdelivr.net/gh/pickaxeproject/ https://unpkg.com/@lottiefiles/ 'self' 'unsafe-inline';worker-src * data: blob: 'self' 'unsafe-inline' 'unsafe-eval'