Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' zingtree.com *.zingtree.com ajax.googleapis.com livehelpnow.net *.livehelpnow.net developer.livehelpnow.net cdn.polyfill.io www.googletagmanager.com www.google-analytics.com unpkg.com youtube.com *.youtube.com cdnjs.cloudflare.com cdn.jsdelivr.net fulview.io *.fulview.io www.gstatic.com clarity.ms *.clarity.ms static.addtoany.com *.google.com *.google *.googleadservices.com; style-src 'self' 'unsafe-inline' zingtree.com *.zingtree.com fontawesome.com *.fontawesome.com fonts.googleapis.com fonts.gstatic.com cdn.jsdelivr.net livehelpnow.net *.livehelpnow.net unpkg.com cdnjs.cloudflare.com use.typekit.net p.typekit.net *.google.com; img-src 'self' data: livehelpnow.net *.livehelpnow.net www.google-analytics.com www.googletagmanager.com cdn.jsdelivr.net clarity.ms *.clarity.ms www.ala.org  live-alaorg.pantheonsite.io *.googleusercontent.com *.google.com *.gstatic.com *.google *.goog; media-src 'self' developer.livehelpnow.net fulview.io *.fulview.io; frame-src 'self' static.addtoany.com youtube.com *.youtube.com airtable.com *.airtable.com embed.wakelet.com *.google.com www.swissarmylibrarian.net  *.goog *.google; font-src 'self' data: fonts.gstatic.com use.typekit.net p.typekit.net fontawesome.com *.fontawesome.com;; connect-src 'self' cdn.jsdelivr.net *.google; report-uri /report-csp-violation