Content-Security-Policy: default-src *; frame-ancestors 'self' https://www.reflektive.com; script-src 'self' code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net http://0.0.0.0:8080 cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5636360785625088.storage.googleapis.com dmc1acwvwny3.cloudfront.net *.atatus.com *.nr-data.net newrelic.com; connect-src 'self' *.reflektive.com *.s3.amazonaws.com *.atatus.com *.nr-data.net *.reflektive.pf-labs.net *.pf-labs.net *.peoplefluent.com *.pendo.io; style-src 'self' fonts.googleapis.com * 'unsafe-inline'; img-src 'self' data: *; font-src 'self' fonts.gstatic.com data: * unsafe-inline