Content-Security-Policy: default-src 'self' https://api.segment.io https://cdn.segment.com wss://*.intercom.io https://api-iam.intercom.io/ https://app.satismeter.com https://www.google-analytics.com https://api-js.mixpanel.com https://uploads.intercomcdn.com https://app.getsentry.com https://hcaptcha.com https://*.hcaptcha.com https://app.sigmacomputing.com;script-src 'self' https://assets.ompnt.com https://cdn.segment.com https://widget.intercom.io https://assets.customer.io https://js.intercomcdn.com https://cdn.mxpnl.com https://app.satismeter.com https://www.google-analytics.com https://hcaptcha.com https://*.hcaptcha.com;style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https:;font-src https:;media-src https://js.intercomcdn.com;object-src 'none';frame-src 'self' https://app.sigmacomputing.com https://hcaptcha.com https://*.hcaptcha.com;base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none'