Content-Security-Policy: default-src 'self'; connect-src blob: data: 'self' https://*.algolia.net https://*.algolianet.com https://*.analytics.google.com https://*.arcade.software https://*.google-analytics.com https://*.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://*.google.com https://*.g.doubleclick.net https://*.ingest.sentry.io https://*.intercom-messenger.com https://*.intercom.io https://*.intercomcdn.com https://*.litix.io https://*.liveblocks.io https://*.mux.com https://*.posthog.com https://api-iam.intercom.io https://cdn.jsdelivr.net https://firebasestorage.googleapis.com https://risk.clearbit.com https://t.arcade.show wss://*.intercom-messenger.com wss://*.intercom.io wss://*.liveblocks.io https://www.googleadservices.com https://px.ads.linkedin.com https://t.vibe.co https://*.hubspot.com https://*.hubapi.com https://*.hs-analytics.net https://*.hsforms.com https://us-central1-arcade-cf7d5.cloudfunctions.net; script-src 'unsafe-eval' 'unsafe-inline' blob: 'self' https://*.arcade.software https://*.firebaseio.com https://*.intercomcdn.com https://ajax.googleapis.com https://*.google.com https://www.googleadservices.com https://*.g.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://cdn.firebase.com https://js.stripe.com https://risk.clearbit.com https://t.arcade.show https://vercel.live https://widget.intercom.io https://snap.licdn.com https://t.vibe.co https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net; img-src data: blob: 'self' https://*.arcade.software https://*.google-analytics.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.google.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.intercomassets.com https://*.intercomcdn.com https://*.mux.com https://assets.vercel.com https://firebasestorage.googleapis.com https://storage.googleapis.com https://logo.clearbit.com https://media.brand.dev https://asset.brandfetch.io https://messenger-apps.intercom.io https://ssl.gstatic.com https://www.gstatic.com https://*.pexels.com https://dm0qx8t0i9gc9.cloudfront.net https://px.ads.linkedin.com https://t.vibe.co https://*.hubspot.com https://*.hs-analytics.net https://*.hsadspixel.net; media-src data: blob: 'self' https://*.arcade.software https://*.intercomcdn.com https://*.mux.com https://storage.googleapis.com https://firebasestorage.googleapis.com https://*.pexels.com https://dm0qx8t0i9gc9.cloudfront.net; style-src 'unsafe-inline' 'self' https://*.arcade.software https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://storage.googleapis.com; font-src data: 'self' https://*.arcade.software https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.intercomcdn.com https://storage.googleapis.com; frame-src 'self' https:; frame-ancestors 'none'