Content-Security-Policy: script-src 'self' 'wasm-unsafe-eval' https://cdn.bitgo.com *.googletagmanager.com *.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js *.calendly.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://challenges.cloudflare.com;style-src 'self' 'unsafe-inline' https://cdn.bitgo.com *.googletagmanager.com;object-src 'none';font-src 'self' https://cdn.bitgo.com;img-src 'self' data: 'self' https://cdn.bitgo.com *.google-analytics.com *.googletagmanager.com; connect-src 'self' https://cdn.bitgo.com https://faro.bitgo-prod.com/collect wss://app.bitgo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.stripe.com fonts.googleapis.com https://production.plaid.com/ *.taxbit.com https://bg-loan-app-prod.s3.us-west-2.amazonaws.com;frame-src 'self' blob: https://charts.bitgo.com *.googletagmanager.com *.stripe.com *.withpersona.com https://cdn.plaid.com/ https://calendly.com https://www.google.com https://challenges.cloudflare.com; worker-src 'self' blob:;frame-ancestors 'self';