Content-Security-Policy: report-uri /csp-violations; default-src 'self'; base-uri 'self'; font-src * data:; img-src * blob: data: webkit-fake-url:; object-src 'none'; media-src * blob: data:; form-action * mailto:; script-src 'self' https://*.kit.com https://*.convertkit.com https://*.stripe.com https://*.intercom.io https://kit.fontawesome.com https://challenges.cloudflare.com https://cdp.customer.io https://cdp-eu.customer.io 'strict-dynamic' 'report-sample' 'unsafe-eval' 'nonce-wAlL9LZjRWnE/qi4q0yN8A=='; style-src 'self' https: 'unsafe-inline'; connect-src * https://challenges.cloudflare.com; frame-src * https://challenges.cloudflare.com; child-src * blob:; worker-src 'self' blob: