Content-Security-Policy: default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: ws://vts.zohopublic.com wss://api.appcues.net; script-src-elem 'self' https: 'unsafe-inline' blob:; frame-ancestors 'self' https://secure.setshape.com https://www.isoftpull.com