Content-Security-Policy: base-uri 'self'; connect-src 'self' *.airbrake.io *.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com wss://*.intercom.io *.my.salesforce.com hooks.slack.com *.google-analytics.com stats.g.doubleclick.net autocomplete.clearbit.com slack.clearbit.com klue-in.s3.amazonaws.com s3.amazonaws.com *.rc.klue.com *.googleapis.com *.nr-data.net app.pendo.io dycj3q34rhqmj.cloudfront.net https://spc.app.klue.com; default-src 'self' https:; font-src 'self' https: data:; form-action 'self' https: kluemobile:; img-src 'self' https: data:; object-src 'none'; script-src 'self' 'report-sample' 'strict-dynamic' 'unsafe-inline' *.helpdocs.io *.google-analytics.com *.googleapis.com app.intercom.io widget.intercom.io js.intercomcdn.com *.my.salesforce.com *.lightning.force.com *.newrelic.com bam.nr-data.net *.rc.klue.com cdn.polyfill.io slack.clearbit.com static.cloudflareinsights.com platform.twitter.com dycj3q34rhqmj.cloudfront.net 'nonce-tVbpQCcCRe0ghcojFOGq7Q=='; style-src 'self' https: 'unsafe-inline'; frame-ancestors 'self' https:; report-uri https://kluein.report-uri.com/r/t/csp/enforce; upgrade-insecure-requests