Content-Security-Policy: default-src 'self'; worker-src blob: ; media-src *.stripe.com static.olark.com lp.onfleet.com; img-src *.visualwebsiteoptimizer.com onfleet.com *.linkedin.com *.stripe.com *.reddit.com *.facebook.com *.hubspot.com data: *.google.com *.google-analytics.com *.google.co.uk *.bing.com *.clarity.ms *.cloudfront.net *.hsforms.com *.cloudinary.com *.olark.com *.twitter.com cdn.jsdelivr.net *.jsdelivr.net; script-src-elem onfleet.com *.vector.co d-code.liadm.com *.usbrowserspeed.com *.ip-api.com *.jsdelivr.net *.stripe.com *.youtube-nocookie.com *.doubleclick.net *.listenlayer.com *.redditstatic.com *.youtube.com *.olark.com *.licdn.com cdn.sitesearch360.com *.google-analytics.com *.googletagmanager.com *.hs-scripts.com *.cloudfront.net *.googleapis.com *.hsadspixel.net *.hubspot.com *.hs-analytics.net *.hs-banner.com static.olark.com transcend-cdn.com script.crazyegg.com *.clarity.ms js.hsforms.net cdn.segment.com *.facebook.net dev.visualwebsiteoptimizer.com www.google.com www.gstatic.com js.usemessages.com 'unsafe-inline' https://unpkg.com/aos@next/dist/aos.js https://inorganik.github.io/countUp.js/dist/countUp.umd.js https://bat.bing.com/bat.js https://www.googletagmanager.com/; style-src onfleet.com *.googleapis.com *.cloudfront.net transcend-cdn.com static.olark.com cdn.jsdelivr.net *.jsdelivr.net 'unsafe-inline' https://unpkg.com/aos@next/dist/aos.css; font-src *.gstatic.com static.olark.com *.cloudfront.net data:; frame-src *.stripe.com *.rippling.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.olark.com *.hsforms.com app.hubspot.com www.google.com www.gstatic.com; connect-src *.vector.co d-code.liadm.com *.usbrowserspeed.com *.ip-api.com *.linkedin.com *.stripe.com countly.onfleet.com onfleet.com *.onfleet.com  *.googlesyndication.com *.listenlayer.com *.reddit.com *.redditstatic.com *.sitesearch360.com *.hubapi.com *.olark.com *.hubspot.com *.s3.amazonaws.com onfleet.ghost.io *.hsforms.com api.segment.io telemetry.transcend.io *.clarity.ms cdn.segment.com transcend-cdn.com *.google-analytics.com *.doubleclick.net *.google.com publickeyservice.keys.adm-services.goog app.launchdarkly.com *.launchdarkly.com *.usemessages.com static.hsappstatic.net *.hsappstatic.net www.google.com www.gstatic.com