Content-Security-Policy: default-src 'self'; connect-src 'self' https://*.pipe17.com https://cdn.auth0.com https://api.recurly.com https://pipe17-frontend-files-master.s3.us-east-1.amazonaws.com https://browser-intake-datadoghq.com https://cdn.segment.com https://api.segment.io https://*.launchdarkly.com https://*.userflow.com wss://e.userflow.com wss://e.eu.userflow.com https://track.hubspot.com https://api.hubapi.com https://cdn.jsdelivr.net; script-src 'self' blob: https://js.recurly.com https://cdn.segment.com https://cdn.userflow.com https://js.userflow.com https://js.hs-scripts.com https://js.hs-analytics.net https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://js.recurly.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.userflow.com https://js.userflow.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; media-src 'self' https://blob.userflow.com https://cdn.userflow.com https://storage.googleapis.com/studio1-prod-blob/; frame-src 'self' https://*.pipe17.com https://js.recurly.com https://api.recurly.com https://www.googletagmanager.com https://cdn.userflow.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; worker-src blob: