Content-Security-Policy: upgrade-insecure-requests; object-src 'none'; script-src 'self' https://*.securegive.com/ https://*.agsadmin.com/ https://applepay.cdn-apple.com/ https://*.localizecdn.com/ https://bam.nr-data.net/ https://sg-image-files.s3.us-east-1.amazonaws.com/ https://sg-file-upload.s3.us-east-1.amazonaws.com/ https://js-agent.newrelic.com https://www.google.com https://www.googletagmanager.com https://js.userflow.com https://cdn.userflow.com https://www.gstatic.com https://cdn.jsdelivr.net https://get.geojs.io https://elements.stytch.com; style-src 'self' 'unsafe-inline' https://*.securegive.com/ https://*.agsadmin.com/ https://*.localizecdn.com/ https://applepay.cdn-apple.com/ https://bam.nr-data.net/ https://sg-image-files.s3.us-east-1.amazonaws.com/ https://sg-file-upload.s3.us-east-1.amazonaws.com/ https://js-agent.newrelic.com https://www.googletagmanager.com https://js.userflow.com https://cdn.userflow.com https://www.gstatic.com https://cdn.jsdelivr.net https://get.geojs.io https://elements.stytch.com; report-uri https://report.centralcsp.com/68dc2d7bb4eb0dfdf89d534c; report-to csp-endpoint;