Content-Security-Policy: default-src 'none';script-src 'report-sample' 'self' app: resource: moz-extension: chrome: chrome-extension: safari-extension: safari-resource: safari-web-extension: ms-appx-web: opera: about: https: 'sha256-q7cJjDqNO2e1L5UltvJ1LhvnYN7yJXgGO7b6h9xkL1o=' 'sha256-rqqVH5LplGhKZKTEALP8HjjiXKsPApu8zW2JQRTZjJQ=' 'sha256-hblMForFJbi0ultQE9Q6q4x6n4TrASh0pYHYjV2v98o=' 'sha256-li3MmfulAwrRRC4E6AWVrLXMxW9358OnYKwV4Iq6ci8=' 'sha256-LFCG3QCmCedCg1JYelEj6C+b/vwdFtnkcuVc3RakDfw=' 'sha256-q+LZYTv8ACoUIlluZq+s82JGKxcOd5mScMBDtyq14Lw=' cdn.segment.com cdn.speedcurve.com/js/lux.js www.google-analytics.com/analytics.js *.sendcloud.com static.hotjar.com script.hotjar.com snippet.maze.co static.zdassets.com/web_widget/ fast.appcues.com app.satismeter.com/js js.partnerstack.com/v1/ js.intercomcdn.com widget.intercom.io/widget/ snap.licdn.com/li.lms-analytics/insight.min.js bat.bing.com/bat.js connect.facebook.net translate.google.com about assets.customer.io code.gist.build eu.customerioforms.com *.hs-scripts.com *.smooch.io *.zendesk.com consent.cookiebot.eu;style-src 'report-sample' 'self' app: resource: moz-extension: chrome: chrome-extension: safari-extension: safari-resource: safari-web-extension: ms-appx-web: opera: about: 'unsafe-inline' https: fast.appcues.com fonts.googleapis.com *.sendcloud.com translate.googleapis.com snippet.maze.co code.gist.build *.smooch.io *.zendesk.com;connect-src 'self' https: wss: http://127.0.0.1:1903 api.segment.io *.app.sendcloud.com graph.instagram.com o421644.ingest.sentry.io snippet.maze.co api.maze.co prompts.maze.co www.google-analytics.com lux.speedcurve.com *.statuspage.io ekr.zdassets.com widget-mediator.zopim.com app.satismeter.com api.appcues.net grsm.io stats.g.doubleclick.net *.intercom.io bat.bing.com about track-eu.customer.io eu.customerioforms.com *.api.gist.build *.cloud.gist.build *.smooch.io *.zendesk.com *.typeform.com consent.cookiebot.eu consentcdn.cookiebot.com ;img-src * data: blob: app: resource: moz-extension: chrome: chrome-extension: safari-extension: safari-resource: safari-web-extension: ms-appx-web: opera: about: track-eu.customer.io *.smooch.io *.zendesk.com *.gravatar.com imgsct.cookiebot.com;frame-src 'self' https: vars.hotjar.com www.facebook.com renderer.gist.build code.gist.build *.typeform.com *.pandadoc.eu consentcdn.cookiebot.com;font-src 'self' app: resource: moz-extension: chrome: chrome-extension: safari-extension: safari-resource: safari-web-extension: ms-appx-web: opera: about: https: fonts.gstatic.com fonts.googleapis.com snippet.maze.co;media-src 'self' static.zdassets.com cdn.smooch.io *.amazonaws.com *.sendcloud.com;child-src 'self' blob: *.sendcloud.com;worker-src 'self' blob:;manifest-src 'self';base-uri 'self';report-to https://o421644.ingest.sentry.io/api/6520274/security/?sentry_key=d83967d3af0646dc83932d6790268dc2&sentry_environment=3.8.0;report-uri https://o421644.ingest.sentry.io/api/6520274/security/?sentry_key=d83967d3af0646dc83932d6790268dc2&sentry_environment=3.8.0