Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.jsdelivr.net https://cdn.segment.com https://static.zdassets.com https://ekr.zdassets.com https://squaredup.zendesk.com https://*.zopim.com wss://squaredup.zendesk.com wss://*.zopim.com *.statuspage.io *.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5642210281652224.storage.googleapis.com *.amplitude.com *.paddle.com *.profitwell.com *.calendly.com *.livechatinc.com;style-src 'self' cdn.jsdelivr.net 'unsafe-inline' *.pendo.io pendo-static-5642210281652224.storage.googleapis.com *.amplitude.com *.paddle.com *.livechatinc.com;connect-src 'self' cdn.jsdelivr.net in.eu2.segmentapis.com events.eu1.segmentapis.com cdn.segment.com raw.githubusercontent.com api.segment.io *.b2clogin.com *.onmicrosoft.com *.squaredup.com wss://*.squaredup.com *.zendesk.com *.zdassets.com wss://squaredupcloud.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io *.pendo.io pendo-static-5642210281652224.storage.googleapis.com *.amplitude.com *.paddle.com *.profitwell.com *.livechatinc.com;frame-src *.statuspage.io app.pendo.io *.amplitude.com *.paddle.com *.squaredup.com calendly.com *.calendly.com *.livechatinc.com;frame-ancestors *;child-src *.statuspage.io app.pendo.io *.amplitude.com *.livechatinc.com 'self' blob:;img-src * data: blob: *.amplitude.com *.livechatinc.com;object-src 'self' *.livechatinc.com;worker-src 'self' blob:;media-src static.zdassets.com *.amplitude.com *.livechatinc.com;font-src 'self' cdn.jsdelivr.net *.livechatinc.com