Content-Security-Policy: default-src 'none'; form-action 'self' https://*.stackhawk.com; connect-src 'self' https://*.stackhawk.com wss://*.stackhawk.com https://*.googleusercontent.com https://*.amazonaws.com https://*.linkedin.com https://*.licdn.com https://*.stripe.com https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.wistia.com https://*.intercomcdn.com https://*.doubleclick.net https://*.google.com https://api.hubapi.com https://*.ingest.sentry.io https://*.google-analytics.com https://*.hubspot.com https://sentry.io https://*.githubusercontent.com https://*.merge.dev; frame-src https://js.stripe.com https://www.googletagmanager.com https://*.intercom.io https://*.wistia.net https://*.doubleclick.net https://*.merge.dev; script-src 'self' 'wasm-unsafe-eval' 'unsafe-inline' https://*.stackhawk.com https://js.stripe.com https://*.wistia.com https://*.intercom.io https://*.intercomcdn.com https://*.doubleclick.net https://*.licdn.com https://www.googletagmanager.com https://js.hsadspixel.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://www.google-analytics.com https://*.ingest.sentry.io https://*.merge.dev; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://*.intercomcdn.com https://*.wistia.com https://*.gstatic.com; object-src 'none'; img-src 'self' data: https://static.intercomassets.com https://*.intercomcdn.com https://*.linkedin.com https://*.google.com https://*.google-analytics.com https://*.hubspot.com https://*.googleusercontent.com https://*.githubusercontent.com https://*.merge.dev; manifest-src 'self'; worker-src 'self' blob:; media-src 'self' https://*.wistia.com https://*.stackhawk.com;