Content-Security-Policy: default-src 'self' wss: 'unsafe-inline' 'unsafe-eval' blob: data: lr.cebroker.com content.cebroker.com data.cebroker.com engage.cebroker.com *.logr-in.com fonts.googleapis.com fonts.gstatic.com app.pendo.io www.googletagmanager.com *.google.com stats.g.doubleclick.net www.google-analytics.com googleads.g.doubleclick.net connect.facebook.net www.clarity.ms *.typekit.net api.statsig.com featuregates.org statsigapi.net api.statsigcdn.com featureassets.org assetsconfigcdn.org prodregistryv2.org cloudflare-dns.com beyondwickedmapping.org *.stripe.com ingress.us-west-2.aws.dash0.com ceb-test-lms-assets.s3.amazonaws.com ceb-test-lms-assets.s3.us-east-1.amazonaws.com s3.amazonaws.com/ceb-test-lms-assets/ s3.us-east-1.amazonaws.com/ceb-test-lms-assets/; font-src 'self' *;