Content-Security-Policy: default-src * https: data: blob:;script-src 'self' *.sequoia.com storage.googleapis.com maps.googleapis.com cdn.merge.dev *.aptrinsic.com *.stripe.com *.plaid.com secure.bswift.com 'unsafe-eval';base-uri 'self' *.sequoia.com *.cloudfront.net;form-action 'self' *.sequoia.com *.peopleloop.com secure.bswift.com;img-src * https: data: blob:;font-src * https: data:;style-src 'self' https: 'unsafe-inline';frame-ancestors 'self' *.sequoia.com https://*.typeface.ai