Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://s.ytimg.com https://www.google.com https://www.gstatic.com https://calendly.com https://assets.calendly.com https://app.astelventures.com https://aira.astelventures.com https://player.vimeo.com https://vimeo.com https://js.storylane.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.calendly.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com https://assets.calendly.com; connect-src 'self' https://www.youtube.com https://calendly.com https://app.astelventures.com https://aira.astelventures.com https://www.aiiba.ai https://aiiba.ai https://api.github.com https://player.vimeo.com https://app.storylane.io https://js.storylane.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://calendly.com https://player.vimeo.com https://www.aiiba.ai https://aiiba.ai https://aira.astelventures.com https://app.storylane.io; media-src 'self' https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self' https://aira.astelventures.com; frame-ancestors 'none'; upgrade-insecure-requests;