Content-Security-Policy: default-src 'self' https: blob: bam.eu01.nr-data.net https://*.captionhub.app; font-src 'self' https: data:; img-src 'self' https: data: blob: *.gstatic.com *.brightcove.com http://f1.media.brightcove.com https://cdn-staging.captionhub.com https://cdn.captionhub.com; object-src 'none'; script-src 'self' https: data: 'unsafe-eval' blob: 'unsafe-inline' *.pusher.com *.mux.com *.pusherapp.com *.chargebee.com *.google-analytics.com https://*.google-analytics.com *.newrelic.com https://*.newrelic.com https://*.inspectlet.com https://cdn-staging.captionhub.com https://cdn.captionhub.com; worker-src 'self' https: blob:; frame-src 'self' https: blob: http://metabase.sandbox.captionhub.com; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: data: wss://pusher.com wss://pusherapp.com ws://*.pusher.com wss://*.pusher.com wss://*.inspectlet.com wss://*.pusher.com:443 *.fonts.googleapis.com http://localhost:9999