Content-Security-Policy: default-src 'self' blob: https://www.facebook.com https://connect.facebook.net https://platform.twitter.com https://static.ads-twitter.com https://dc.ads.linkedin.com https://snap.licdn.com https://static.hotjar.com https://play.vidyard.com https://s.adroll.com https://j.6sc.co https://www.googletagmanager.com https://consent.cookiebot.com https://cdn.userway.org https://script.crazyegg.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com *.crazyegg.com 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' s3.amazonaws.com fonts.googleapis.com cdnjs.cloudflare.com cdn.userway.org *.crazyegg.com;