Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sdl.com *.auth0.com *.trados.com https://d2pt1kxvtmhvs.cloudfront.net *.statuspage.io *.hubspot.com *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.usemessages.com *.hs-analytics.net *.chameleon.io https://cdnjs.cloudflare.com https://js.monitor.azure.com/scripts/b/ https://cdn.jsdelivr.net blob: https://unpkg.com/[email protected]/dist/, object-src 'none', worker-src blob: