Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: 'self' *.tawk.to wss://*.tawk.to http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; img-src https: 'self' data: embed.tawk.to tawk.link cdn.jsdelivr.net/emojione; frame-src https: 'self' data:; frame-ancestors 'self';