Content-Security-Policy: style-src 'self' 'unsafe-inline' *.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.typekit.net *.google.com *.gstatic.com *.zdassets.com track.gaconnector.com https://analytics.newscred.com https://fs.welcomesoftware.com https://login.optimizely.com https://prep.login.optimizely.com; img-src 'self' data: *.typekit.net *.google.com *.googleapis.com *.newscred.com *.welcomesoftware.com *.cmp.optimizely.com *.cmp-dev.optimizely.com *.cmp-prep.optimizely.com; frame-src https://www.google.com; connect-src *.zdassets.com *.zendesk.com track.gaconnector.com fs.welcomesoftware.com https://login.optimizely.com https://prep.login.optimizely.com; font-src 'self' https: data: