Content-Security-Policy: default-src 'self' wss: 'unsafe-inline' 'unsafe-eval' blob: data: *.cebroker.com *.evercheck.com *.evercheckwallet.com *.propelus.com *.pendo.io *.stripe.com *.googleapis.com *.stripe.network *.google-analytics.com *.userway.org *.lightboxcdn.com cdnjs.cloudflare.com *.amazonaws.com www.google.com *.clarity.ms analytics.google.com *.gstatic.com *.visualwebsiteoptimizer.com cdn.linkedin.oribi.io *.lr-in-prod.com *.googletagmanager.com cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com *.lr-ingest.io *.fontawesome.com *.bootstrapcdn.com; font-src 'self' *;