Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: https://fast.wistia.com https://fast.wistia.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; connect-src 'self' https: http://fast.wistia.com http://fast.wistia.net http://pipedream.wistia.com wss://*.api.sanity.io wss://*.wistia.com wss://*.wistia.net; frame-src 'self' https:; font-src 'self' data: https:; media-src 'self' https: http: blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests;