Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' *.amplitude.com *.ringover.com *.screeb.app cloud.targetfirst.com; style-src 'self' 'unsafe-inline' cdn.quilljs.com fonts.googleapis.com fonts.gstatic.com *.ringover.com; img-src 'self' ringover.com *.ringover.com *.atl-paas.net avatars.slack-edge.com *.screeb.app cloud.targetfirst.com data: blob:; connect-src 'self' blob: wss://*.ringover.com *.ringover.com fonts.googleapis.com fonts.gstatic.com *.amplitude.com *.screeb.app wss://*.screeb.app wss://*.watcheebox.net *.watcheebox.net *.watcheezy.net cloud.targetfirst.com app.revenuehero.io wss://*.screeb.app; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.ringover.com *.screeb.app; media-src 'self' *.ringover.com blob:; frame-src 'self' *.ringover.com ringover.me *.youtube.com popup.schedulehero.io; child-src 'self' *.ringover.com ringover.me; form-action 'self'; frame-ancestors 'self' *.ringover.com app.hubspot.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; manifest-src 'self'; navigate-to 'self' *.ringover.com;  upgrade-insecure-requests