Content-Security-Policy: default-src * data: blob:;script-src *.on24.com *.cloudfront.net *.walkme.com *.facebook.net *.facebook.com *.pendo.io *.storage.googleapis.com *.totango.com *.zopim.com *.zopim.io *.zdassets.com *.driftt.com *.driftcdn.com *.sharethis.com *.stream-io-api.com wccanalyticsqa.azurewebsites.net https://*.zendesk.com wss://*.zendesk.com 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src wss://*.on24.com https://telemetry.banuba.cloud/ *.walkme.com *.on24.com blob: *.cdninstagram.com on24.zendesk.com *.facebook.net *.facebook.com *.zopim.com *.zopim.io *.zdassets.com *.driftt.com *.driftcdn.com *.bitmovin.com *.sharethis.com wss://*.zopim.com wss://*.stream-io-api.com https://*.stream-io-api.com https://*.zendesk.com wss://*.zendesk.com https://app.pendo.io 'self'; object-src *.on24.com; frame-ancestors *.on24.com;