Content-Security-Policy: default-src 'self' https://app.hellosign.com https://www.googletagmanager.com https://*.prioritypaymentsystems.com https://*.mxconnect.com wss://*.mxconnect.com https://*.mxmerchant.com https://*.duosecurity.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://www.youtube.com https://*.ytimg.com https://*.cloudfront.net https://web.delighted.com https://delighted.com wss://ws.pusherapp.com 'unsafe-inline' 'unsafe-eval' data: https://*.mxconnect.com https://*.mxmerchant.com https://*.duosecurity.com