Content-Security-Policy-Report-Only: default-src 'self' *.cvent.com *.cvent.org *.cvent-assets.com *.cvent.cloud; font-src 'self' data: https: *.cvent.com *.cvent.org *.cvent-assets.com *.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https: *.cvent.com *.cvent.org *.cvent-assets.com *.bootstrapcdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: *.cvent.com *.cvent.org *.cvent-assets.com; connect-src 'self' data: https: *.cvent.com *.cvent.org *.cvent-assets.com *.cvent.cloud; img-src 'self' about: data: blob: http: https: *.cvent.com *.cvent.org *.cvent-assets.com *.pendo.io *.storage.googleapis.com s3.amazonaws.com *.socialtables.com *.twitter.com *.cloudfront.net; media-src 'self' data: *.cvent.com *.cvent.org *.cvent-assets.com; frame-src 'self' blob: *.cvent.cloud *.cvent.com *.twitter.com *.facebook.com *.google.com *.trendmicro.com *.pendo.io *.doubleclick.net authenticate.ibotta.com apps.helmsbriscoe.com login.micorsoftonline.com; form-action 'self' *.cvent.com *.cvent.org *.cvent.cloud *.helmsbriscoe.com app.cvent.com; worker-src 'self' blob:; manifest-src 'self' *.cvent.com *.cvent.org *.cvent-assets.com *.cvent.cloud; frame-ancestors 'self' *.cvent.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb1c55efac7cc06aebc71217f3914b914&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3acvent.web.subscribers%2cenv%3aP2;