Content-Security-Policy: default-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.highnote.com highnote.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.highnote.com highnote.com; style-src 'self' 'unsafe-inline' *.highnote.com highnote.com; img-src 'self' data: docs.highnote.com highnote.com; font-src 'self' data: *.highnote.com highnote.com; frame-src 'self' *.highnote.com highnote.com storage.googleapis.com; connect-src 'self' *.highnote.com highnote.com browser-intake-us5-datadoghq.com *.sentry.io *.algolia.net *.algolianet.com; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; worker-src blob:; report-uri https://o492040.ingest.us.sentry.io/api/4510921137455104/security/?sentry_key=5afce4b9364792aaf1292c9ffa7de913