Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://js.stripe.com https://cdn.eu.pendo.io https://0lb0kfsm1ts6.statuspage.io https://data.telemetry.semble.io https://embedding.workato.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https: wss:; font-src 'self' https: data:; img-src 'self' https: data: blob:; frame-src 'self' data: https://app.powerbi.com https://js.stripe.com/v3/ https://0lb0kfsm1ts6.statuspage.io https://semble-test.whereby.com https://semble.whereby.com https://s3.eu-west-2.amazonaws.com https://s3.eu-west-3.amazonaws.com https://portal.productboard.com https://www.figma.com https://app.eu.workato.com https://efficience2.icanopee.net https://efficiencedemo-dev.icanopee.net https://efficience.semblehealth.click https://efficience.semblehealth.casa https://efficience.semblehealth.help https://efficience.semblehealth.link https://efficience.semblehealth.me https://efficience.semblehealth.mobi https://efficience.semblehealth.tech; object-src 'none'; base-uri 'self';