Content-Security-Policy-Report-Only: default-src 'self'; connect-src *; img-src * data:; script-src 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' kit.fontawesome.com ka-p.fontawesome.com https://fast.wistia.com/ https://fast.wistia.net/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.8am.com/ https://insight.adsrvr.org/ https://app.netlify.com/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com https://app.contentful.com; upgrade-insecure-requests; block-all-mixed-content