Content-Security-Policy: default-src 'self' ;style-src 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com ;script-src 'self' 'unsafe-inline' www.googletagmanager.com ;font-src 'self' data: use.typekit.net fonts.gstatic.com ;img-src 'self' secure.gravatar.com data: forms.hsforms.com forms-na1.hsforms.com www.google-analytics.com p.typekit.net global.ketchcdn.com www.googletagmanager.com fonts.gstatic.com ;script-src-elem www.googletagmanager.com 'self' www.google-analytics.com js.hsforms.net use.typekit.net 'unsafe-inline' global.ketchcdn.com cdn.ketchjs.com ;frame-src forms.hsforms.com 'self' ;connect-src 'self' forms.hsforms.com www.google-analytics.com global.ketchcdn.com www.googletagmanager.com ;