Content-Security-Policy: default-src 'self' *.hsforms.net *.hsforms.com *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io; script-src 'self' 'unsafe-eval' *  *.hsappstatic.net *.hsforms.net *.hsforms.com *.intercomcdn.com *.intercom.io https://*.googleapis.com https://*.googletagmanager.com https://calendly.com https://*.calendly.com https://*.greenhouse.io 'unsafe-inline' ; img-src 'self' *.hsforms.net *.hsforms.com *.intercomcdn.com *.intercom.io *.intercomassets.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data:; frame-src *.descript.com *.doubleclick.net *.hubspot.com *.vimeo.com *.hsforms.net *.hsforms.com *.google.com calendly.com *.calendly.com; connect-src 'self' https://hubspot-forms-static-embed.s3.amazonaws.com https://stats.g.doubleclick.net *.hsforms.net *.hsforms.com wss://nexus-websocket-a.intercom.io *.intercomcdn.com *.intercom.io https://www.google-analytics.com https://*.googleapis.com *.google.com https://*.gstatic.com https://*.greenhouse.io data: blob:; font-src *.intercomcdn.com *.hsforms.net *.hsforms.com *.intercom.io *.intercomassets.com https://fonts.gstatic.com https://fonts.googleapis.com; style-src 'self' *.hsforms.net *.hsforms.com https://fonts.googleapis.com 'unsafe-inline'; worker-src blob:; media-src 'self';