Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdn-website.com *.multiscreensite.com https://d32hwlnfiv2gyn.cloudfront.net *.googletagmanager.com *.google-analytics.com *.googleapis.com https://www.google.com/recaptcha/ *.klaviyo.com *.hotjar.com; style-src 'self' 'unsafe-inline' *.cdn-website.com https://d32hwlnfiv2gyn.cloudfront.net *.googleapis.com *.klaviyo.com; img-src 'self' data: *.cdn-website.com https://d32hwlnfiv2gyn.cloudfront.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.hotjar.com; media-src 'self' *.cdn-website.com; font-src 'self' data: *.cdn-website.com *.multiscreensite.com *.gstatic.com *.hotjar.com https://static-cdn-lambda.dwhitelabel.com https://static-cdn.dwhitelabel.com; connect-src 'self' *.cdn-website.com *.multiscreensite.com *.gstatic.com *.google-analytics.com *.analytics.google.com *.googleapis.com *.klaviyo.com https://api-js.datadome.co/js/ *.hotjar.com wss://*.hotjar.com *.hotjar.io; worker-src 'self' blob:; frame-src 'self' *.hotjar.com; frame-ancestors 'self'; report-uri https://medule.report-uri.com/r/d/csp/reportOnly