Content-Security-Policy: default-src 'self' https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.youtube-nocookie.com https://*.googlevideo.com https://cdn.sanity.io https://consentcdn.cookiebot.com https://*.bugherd.com ws.pusherapp.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.vimeo.com https://*.youtube.com https://www.youtube.com https://*.googletagmanager.com https://tagmanager.google.com https://browser.sentry-cdn.com https://*.firstup.io https://*.bugherd.com https://js.storylane.io https://ssl.google-analytics.com https://code.jquery.com https://ws.pusherapp.com https://consent.cookiebot.com https://*.pusher.com https://*.marketo.com https://dx.mountain.com https://www.redditstatic.com https://www.clickcease.com https://*.stackadapt.com https://cdn.jsdelivr.net https://snap.licdn.com https://qvdt3feo.com https://px.mountain.com https://*.doubleclick.net https://*.googleadservices.com https://js.zi-scripts.com https://bat.bing.com https://*.hotjar.com https://tracking.g2crowd.com https://munchkin.marketo.net https://consentcdn.cookiebot.com https://*.qualified.com https://js.qualified.com https://*.facebook.com;  style-src 'self' 'unsafe-inline' blob: https://*.vimeo.com *.firstup.io https://*.bugherd.com https://express.theroishop.com https://fonts.googleapis.com https://*.googletagmanager.com https://tagmanager.google.com *.marketo.com https://*.stackadapt.com https://*.qualified.com;  img-src 'self' blob: data: https://cdn.sanity.io https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://*.ytimg.com https://i.ytimg.com https://*.bugherd.com https://imgsct.cookiebot.com https://alb.reddit.com https://bugherd-attachments.s3.amazonaws.com https://d2iiunr5ws5ch1.cloudfront.net *.bugherd.com https://*.linkedin.com https://px.ads.linkedin.com https://ssl.google-analytics.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.qualified.com https://*.google.com;  connect-src 'self' https://*.wistia.com https://*.wistia.net http://*.wistia.com http://*.wistia.net https://*.litix.io https://*.algolia.net https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.google.com https://cdn.sanity.io https://consentcdn.cookiebot.com https://*.bugherd.com https://imgsct.cookiebot.com ws.pusherapp.com https://*.pusher.com wss://*.pusher.com sessions.bugsnag.com https://api.storylane.io ats.comparably.com https://*.hockeystack.com https://*.stackadapt.com https://*.linkedin.com https://px.ads.linkedin.com https://*.reddit.com https://pixel-config.reddit.com https://cdn.jsdelivr.net https://browser.sentry-cdn.com https://*.google-analytics.com https://*.doubleclick.net https://*.zi-scripts.com https://*.zoominfo.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.lever.co https://*.googletagmanager.com https://*.qualified.com wss://*.qualified.com https://*.bing.com https://*.mktoresp.com https://*.marketo.com https://*.mktoweb.com;  frame-src https://fast.wistia.com https://fast.wistia.net https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://express.theroishop.com https://player.simplecast.com https://*.bugherd.com *.marketo.com https://consentcdn.cookiebot.com *.firstup.io https://www.googletagmanager.com https://*.qualified.com;  media-src 'self' blob: data: mediastream: https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://cdn.sanity.io https://*.bugherd.com https://imgsct.cookiebot.com https://bugherd-attachments.s3.amazonaws.com https://d2iiunr5ws5ch1.cloudfront.net https://*.qualified.com;  font-src 'self' data: https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.firstup.io https://*.bugherd.com https://fonts.googleapis.com https://fonts.gstatic.com https://d2iiunr5ws5ch1.cloudfront.net;  worker-src blob: https://*.qualified.com;  child-src blob: https://*.qualified.com;  object-src 'none';  base-uri 'self';  form-action 'self' https://*.marketo.com https://*.mktoweb.com https://*.bugherd.com https://sessions.bugsnag.com https://sockjs.pusher.com https://*.firstup.io;  frame-ancestors 'self' https://www.sanity.io https://*.sanity.studio https://*.vercel.app http://localhost:3333 http://localhost:3000;  upgrade-insecure-requests;