Content-Security-Policy: child-src 'self' blob: https://*.qualified.com; media-src data: mediastream: https://*.qualified.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://freshbooks.1clickaccounts.com https://*.clarity.ms https://api.s10h.io/pixel.js https://www.datadoghq-browser-agent.com https://*.freshenv.com https://*.freshbooks.com https://*.channelboost.com https://*.google.com https://*.googletagmanager.com https://*.online-metrix.net https://*.osano.com https://*.qualified.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://bat.bing.com https://campaign.fbot.me https://cdn.evgnet.com https://cdn.pushcrew.com https://connect.facebook.net https://ct.capterra.com https://ct.pinterest.com https://edge.fullstory.com https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://pagead2.googlesyndication.com https://rs.fullstory.com https://s.pinimg.com https://snap.licdn.com https://ssl.google-analytics.com https://static.ada.support https://static.fbot.me https://storage.googleapis.com/calculator-assets/ https://tagmanager.google.com https://tracking.g2crowd.com https://www.facebook.com https://www.getapp.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.gstatic.com https://www.redditstatic.com https://www.youtube.com https://analytics.ahrefs.com 'report-sample'; style-src 'self' 'unsafe-inline' blob: https://freshbooks.1clickaccounts.com https://*.channelboost.com https://*.osano.com https://*.qualified.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://cdn.pushcrew.com https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com  https://www.gstatic.com 'report-sample'; img-src 'self' blob: data: https:; frame-src 'self' *.freshbooks.com blob: https://airtable.com https://*.g.doubleclick.net https://*.online-metrix.net https://*.osano.com https://*.qualified.com https://*.visualwebsiteoptimizer.com https://*.fls.doubleclick.net https://app.vwo.com https://ct.pinterest.com https://freshbooksbot.maple.ada.support/ https://go.pardot.com https://td.doubleclick.net https://widget.fbot.me https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self' *.freshbooks.com; object-src 'none'; base-uri 'self'; form-action 'self' https://dev.visualwebsiteoptimizer.com https://www.facebook.com/tr/; manifest-src 'self' https://accounts.google.com; worker-src 'self' blob: data: https://*.osano.com; font-src 'self' data: https://*.channelboost.com https://fonts.gstatic.com https://js.qualified.com; connect-src 'self' https: blob: wss://*.qualified.com; upgrade-insecure-requests; report-to csp-report