Content-Security-Policy: img-src 'self' data: *.cookielaw.org *.6sc.co *.google.com *.linkedin.com *.reddit.com *.hubspot.com *.facebook.com *.sanity.io *.fontawesome.com *.hsforms.com *.wistia.com *.mutinyhq.io https://*.mutinycdn.com https://*.doubleclick.net https://*.googletagmanager.com https://c.clarity.ms https://*.bing.com https://*.greencolumnhealth.com https://*.getdbt.com https://impartner.blob.core.windows.net *.githubusercontent.com https://*.optimizely.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://cdn.jsdelivr.net https://*.googleapis.com https://packages.prmcdn.io https://*.optimizely.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.hs-scripts.com js.hsforms.net *.6sc.co blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://cloud.getdbt.com https://*.cloud.getdbt.com https://*.dbt.com https://www.facebook.com; frame-ancestors 'self' https://*.youtube.com https://*.wistia.com *.getdbt.com *.vercel.app http://localhost:3000 http://localhost:3333;