Content-Security-Policy: base-uri 'self'; default-src 'self' blob: https://*.acornfinance.com https://*.acornfinance.dev; manifest-src 'self'; upgrade-insecure-requests; worker-src 'self' blob:; child-src 'self' https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; form-action 'self' https://your.acornfinance.com https://*.your.acornfinance.com https://mg.blogvault.net https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://forms.hsforms.com https://www.facebook.com; connect-src 'self' 'unsafe-inline' https://*.hubspot.com https://content.hotjar.io https://dev.visualwebsiteoptimizer.com https://sst.acornfinance.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://websitedemos.net http://*.hotjar.com:* https://*.acornfinance.com https://*.acornfinance.dev https://*.analytics.google.com https://*.api.acornfinance.com https://*.google-analytics.com https://*.hotjar.com:* https://*.hotjar.io https://adservice.google.com https://analytics.google.com https://api-iam.intercom.io https://api.acornfinance.com https://api.hubapi.com https://api.ipify.org https://cdn.linkedin.oribi.io https://exceptions.hubspot.com https://forms.hsforms.com https://fs.acornfinance.com https://google-analytics.com https://hubspot-forms-static-embed.s3.amazonaws.com https://in.hotjar.com https://maps.googleapis.com https://my.yoast.com https://o489149.ingest.sentry.io https://p.adsymptotic.com https://px.ads.linkedin.com https://region1.analytics.google.com https://snap.licdn.com https://stats.g.doubleclick.net https://surveystats.hotjar.io https://vc.hotjar.io:* https://www.facebook.com https://www.google-analytics.com https://www.google.co.in wss://*.hotjar.com wss://nexus-websocket-a.intercom.io; font-src 'self' data: https://js.intercomcdn.com https://fonts.intercomcdn.com https://*.acornfinance.com https://*.acornfinance.dev http://script.hotjar.com https://*.hotjar.com https://*.hotjar.io https://*.your.acornfinance.com https://assets.quadpay.com https://cdn.linkedin.oribi.io https://cdn.loom.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.intercomcdn.com https://js.intercomcdn.com https://p.adsymptotic.com https://px.ads.linkedin.com https://script.hotjar.com https://snap.licdn.com https://widget.intercom.io https://widget.trustpilot.com https://your.acornfinance.com; frame-ancestors 'self' https://*.acornfinance.com https://*.acornfinance.dev https://*.studio-shed.com https://*.your.acornfinance.com https://fs.acornfinance.com https://www.youtube.com https://your.acornfinance.com; frame-src 'self' 'unsafe-inline' data: blob: https://wp.freemius.com https://*.acornfinance.com https://*.acornfinance.dev https://*.hotjar.com https://*.hotjar.io https://accounts.google.com https://app.hubspot.com https://app.lendflow.io https://cdn.linkedin.oribi.io https://forms.hsforms.com https://fs.acornfinance.com https://googletagmanager.com https://iw.lendflow.com https://js.hsadspixel.net https://optimize.google.com https://p.adsymptotic.com https://platform.twitter.com https://play.vidyard.com https://px.ads.linkedin.com https://snap.licdn.com https://static.hsappstatic.net https://uat.acornfinance.com https://vars.hotjar.com https://widget.trustpilot.com https://www.facebook.com https://www.google.com https://www.youtube.com https://youtu.be https://youtube.com; img-src 'self' blob: data: https://*.hsforms.com https://images-static.trustpilot.com https://maps.gstatic.com https://maps.googleapis.com https://dev.visualwebsiteoptimizer.com https://static.hsappstatic.net https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com *.w.org chart.googleapis.com wingify-assets.s3.amazonaws.com https://ps.w.org https://source.unsplash.com https://library.ghostkit.io https://websitedemos.net https://*.ads.linkedin.com https://s.w.org https://*.acornfinance.com https://analytics.google.com http://script.hotjar.com https://*.acornfinance.dev https://*.google-analytics.com https://*.pressablecdn.com https://*.your.acornfinance.com https://cdn.linkedin.oribi.io https://cdn.vidyard.com https://connect.facebook.net https://downloads.intercomcdn.com https://forms-na1.hsforms.com https://forms.hsforms.com https://fs.acornfinance.com https://google-analytics.com https://media.bizj.us https://optimize.google.com https://p.adsymptotic.com https://pixel.wp.com https://play.vidyard.com https://px.ads.linkedin.com https://script.hotjar.com https://secure.gaug.es https://secure.gravatar.com https://snap.licdn.com https://static.intercomassets.com https://stats.g.doubleclick.net https://thetechtribune.com https://track.hubspot.com https://translate.google.com https://www.facebook.com https://www.google-analytics.com https://www.google.ca https://www.google.co.in https://www.google.co.uk https://www.google.com https://www.google.com.au https://www.googletagmanager.com https://www.gstatic.com https://www.nerdwallet.com https://www.primerates.com https://www.prnewswire.com https://www.studio-shed.com https://your.acornfinance.com; media-src 'self' https://js.intercomcdn.com https://*.acornfinance.com https://*.acornfinance.dev https://*.your.acornfinance.com https://api.ipify.org https://js.intercomcdn.com https://www.youtube.com https://your.acornfinance.com; object-src https://*.acornfinance.com https://*.acornfinance.dev https://api.ipify.org https://pr.acornfinance.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://qa.pr.acornfinance.com https://sst.acornfinance.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com http://static.hotjar.com https://*.acornfinance.com https://*.acornfinance.dev https://*.google-analytics.com https://*.hotjar.com https://*.hotjar.io https://ajax.googleapis.com https://app.lendflow.io/ https://cdn.linkedin.oribi.io https://cdnjs.cloudflare.com https://connect.facebook.net https://forms.hsforms.com https://google-analytics.com https://iw.lendflow.com https://js.hs-analytics.net https://js.hs-banner.com/ https://js.hs-scripts.com https://js.hsadspixel.net https://js.hsforms.net https://js.intercomcdn.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://optimize.google.com https://p.adsymptotic.com https://play.vidyard.com https://px.ads.linkedin.com https://script.hotjar.com https://secure.gaug.es https://snap.licdn.com https://static.hotjar.com https://widget.intercom.io https://widget.trustpilot.com https://www.google-analytics.com https://www.googleanalytics.com https://www.googleoptimize.com https://www.googletagmanager.com; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: https://dev.visualwebsiteoptimizer.com https://js.hubspot.com https://sst.acornfinance.com http://script.hotjar.com https://*.acornfinance.com https://*.acornfinance.dev https://*.google-analytics.com https://*.hotjar.com https://*.hotjar.io https://ajax.googleapis.com https://app.lendflow.io https://cdn.linkedin.oribi.io https://cdnjs.cloudflare.com https://connect.facebook.net https://forms.hsforms.com https://gc.kes.v2.scr.kaspersky-labs.com https://gc.kis.v2.scr.kaspersky-labs.com https://google-analytics.com https://iw.lendflow.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hsforms.net https://js.intercomcdn.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://me.kis.v2.scr.kaspersky-labs.com https://optimize.google.com/ https://p.adsymptotic.com https://payest.acornfinance.com https://platform.twitter.com https://play.vidyard.com https://px.ads.linkedin.com https://secure.gaug.es https://secure.gravatar.com https://snap.licdn.com https://static.hotjar.com https://use.fontawesome.com https://widget.intercom.io https://widget.trustpilot.com https://www.google-analytics.com https://www.google.com https://www.googleanalytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.gstatic.com https://yoast.com; style-src 'self' 'unsafe-inline' s3.amazonaws.com https://*.acornfinance.com https://*.acornfinance.dev https://fonts.googleapis.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.acornfinance.com https://*.acornfinance.dev https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://gc.kis.v2.scr.kaspersky-labs.com https://maxcdn.bootstrapcdn.com https://optimize.google.com/ https://widget.intercom.io; report-uri https://o489149.ingest.sentry.io/api/5995675/security/?sentry_key=b011d1ccc0f6456bb41b981294106653;