Content-Security-Policy: 
    default-src 'self';
    base-uri 'self';
    object-src 'none';
    media-src 'self' https://*.amazonaws.com;
    frame-ancestors 'self' https://*.auth0.com;
    frame-src  https://*.auth0.com  https://app.pendo.io;
    img-src 'self' data: blob: https: https://*.amazonaws.com  https://cdn.pendo.io   https://app.pendo.io
              https://pendo-static-5643527523794944.storage.googleapis.com;
    font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com  
	          https://netdna.bootstrapcdn.com  https://cdn.pendo.io;
    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://netdna.bootstrapcdn.com 
	           https://maxcdn.bootstrapcdn.com  https://cdn.pendo.io
               https://pendo-static-5643527523794944.storage.googleapis.com https://app.pendo.io;
    script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.mxpnl.com https://cdn.pendo.io 
	            https://*.pendo.io https://cdnjs.cloudflare.com
                https://www.googletagmanager.com https://static.zdassets.com https://apis.google.com https://cdn.jsdelivr.net/ https://unpkg.com
                https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://*.amazonaws.com https://cdn.mxpnl.com
                https://cdn.pendo.io https://*.pendo.io https://pendo-static-5643527523794944.storage.googleapis.com https://hellospoke.zendesk.com https://*.zendesk.com https://pod-19-sunco-ws.zendesk.com;
    connect-src 'self' https://*.hellospoke.com
                 https://api.mixpanel.com https://decide.mixpanel.com https://*.mixpanel.com
                 https://data.pendo.io https://*.pendo.io wss://*.pendo.io  
                 https://hellospoke.zendesk.com https://pod-19-sunco-ws.zendesk.com https://*.zendesk.com https://ekr.zdassets.com  https://www.google-analytics.com https://*.auth0.com
                 https://vc.hotjar.io https://*.hotjar.com https://*.hotjar.io https://*.hellospoke.com https://*.hellospoke.com:4242
                 wss://*.hellospoke.com:4242 wss://*.hellospoke.com https://*.amazonaws.com;
    worker-src 'self' blob:;
    upgrade-insecure-requests;