Content-Security-Policy: default-src 'self'; script-src 'self' https: 'strict-dynamic' 'nonce-ok0xh56X3XQlYJc5pB+irA=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https://cdn.segment.com https://api.segment.io https://static.hotjar.com https://content.hotjar.io https://metrics.hotjar.io wss://ws.hotjar.com https://vc.hotjar.io https://api.hsforms.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://api.segment.com https://bat.bing.com https://bat.bing.net https://region1.analytics.google.com https://*.clarity.ms https://ws.zoominfo.com https://www.facebook.com https://js.hs-banner.com https://api.hubspot.com https://cta-service-cms2.hubspot.com https://px.ads.linkedin.com https://www.google.com https://www.googleadservices.com https://api-js.mixpanel.com https://api.hubapi.com https://perf-na1.hsforms.com https://static.hsappstatic.net https://*.nyc3.digitaloceanspaces.com; img-src 'self' data: https:; font-src 'self' https: data:; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; report-uri https://o274689.ingest.sentry.io/api/6641575/security/?sentry_key=aad55209f3144b4f8e82238ffd3d1bdf