Content-Security-Policy: default-src 'self' use.typekit.net www.googletagmanager.com fast.wistia.com *.netlify.app; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com www.googletagmanager.com fonts.googleapis.com *.typekit.net cdn.jsdelivr.net *.cloudflare.com; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.licdn.com *.googleadservices.com code.jquery.com fast.wistia.com fast.wistia.net www.google-analytics.com www.googletagmanager.com *.netlify.app stackpath.bootstrapcdn.com static.cloudflareinsights.com kit.fontawesome.com diffuser-cdn.app-us1.com prism.app-us1.com code.jquery.com cdn.jsdelivr.net ajax.googleapis.com; connect-src 'self' cdn.jsdelivr.net *.google.com *.googleadservices.com *.linkedin.com *.directus.app *.litix.io distillery.wistia.com embed-fastly.wistia.com pipedream.wistia.com www.google-analytics.com ka-f.fontawesome.com *.algolianet.com *.algolia.net; img-src 'self' blob: data: *.googletagmanager.com *.wistia.com *.doubleclick.net *.linkedin.com www.google-analytics.com *.directus.app *.netlify.app; font-src 'self' data: use.typekit.net fonts.gstatic.com ka-f.fontawesome.com maxcdn.bootstrapcdn.com; frame-src 'self' www.googletagmanager.com *.jotform.com *.doubleclick.net fast.wistia.net www.google.com *.youtube.com app.netlify.com; media-src 'self' blob:; object-src 'none'; worker-src blob:; base-uri 'self'; child-src blob: ;