Content-Security-Policy: frame-src https://modal-cdn.com/sandbox/shim.html data: embed.fillout.com portal.usepylon.com player.vimeo.com www.youtube.com platform.twitter.com; script-src 'self' www.googletagmanager.com cdn.segment.com cdn.getkoala.com platform.twitter.com https://snap.licdn.com/li.lms-analytics/ https://www.redditstatic.com/ https://modal-cdn.com/js-bundles/ 'wasm-unsafe-eval' 'nonce-EZZoACaBz4BHq4yy30yqQA=='; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net; form-action 'none'; frame-ancestors 'none'