Content-Security-Policy-Report-Only: base-uri 'self'; child-src blob: https: https://canny.io https://*.qualified.com; default-src 'self' https:; font-src 'self' https: data: fonts.gstatic.com https://cdn.mouseflow.com https://*.qualified.com; frame-src 'self' https://*.arpc.gov.au:8090/ https://app.goentri.com/ https://pixel-a.basis.net/ https://gateway.zscalerthree.net/ https://gateway.zscloud.net/ https://m.youtube.com/ https://remove.video/ https://zswpmanager.wip.mmc.com/ https://canny.io https://www.facebook.com/ https://solve-widget.forethought.ai/ https://tpc.googlesyndication.com/ https://*.doubleclick.net/ https://www.googletagmanager.com https://i.liadm.com https://block.opendns.com/ https://app.pendo.io/ https://*.qualified.com https://js.stripe.com https://wpengine.com hemsync.clickagy.com https://v2uploads.zopim.io/; frame-ancestors 'self'; img-src 'self' blob: https: data: https://fksnk.com https://pixel-a.basis.net/ https://t.co https://bat.bing.com https://www.facebook.com https://tpc.googlesyndication.com/ https://ade.googlesyndication.com https://11601526.fls.doubleclick.net/ https://ad.doubleclick.net https://adservice.google.com https://www.google.com https://storage.googleapis.com https://www.googletagmanager.com https://track.hubspot.com https://px.ads.linkedin.com https://block.opendns.com/ https://data.pendo.io https://*.qualified.com https://analytics.twitter.com https://dify.wpengine.com; manifest-src 'self'; media-src 'self' blob: data: https://ssl.gstatic.com https://*.qualified.com https://*.wistia.com/ https://static.zdassets.com; object-src 'self'; style-src 'self' https: report-sample fonts.googleapis.com https://pendo-static-5187080616673280.storage.googleapis.com https://*.qualified.com 'nonce-06d13d0b45334e85a3c8af7192e1fbb7'; script-src 'self' https: data: strict-dynamic report-sample https://bat.bing.com/bat.js https://canny.io/sdk.js https://connect.facebook.net/en_US/fbevents.js https://solve-widget.forethought.ai/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/967467428/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js https://js.hubspot.com/analytics/1692218400000/298401.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://js.hs-banner.com/298401.js https://js.hsadspixel.net/fb.js https://js-na1.hs-scripts.com/298401.js https://js.hsleadflows.net/leadflows.js https://cdn.mouseflow.com/projects/7d4190f3-bc53-4695-8f2d-3a7a567f2a93.js https://js-agent.newrelic.com/ https://js-agent.newrelic.com/async-api.e9f77430-1.237.1.min.js https://data.pendo.io/data/guide.js/68821b92-3f78-4787-6860-c07b70d0dd1a https://cdn.pendo.io/agent/static/68821b92-3f78-4787-6860-c07b70d0dd1a/pendo.js https://pendo-static-5187080616673280.storage.googleapis.com/guide-content/xSNdAVbWTDPdeKlFsToZQ9ND7wY@akoOMl36IUcpbankfcFAy07a_2s/gCctiynEbmkEeE-F8glQthOorao/CVhpc3gPeePcj5PjLbyW2MMhGGc.dom.jsonp https://cdn.rollbar.com/rollbarjs/refs/tags/v2.22.0/rollbar.min.js https://cdn.segment.com/analytics.js/v1/uNr7LygKixxSLg2s0h7NXGgPC5nNW4Dd/analytics.min.js https://cdn.segment.com/next-integrations/integrations/ https://js.stripe.com/v3 https://static.ads-twitter.com/uwt.js js.zi-scripts.com ws.zoominfo.com tags.clickagy.com 'nonce-06d13d0b45334e85a3c8af7192e1fbb7'; worker-src 'self' blob:; connect-src 'self' https: https://bat.bing.com/ https://api.canny.io/api/ https://browser-http-intake.logs.datadoghq.com/v1/input/pubfe23baedd2ea322bebb5ed2020fa2fa1/ https://www.facebook.com/ https://pagead2.googlesyndication.com https://pagead2.googlesyndication.com/ https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://region1.google-analytics.com/ https://www.google.com https://www.googletagmanager.com https://forms.hubspot.com/lead-flows-config/v1/config/json https://cdn.linkedin.oribi.io/partner/2926194/domain/my.wpengine.com/ cdn.mouseflow.com https://n2.mouseflow.com https://bam.nr-data.net/ https://data.pendo.io/ https://*.qualified.com wss://*.qualified.com https://api.rollbar.com/api/ https://cdn.segment.com/v1/projects/uNr7LygKixxSLg2s0h7NXGgPC5nNW4Dd/ https://api.segment.io/ http://*.wistia.com/ https://api.prd.sdp.wpesvc.net/ https://api.production.au.wpesvc.net/ https://api.wpengineapi.com/ https://js.wpengineapi.com/ https://journey-api.wpengine.com https://journey-cdn.wpengine.com aorta.clickagy.com hemsync.clickagy.com wss://widget-mediator.zopim.com/