Content-Security-Policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors onestream.live app.onestream.live 'self'; worker-src blob: https://onestream.live/ http://onestream.live/; script-src 'self' 'unsafe-inline' 'unsafe-eval' consent.cookiefirst.com connect.onestream.live js.sentry-cdn.com cdn.firstpromoter.com www.googletagmanager.com client.crisp.chat www.google.com connect.facebook.net googleads.g.doubleclick.net www.gstatic.com www.youtube.com code.jquery.com cdnjs.cloudflare.com www.clarity.ms analytics.tiktok.com www.mczbf.com snap.licdn.com bat.bing.com consent.cookiebot.com consentcdn.cookiebot.com fast.wistia.com unpkg.com cdn.jsdelivr.net utt.impactcdn.com;