Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-XYZ123' 'strict-dynamic' www.google-analytics.com app-sji.marketo.com munchkin.marketo.net cdn.optimizely.com s.adroll.com a.adroll.com dnn506yrbagrg.cloudfront.net cdnjs.cloudflare.com www.ooma.com; style-src 'self' 'nonce-XYZ123' www.ooma.com cdnjs.cloudflare.com app-sji.marketo.com; img-src 'self' www.ooma.com oomaindia.com pixel.fetchback.com www.googletagmanager.com x.adroll.com d.adroll.com; font-src 'self' cdnjs.cloudflare.com; connect-src 'self' www.google-analytics.com analytics.google.com www.googletagmanager.com app-sji.marketo.com munchkin.marketo.net 161-lic-035.mktoresp.com; media-src 'self' www.ooma.com; frame-src 'self' pixel.fetchback.com prodca.click4talk.com app-sji.marketo.com; object-src 'none'; base-uri 'self'; form-action 'self' go.ooma.com; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-report.php