Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.bing.com https://*.amplitude.com https://*.hotjar.com https://*.sentry.io https://*.privacy-center.org https://*.launchdarkly.com; style-src 'self' 'unsafe-inline' https://*.hotjar.com https://fonts.googleapis.com https://*.gstatic.com; img-src * data: blob:; frame-src 'self' https://*.googletagmanager.com; connect-src 'self' https: wss: *.packitos.com; media-src 'self' data:; font-src 'self' data: *.packitos.com https://*.packlink.com https://*.hotjar.com https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'none'; report-uri https://o90715.ingest.us.sentry.io/api/5675883/security/?sentry_key=a06b36e8665147f8a1ec3e1f84a15483;