Content-Security-Policy: default-src https: data:; frame-ancestors 'self' pearlpro.app *.pearlpro.app https://pearlscore.com https://*.pearlscore.com; script-src https: 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com; style-src https: 'unsafe-inline' https://*.hotjar.com; object-src https:; img-src https: data: https://*.hotjar.com; font-src https: data: https://*.hotjar.com; base-uri 'self'; connect-src https: https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com;