Content-Security-Policy: default-src 'self' https://*.acornfinance.com https://*.your.acornfinance.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleoptimize.com https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ https://widget.trustpilot.com https://maps.googleapis.com https://js.intercomcdn.com https://www.googletagmanager.com https://*.google-analytics.com https://google-analytics.com https://www.googleanalytics.com https://maxcdn.bootstrapcdn.com https://widget.intercom.io https://js.intercomcdn.com https://*.hotjar.com https://*.hotjar.io https://ajax.googleapis.com https://*.acornfinance.com https://*.your.acornfinance.com https://connect.facebook.net https://cdn-sandbox.ca-dev.co https://*.chargeafter.com https://h.online-metrix.net https://h64.online-metrix.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleoptimize.com https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ https://widget.trustpilot.com https://maps.googleapis.com https://js.intercomcdn.com https://www.googletagmanager.com https://*.google-analytics.com https://google-analytics.com https://www.googleanalytics.com https://maxcdn.bootstrapcdn.com https://widget.intercom.io https://js.intercomcdn.com https://*.hotjar.com https://*.hotjar.io https://ajax.googleapis.com https://*.acornfinance.com https://*.your.acornfinance.com https://connect.facebook.net https://cdn-sandbox.ca-dev.co https://*.chargeafter.com https://h.online-metrix.net https://h64.online-metrix.net; connect-src 'self' 'unsafe-inline' https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.analytics.google.com https://analytics.google.com https://o489149.ingest.sentry.io https://api.ipify.org wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://*.your.acornfinance.com https://*.acornfinance.com https://*.api.acornfinance.com https://api.acornfinance.com https://*.google-analytics.com https://google-analytics.com https://stats.g.doubleclick.net https://www.google.co.in https://*.acornfinance.dev https://apilayer.net/api/validate https://maps.googleapis.com https://places.googleapis.com https://api-sandbox.ca-dev.co https://cdn-sandbox.ca-dev.co https://*.chargeafter.com https://logging-proxy-ca-photo42-1kzqwpok.uc.gateway.dev https://h.online-metrix.net https://www.google.com https://h64.online-metrix.net https://www.facebook.com https://widget.trustpilot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://widget.intercom.io; img-src data: https://*.acornfinance.com localhost:* https://www.google.co.in/ads/ https://*.google-analytics.com https://google-analytics.com https://www.google.com https://*.pressablecdn.com https://*.smushcdn.com https://www.googletagmanager.com https://www.facebook.com https://optimize.google.com https://connect.facebook.net https://script.hotjar.com https://*.acornfinance.dev https://your.acornfinance.com https://*.your.acornfinance.com https://downloads.intercomcdn.com https://static.intercomassets.com https://s3.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://js.intercomcdn.com/ https://messenger-apps.intercom.io/ https://analytics.google.com https://h.online-metrix.net https://images.evenfinancial.com https://h64.online-metrix.net https://*.d.aa.online-metrix.net https://i.imgur.com https://cdn.prod.website-files.com https://stats.g.doubleclick.net; font-src data: 'self' https://widget.trustpilot.com https://fonts.gstatic.com https://widget.intercom.io https://js.intercomcdn.com https://*.hotjar.com https://*.hotjar.io https://fonts.gstatic.com https://your.acornfinance.com https://*.your.acornfinance.com https://fonts.intercomcdn.com; frame-src 'self' https://widget.trustpilot.com https://*.hotjar.com https://*.hotjar.io https://www.acornfinance.com https://qa.acornfinance.com https://qa1.acornfinance.com https://uat.acornfinance.com https://your.acornfinance.com https://qa.your.acornfinance.com https://uat.your.acornfinance.com https://googletagmanager.com https://accounts.google.com https://www.google.com https://optimize.google.com https://*.acornfinance.com https://*.acornfinance.dev https://pods-2-0-booking-flow.stackblitz.io https://*.booking.pods.com https://booking.pods.com https://www.pods.com https://*.pods.com https://*.mypods.com https://intercom-sheets.com/ https://pm-sandbox.ca-dev.co https://pm-citi-sandbox.ca-dev.co https://*.chargeafter.com https://h.online-metrix.net https://h64.online-metrix.net https://devmy.unitedvanlines.com https://stgmy.unitedvanlines.com https://my.unitiedvanlines.com https://devmy.mayflower.com https://stgmy.mayflower.com https://my.mayflower.com; frame-ancestors 'self' https://*.acornfinance.com https://*.acornfinance.dev *.studio-shed.com https://your.acornfinance.com https://*.your.acornfinance.com https://history-routing.your.acornfinance.com https://pods-2-0-booking-flow.stackblitz.io https://*.booking.pods.com https://booking.pods.com https://www.pods.com https://*.pods.com https://*.mypods.com https://devmy.unitedvanlines.com https://stgmy.unitedvanlines.com https://my.unitiedvanlines.com https://devmy.mayflower.com https://stgmy.mayflower.com https://my.mayflower.com; media-src 'self' https://www.acornfinance.com https://*.your.acornfinance.com https://your.acornfinance.com https://api.ipify.org https://js.intercomcdn.com https://*.acornfinance.dev https://your.acornfinance.com https://*.your.acornfinance.com; object-src https://*.acornfinance.com https://*.your.acornfinance.com https://your.acornfinance.com https://api.ipify.org; report-uri https://o489149.ingest.sentry.io/api/6020992/security/?sentry_key=83a74949b04e41a4b048d9d548491490; upgrade-insecure-requests; base-uri 'self'; form-action 'self'; child-src 'self'; worker-src 'self' https://*.your.acornfinance.com; manifest-src 'self';