Content-Security-Policy: default-src 'none'; connect-src 'self' *.akamaihd.net *.akstat.io *.go-mpulse.net *.quantummetric.com *.clearstep.health *.virtualearth.net *.demdex.net *.fontawesome.com *.cvshealth.com *.contentful.com *.cvs.com *.foresee.com *.4seeresults.com *.answerscloud.com *.foreseeresults.com *.kampyle.com *.medallia.com wss://hoover.foresee.com; font-src 'self' *.foresee.com *.cvs.com *.fontawesome.com *.gstatic.com *.kampyle.com *.medallia.com; frame-src *.demdex.net *.youtube.com *.kampyle.com *.medallia.com; img-src 'self' *.cvs.com *.monetate.net *.cvshealth.com *.everesttech.net *.cvscare.com *.demdex.net *.foresee.com *.kampyle.com *.medallia.com  *.ytimg.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cvscare.com *.cvs.com *.monetate.net *.go-mpulse.net *.quantummetric.com *.cloudflare.com *.fontawesome.com *.monetate.net *.tiqcdn.com *.foresee.com *.4seeresults.com *.answerscloud.com *.foreseeresults.com *.appspot.com *.kampyle.com *.medallia.com; style-src 'self' 'unsafe-inline' *.foresee.com *.googleapis.com *.kampyle.com *.medallia.com; worker-src blob:; child-src blob:;