Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' licdn.com snap.licdn.com cdn.wisepops.com loader.wisepops.com app.getwisp.co licdn.com snap.licdn.com wisepops.net cdn.wisepops.net cdn.jsdelivr.net www.googletagmanager.com google.com www.googleadservices.com td.doubleclick.net googleads.g.doubleclick.net cdn.usefathom.com js.refiner.io googleads.g.doubleclick.net js.hsforms.net static.hsappstatic.net; connect-src google.com *.google-analytics.com www.google.com api.refiner.io px.ads.linkedin.com activity.wisepops.com popup.wisepops.com tracking.wisepops.com app.getwisp.co wisepops.net stats.g.doubleclick.net cdn.usefathom.com forms.hsforms.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; img-src * 'self' data: https:; font-src 'self' fonts.gstatic.com data:; frame-src 'self' js.refiner.io survey.refiner.io js.hsforms.net td.doubleclick.net bid.g.doubleclick.net www.googletagmanager.com googletagmanager.com; frame-ancestors 'self' js.refiner.io; form-action 'self' forms.hsforms.com; manifest-src 'self'