Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com *.hubapi.com *.hubspot.com *.hsforms.net *.hsforms.com *.wistia.com *.wistia.net *.cookieyes.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.liadm.com *.reo.dev *.hu-manity.co *.greenhouse.io *.cdn.greenhouse.io *.zi-scripts.com *.sayprimer.com *.bat.bing.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.wistia.com *.wistia.net *.greenhouse.io; img-src 'self' data: sayari.com *.gravatar.com *.hubspot.com *.googletagmanager.com *.google-analytics.com *.wpenginepowered.com *.wistia.com *.wistia.net *.akamaihd.net *.greenhouse.io *.gstatic.com; font-src 'self' fonts.gstatic.com; connect-src 'self' www.google.com *.hubapi.com *.hubspot.com *.hsforms.net *.hsforms.com *.wistia.com *.wistia.net *.google-analytics.com *.cookieyes.com *.liadm.com *.reo.dev *.hu-manity.co *.greenhouse.io *.spl.greenhouse.io; frame-src 'self' www.google.com recaptcha.google.com *.hubspot.com *.hsforms.net *.hsforms.com *.wistia.com *.wistia.net *.greenhouse.io job-boards.greenhouse.io; media-src 'self' blob: *.wistia.com *.wistia.net *.akamaihd.net; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.sayari.com https://*.mindtickle.com;