Content-Security-Policy: base-uri 'self'; default-src 'none'; script-src 'nonce-4MufJ34AKhPDRYCx6r4yGWTp4/H4No7uz5vCfcPfII26+ZFuCCRPT8pQmhOCJjC/' 'self' 'unsafe-eval' *.prmcdn.io *.blob.core.windows.net 'strict-dynamic' 'unsafe-inline' *.googletagmanager.com *.impartner.io *.twimg.com *.twitter.com *.google-analytics.com *.usercentrics.eu *.hcaptcha.com; style-src 'self' 'unsafe-inline' *.prmcdn.io *.blob.core.windows.net *.cloudfront.net *.twimg.com *.twitter.com fonts.googleapis.com *.impartner.io ckeditor.com *.hcaptcha.com; img-src 'self' data: blob: *.prmcdn.io *.blob.core.windows.net *.licdn.com *.cloudfront.net *.appspot.com *.amazonaws.com *.medallia.com *.teamwalnut.com *.impartner.live *.google-analytics.com *.twimg.com *.google.com *.twitter.com *.youtube.com *.ytimg.com *.usercentrics.eu *.bugcrowd.com *.softiron.com *.impartner.io; frame-src 'self' *.prmcdn.io *.blob.core.windows.net blob: *.medallia.com *.teamwalnut.com *.impartner.live *.googletagmanager.com *.impartner.org *.twitter.com *.twimg.com *.google.com www.youtube.com player.vimeo.com *.wistia.com scribehow.com *.scribehow.com *.website-files.com *.bugcrowd.com *.softiron.com *.impartner.io *.partner-experience.io *.hcaptcha.com *.trolley.com *.labra.io; connect-src 'self' https: wss: api.locize.app t04-signlr-p-sgnlr-dq6aahcd2fet1.service.signalr.net *.google-analytics.com t.co *.twitter.com *.twimg.com *.impartner.io *.partner-experience.io *.hcaptcha.com; font-src 'self' data: *.prmcdn.io *.blob.core.windows.net *.clickdesk.com fonts.gstatic.com *.impartner.io; child-src 'self' *.prmcdn.io *.blob.core.windows.net blob: *.medallia.com *.teamwalnut.com *.impartner.live *.googletagmanager.com *.impartner.org *.twitter.com *.twimg.com *.google.com www.youtube.com player.vimeo.com *.wistia.com scribehow.com *.scribehow.com *.website-files.com *.bugcrowd.com *.softiron.com *.impartner.io *.partner-experience.io *.hcaptcha.com *.trolley.com *.labra.io; form-action 'self' *.twitter.com; media-src 'self' *.prmcdn.io *.blob.core.windows.net *.twimg.com *.impartner.io *.teamwalnut.com *.impartner.live *.google.com; manifest-src 'self';frame-ancestors 'self' *.partner-experience.com;