Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; connect-src 'self' 'unsafe-inline' https://rest.ably.io/comet wss://realtime.ably.io https://h8j1k1fk3e.execute-api.us-east-1.amazonaws.com/prod; font-src 'self' data: https://dcqn38zkfmbl3.cloudfront.net https://fonts.gstatic.com; frame-src https://consentcdn.cookiebot.com https://www.youtube.com https://youtube.com; img-src 'self' data: https://ajax.googleapis.com https://storage.googleapis.com https://dcqn38zkfmbl3.cloudfront.net https://dddqjukkk2hop.cloudfront.net https://khms0.googleapis.com https://khms1.googleapis.com https://maps.google.com https://maps.gstatic.com https://shippo-static.s3.amazonaws.com; media-src https://giant.gfycat.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://cdn.ably.io/lib/ably.min-1.2.4.js https://cdn.datatables.net/1.10.13/js/jquery.dataTables.min.js https://cdnjs.cloudflare.com/ajax/libs/toastr.js/latest https://consent.cookiebot.com https://consentcdn.cookiebot.com https://d79i1fxsrar4t.cloudfront.net/sdk/1.4.2/smartystreets-sdk-1.4.2.min.js https://dcqn38zkfmbl3.cloudfront.net/* https://www.echofox.io/widget.js https://echofox.io/widget.js https://echofox.io/widget/frame-modern.production.js ttps://echofox.io/widget/vendor-modern.production.js https://echofox.io/widget/vendor-modern.production.js https://fonts.googleapis.com/ ajax.cloudflare.com static.cloudflareinsights.com; style-src 'self' https://echofox.io/widget/frame-modern.production.css https://www.echofox.io/widget/frame-modern.production.css https://fonts.googleapis.com 'unsafe-inline'