Content-Security-Policy: default-src 'unsafe-inline' data: blob: 'self' https://*.usepylon.com wss://*.usepylon.com https://*.cloudfront.net https://*.amazonaws.com https://*.awsapprunner.com wss://api.liveblocks.io https://api.liveblocks.io https://*.auth0.com/ https://*.sentry.io/ https://js-agent.newrelic.com *.nr-data.net wss://ws-us3.pusher.com https://sockjs-us3.pusher.com https://*.sendsafely.com https://connect.facebook.net wss://rtc.telnyx.com; img-src data: * data: blob: 'self'; frame-src 'self' *