Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://pub-storage.s3.us-east-1.amazonaws.com/ *.system1.com *.typekit.net *.formstack.com *.googletagmanager.com *.google.com *.gstatic.com *.google-analytics.com s.flocdn.com mapquest.com *.mapquest.ca *.youtube.com s3.amazonaws.com stats.g.doubleclick.net cdn.cookielaw.org *.onetrust.com jobs.lever.co *.soflopxl.com data:; img-src *;