Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://www.google.com https://*.tailorhq.ai https://dev.tailorhq.ai:4448 https://*.factors.ai https://*.calendly.com https://cdn.gpteng.co https://tailor-enrichment.vercel.app https://*.hotjar.com https://*.loom.com https://*.hsforms.net https://*.hs-scripts.com https://js.hs-analytics.net https://js-na2.hs-analytics.net https://js-na2.hs-banner.com https://js-na2.hscollectedforms.net https://static.hsappstatic.net https://static.hsappcontent.net https://*.linkedin.com https://*.crazyegg.com https://api2.amplitude.com https://regionconfig.amplitude.com https://cdn.amplitude.com https://sr-client-cfg.amplitude.com https://*.cookiebot.com https://connect.facebook.net; worker-src 'self' blob:; child-src 'self' blob:; style-src 'self' 'unsafe-inline' https://*.calendly.com https://fonts.googleapis.com https://*.linkedin.com; img-src 'self' data: https: blob: https://*.crazyegg.com https://*.hotjar.com https://*.hotjar.io https://*.loom.com https://*.linkedin.com https://*.lovable.dev https://*.lovable.app; font-src 'self' https: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://www.google.com https://*.factors.ai https://tailor-enrichment.vercel.app https://*.tailorhq.ai https://dev.tailorhq.ai:4443 https://analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://*.loom.com wss://*.loom.com https://*.hsforms.com https://*.hsforms.net https://api.hsforms.com https://forms.hscollectedforms.net https://forms-na2.hscollectedforms.net https://*.hscollectedforms.net https://track.hubspot.com https://api.hubspot.com https://js.hs-analytics.net https://js-na2.hs-analytics.net https://hubspot-forms-static-embed-na2.s3.amazonaws.com https://*.linkedin.com https://*.crazyegg.com https://*.lovable.dev https://*.lovable.app https://*.s3.amazonaws.com https://s3.amazonaws.com https://api2.amplitude.com https://regionconfig.amplitude.com https://cdn.amplitude.com https://sr-client-cfg.amplitude.com https://*.cookiebot.com https://*.facebook.com; frame-src 'self' https://*.googletagmanager.com https://www.google.com https://*.googleadservices.com https://*.doubleclick.net https://calendly.com https://*.calendly.com https://*.hotjar.com https://*.loom.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://meetings.hubspot.com https://*.linkedin.com https://*.cookiebot.com https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self';