Content-Security-Policy: default-src 'none'; script-src 'self' https://js-ap1.hs-scripts.com https://js-ap1.hs-analytics.net https://js-ap1.hsadspixel.net https://js-ap1.hs-banner.com https://js-ap1.usemessages.com https://js-ap1.hscollectedforms.net https://js-ap1.hsforms.net https://www.googletagmanager.com https://ddwl4m2hdecbv.cloudfront.net https://*.getwarmly.com; style-src 'self' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https://track-ap1.hubspot.com https://*.hubspot.com https://*.google-analytics.com https://*.getwarmly.com; connect-src https://docs.google.com https://api-ap1.hsforms.com https://forms-ap1.hscollectedforms.net https://track-ap1.hubspot.com https://*.hubspot.com https://*.hubapi.com https://ipapi.co https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.execute-api.us-west-2.amazonaws.com https://app.rb2b.com https://pro.ip-api.com https://*.getwarmly.com https://warm-opps-production.hasura.app https://app.warmly.ai https://*.ingest.sentry.io https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://warm-opportunities-production.firebaseapp.com; base-uri 'none'; form-action 'self' https://docs.google.com; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests; frame-src https://*.getwarmly.com https://warm-opportunities-production.firebaseapp.com