Content-Security-Policy: default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' https://assets.customer.io/assets/track.js https://cdn.ywxi.net/js/1.js https://edge.fullstory.com/s/fs.js https://fast.appcues.com/generic/main/4.59.5/appcues.main.02bba1c33dcfc33444185bfc7dd6d89a558577e6.js https://ga.clearbit.com/v1/ga.js https://js.hs-analytics.net https://js.hs-banner.com/4099946.js https://js.hs-scripts.com/4099946.js https://js.hsleadflows.net/leadflows.js https://js.hubspot.com/web-interactives-embed.js https://js.intercomcdn.com/frame-modern.f319afa5.js https://static.olark.com https://api.olark.com https://nrpc.olark.com https://assets.olark.com https://widget.intercom.io/widget/fzu8u8up https://rs.fullstory.com https://js.intercomcdn.com https://d2yyd1h5u9mauk.cloudfront.net https://checkout.stripe.com https://cdn.pendo.io https://app.pendo.io https://kit.fontawesome.com https://ka-f.fontawesome.com https://ka-p.fontawesome.com https://trackassets.devbettercloud.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fast.appcues.com https://static.olark.com https://ka-f.fontawesome.com https://ka-p.fontawesome.com https://trackassets.devbettercloud.com; object-src 'none'; base-uri 'self'; img-src data: * https://*.stripe.com https://ka-f.fontawesome.com https://ka-p.fontawesome.com; connect-src 'self' https://checkout.stripe.com https://cta-service-cms2.hubspot.com https://faro-collector-prod-us-central-0.grafana.net https://nrpc.olark.com wss://api.appcues.net https://rs.fullstory.com https://edge.fullstory.com https://js.hs-banner.com https://forms.hubspot.com https://s3-us-west-2.amazonaws.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://faro-collector-prod-us-central-0.grafana.net https://cdn.pendo.io https://app.pendo.io https://data.pendo.io https://kit.fontawesome.com https://ka-p.fontawesome.com; font-src 'self' data: https://fonts.gstatic.com https://static.olark.com https://use.typekit.net https://ka-f.fontawesome.com https://ka-p.fontawesome.com; frame-src 'self' https://checkout.stripe.com https://static.olark.com; manifest-src 'self'; media-src 'self' https://static.olark.com; worker-src 'none'; block-all-mixed-content