Content-Security-Policy: default-src 'self' 'strict-dynamic' https://*.liadm.com; base-uri 'none'; connect-src 'self' 'strict-dynamic' https://www.google-analytics.com https://heapanalytics.com https://b.trueanthem.com https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.execute-api.us-west-2.amazonaws.com https://a.usbrowserspeed.com; font-src 'self' data: fonts.gstatic.com https://heapanalytics.com; frame-ancestors 'self'; frame-src 'self' widgets.jobscore.com www.google.com www.googletagmanager.com www.youtube.com https://trueanthem.lpages.co https://app.termly.io https://keap.page; form-action 'self'; img-src 'self' data: www.googletagmanager.com secure.gravatar.com https://heapanalytics.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google.com https://www.googletagmanager.com https://www.gstatic.com https://cdnjs.cloudflare.com https://embed.lpcontent.net *.trueanthem.com https://cdn.heapanalytics.com https://heapanalytics.com https://app.termly.io https://tru.am https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ https://b-code.liadm.com/lc2.js https://rp.liadm.com idx.liadm.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com https://heapanalytics.com;