Content-Security-Policy: frame-ancestors 'none'; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://*.politeriver-6451f2ef.eastus2.azurecontainerapps.io https://*.azurecontainerapps.io https://player.mux.com https://usemirage.io https://*.usemirage.io https://calendly.com https://*.calendly.com

Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://eleven-public-cdn.elevenlabs.io https://bzrcdn.openai.com https://static.ads-twitter.com https://www.redditstatic.com https://analytics.tiktok.com https://www.clarity.ms https://assets.calendly.com; connect-src 'self' https://api.x.ai wss://api.x.ai https://api.elevenlabs.io wss://api.elevenlabs.io https://*.elevenlabs.io wss://*.elevenlabs.io https://livekit.rtc.elevenlabs.io wss://livekit.rtc.elevenlabs.io wss://*.livekit.cloud https://*.livekit.cloud https://api.stripe.com https://*.auth0.com https://login.tryomnigpt.com https://connect.facebook.net https://www.facebook.com https://*.sentry.io https://*.ingest.sentry.io https://s3.us-west-000.backblazeb2.com https://*.backblazeb2.com https://*.azurecontainerapps.io https://stream.mux.com https://inferred.litix.io https://image.mux.com https://formspree.io https://www.googletagmanager.com https://analytics.twitter.com https://analytics.x.com https://t.co https://ads-twitter.com https://ads-api.twitter.com https://ads-api.x.com https://aria-launch-backend-production.up.railway.app https://*.reddit.com https://analytics.tiktok.com https://*.clarity.ms; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https://stream.mux.com https://*.mux.com https://image.mux.com https://player.mux.com; frame-src 'self' https://js.stripe.com https://*.auth0.com https://www.facebook.com https://*.azurecontainerapps.io https://player.mux.com https://usemirage.io https://*.usemirage.io https://calendly.com https://*.calendly.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'