Content-Security-Policy: script-src 'self' 'unsafe-inline' cdn.mxpnl.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com assets.circle.com maps.googleapis.com netverify.com https://www.gstatic.com; connect-src *