Content-Security-Policy: default-src 'self';         connect-src 'self' wss://api.graphy.app api.graphy.app api.segment.io cdn.segment.com *.fullstory.com *.ingest.sentry.io rum.browser-intake-datadoghq.eu plausible.io *.capture.dev www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com;         report-uri https://o4505108638597120.ingest.us.sentry.io/api/4506310392217600/security/?sentry_key=f284331fdf53e18d5c753e65518e8224;         report-to https://o4505108638597120.ingest.us.sentry.io/api/4506310392217600/security/?sentry_key=f284331fdf53e18d5c753e65518e8224;         frame-ancestors 'none';         frame-src 'self' buy.paddle.com www.loom.com *.capture.dev https://*.googletagmanager.com docs.google.com;         font-src 'self' assets.graphy.app *.capture.dev fonts.gstatic.com;         img-src 'self' blob: https: data: www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com;         manifest-src 'self';         media-src 'self';         object-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdn.segment.com assets.graphy.app *.fullstory.com datadoghq-browser-agent.com plausible.io cdn.paddle.com *.capture.dev https://*.googletagmanager.com apis.google.com accounts.google.com;         style-src 'self' 'unsafe-inline' assets.graphy.app cdn.paddle.com fonts.googleapis.com