Content-Security-Policy: default-src 'self' ; script-src 'self' https: 'unsafe-eval' blob: 'unsafe-inline'; img-src 'self' https: data:; frame-src *; connect-src 'self' https://*.maze.co https://*.pndsn.com https://*.kustomerapp.com https://browser-intake-us5-datadoghq.com https://*.googleadservices.com https://*.googleapis.com *.google.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.riskified.com https://*.adyen.com https://*.spreedly.com https://api.quicket.io data: blob:; font-src 'self' https://*.hopper.com https://*.vtrip.co.jp https://cdn.kustomerapp.com https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://*.hopper.com https://*.vtrip.co.jp https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com; worker-src blob:;