Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: data: https://*.wealthsimple.com https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org https://*.fullstory.com https://*.decagon.ai https://*.google.ca https://*.google.com https://*.google.co.uk https://*.googleadservices.com https://*.jitsu.com https://*.maze.co https://*.reddit.com https://*.redditstatic.com https://*.sentry.io https://*.ingest.sentry.io https://*.snapchat.com https://*.tiktokw.us https://*.vaultdcr.com https://analytics.tiktok.com https://analytics.twitter.com https://t.co https://translate-pa.googleapis.com https://www.google-analytics.com https://insight.adsrvr.org https://ingesteer.services-prod.nsvcs.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.facebook.com https://wealthsimple.sjv.io; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/; img-src 'self' blob: data: https://images.ctfassets.net/v44fuld738we/ https://www.facebook.com https://www.google.ca https://www.google.com https://www.google.co.uk https://www.googletagmanager.com https://alb.reddit.com https://analytics.twitter.com https://tr.snapchat.com https://t.co https://i.ytimg.com https://segment.prod.bidr.io; media-src 'self' https://videos.ctfassets.net/v44fuld738we/; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://*.jitsu.com https://*.fullstory.com https://bat.bing.com https://*.doubleclick.net https://analytics.tiktok.com/ https://connect.facebook.net https://d.impactradius-event.com https://d2hrivdxn8ekm8.cloudfront.net https://decagon.ai https://js.adsrvr.org https://sc-static.net https://snippet.maze.co https://static.ads-twitter.com https://tr.snapchat.com https://view.ceros.com https://www.googletagmanager.com https://www.redditstatic.com https://challenges.cloudflare.com https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/; worker-src 'self' blob:; frame-src 'self' https://app.netlify.com https://decagon.ai https://view.ceros.com/wealthsimple/ https://www.youtube.com https://www.youtube-nocookie.com https://*.adsrvr.org https://www.googletagmanager.com https://tr.snapchat.com https://form.typeform.com https://player.simplecast.com https://challenges.cloudflare.com; frame-ancestors 'self' https://my.wealthsimple.com https://app.contentful.com https://*.builds.wealthsimple.com; report-to csp-endpoint; report-uri https://www.wealthsimple.com/api/csp-report;