Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.contentsquare.net app.contentsquare.com my.tealiumiq.com www.googletagmanager.com blob: snap.licdn.com *.demdex.net collect.tealiumiq.com hsbcglobalcommon.sc.omtrdc.net cm.everesttech.net assets.adobedtm.com sadmin.brightcove.com tags.tiqcdn.com players.brightcove.net vjs.zencdn.net; img-src 'self' *.contentsquare.net my.tealiumiq.com data: ad.doubleclick.net t.co adservice.google.com px.ads.linkedin.com *.demdex.net collect.tealiumiq.com hsbcglobalcommon.sc.omtrdc.net cm.everesttech.net assets.adobedtm.com pbs.twimg.com *.twimg.com brightcove04pmdo-a.akamaihd.net www.hsbc.com metrics.brightcove.com *.boltdns.net; connect-src 'self' *.contentsquare.net *.contentsquare.com px.ads.linkedin.com cdn.linkedin.oribi.io *.px.ads.linkedin.com *.demdex.net collect.tealiumiq.com hsbcglobalcommon.sc.omtrdc.net cm.everesttech.net assets.adobedtm.com *.brightcove.com brightcove04pmdo-a.akamaihd.net f1.media.brightcove.com edge.api.brightcove.com bcsecure01-a.akamaihd.net secure.brightcove.com *.boltdns.net *.brightcovecdn.com akamai.tiqcdn.com www.google.com ad.doubleclick.net; font-src 'self' data:; form-action 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' *.demdex.net *.fls.doubleclick.net; media-src 'self' *.boltdns.net *.brightcovecdn.com *.twimg.com blob:;