Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://script.hotjar.com https://static.hotjar.com https://snap.licdn.com https://cdn-cookieyes.com https://pod-27-sunco-ws.zendesk.com https://static.zdassets.com https://js.stripe.com https://code.jquery.com www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org;