Content-Security-Policy: base-uri 'none';              connect-src 'self' https:;              default-src 'self';              font-src 'self';              form-action 'self';              frame-ancestors files.prismic.io;              frame-src vercel.live prismic.io *.prismic.io *.oncehub.com *.youtube.com *.twitter.com *.facebook.com *.google.com *.googletagmanager.com;              img-src * data:;              manifest-src 'self';              media-src *.prismic.io;              object-src 'none';              script-src 'self' 'unsafe-inline' vercel.live *.google-analytics.com *.bing.com *.clarity.ms *.facebook.net *.googletagmanager.com *.helpscout.net prismic.io *.prismic.io www.google.com www.gstatic.com *.doubleclick.net *.g2crowd.com;              style-src 'self' 'unsafe-inline';              worker-src 'self';