Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn-cookieyes.com *.googletagmanager.com *.youtube.com *.google-analytics.com *.licdn.com *.calendly.com; object-src 'self';