Content-Security-Policy: base-uri 'self' https://*.xtm.cloud; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.g2crowd.com *.cookielaw.org *.cookiebot.com consent.cookiebot.com *.vimeocdn.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.googletagmanager.com api.hubapi.com *.hsappstatic.net *.jsdelivr.net *.typeform.com *.fontawesome.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net googleads.g.doubleclick.net bat.bing.com *.gstatic.com *.google.com *.hsforms.net js.hsforms.net *.6sc.co *.onetrust.com *.xtm.cloud *.demoboost.com *.pendo.io *.hubspot.com *.apollo.io *.api.irisagent.com player.vimeo.com plugin.sopro.io *.sopro.io cdn.taboola.com trc.taboola.com *.taboola.com a.quora.com *.quora.com tracking-api.g2.com www.clarity.ms *.clarity.ms scripts.clarity.ms yoast.com www.clickcease.com *.clickcease.com www.youtube.com *.feedbucket.app *.convertexperiments.com *.usemessages.com ws.zoominfo.com *.hotjar.com *.eventbrite.com dashboard.searchatlas.com cdn.dreamdata.cloud cdn.drda.io; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.g2crowd.com *.cookielaw.org *.cookiebot.com consent.cookiebot.com *.vimeocdn.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.googletagmanager.com api.hubapi.com *.hsappstatic.net *.jsdelivr.net *.typeform.com *.fontawesome.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net googleads.g.doubleclick.net bat.bing.com *.gstatic.com *.google.com *.hsforms.net js.hsforms.net *.6sc.co *.onetrust.com *.xtm.cloud *.demoboost.com *.pendo.io *.hubspot.com *.apollo.io *.api.irisagent.com player.vimeo.com plugin.sopro.io *.sopro.io cdn.taboola.com trc.taboola.com *.taboola.com a.quora.com *.quora.com tracking-api.g2.com www.clarity.ms *.clarity.ms scripts.clarity.ms yoast.com www.clickcease.com *.clickcease.com www.youtube.com *.feedbucket.app *.convertexperiments.com *.usemessages.com ws.zoominfo.com *.hotjar.com *.eventbrite.com storage.googleapis.com static.hsappstatic.net dashboard.searchatlas.com cdn.transifex.com cdn.dreamdata.cloud cdn.drda.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.feedbucket.app https://cdn.transifex.com; connect-src 'self' vimeo.com *.vimeo.com *.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.com imgsct.cookiebot.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com *.hubspot.com api.hubapi.com forms.hsforms.com *.hsforms.com forms.hscollectedforms.net *.hscollectedforms.net hubspot-forms-static-embed.s3.amazonaws.com *.amazonaws.com *.google-analytics.com www.google-analytics.com *.google.com www.google.com *.facebook.com *.hs-analytics.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.clarity.ms c.clarity.ms *.g2.com *.g2crowd.com tracking-api.g2.com *.xtm-intl.com *.feedbucket.app dashboard.feedbucket.app cdn.feedbucket.app *.taboola.com psb.taboola.com aplo-evnt.com *.apollo.io *.fontawesome.com ka-p.fontawesome.com kit.fontawesome.com *.googlesyndication.com pagead2.googlesyndication.com *.googletagmanager.com *.azurewebsites.net sopro-personalisation.azurewebsites.net *.hsappstatic.net static.hsappstatic.net px.ads.linkedin.com *.linkedin.com bat.bing.com *.bing.com *.6sc.co *.6sense.com b.6sc.co stats.g.doubleclick.net *.doubleclick.net *.adnxs.com *.eventbrite.com *.demoboost.com *.pendo.io *.api.irisagent.com *.convertexperiments.com *.yoast.com sa.searchatlas.com live-detector.svc.transifex.net telemetry.svc.transifex.net app.transifex.com cdn.dreamdata.cloud cdn.drda.io *.dreamdata.cloud *.drda.io; img-src 'self' 'unsafe-inline' data: *.google.com *.google.com.ua *.google.pl *.facebook.com *.linkedin.com *.hubspot.com forms.hsforms.com perf-na1.hsforms.com *.hsappstatic.net *.hotjar.com *.quora.com q.quora.com a.quora.com *.taboola.com *.apollo.io *.cookiebot.com imgsct.cookiebot.com *.cookielaw.org *.clarity.ms c.clarity.ms *.bing.com c.bing.com xtm.cloud *.capterra.com ct.capterra.com *.gravatar.com secure.gravatar.com *.feedbucket.app cdn.feedbucket.app px.ads.linkedin.com *.hs-sites.com b.6sc.co connect.facebook.net forms-na1.hsforms.com www.googletagmanager.com *.vimeocdn.com *.typeform.com *.doubleclick.net *.pendo.io *.googleapis.com *.api.irisagent.com *.w.org yoast.com yoa.st cdn.transifex.com 14487846.fs1.hubspotusercontent-na1.net; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com *.fontawesome.com ka-p.fontawesome.com; frame-src 'self' vimeo.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.com *.onetrust.com *.googletagmanager.com www.googletagmanager.com *.hs-sites.com js.hsforms.net *.hsforms.com *.hubspot.com *.typeform.com *.xtm.cloud *.google.com *.demoboost.com *.pendo.io *.doubleclick.net; frame-ancestors 'none'; block-all-mixed-content; report-uri /wp-json/xtm-csp/v1/report