[1]: This the CSP I see right now: `child-src 'self'; connect-src http://*.hotjar.com https://*.intercom.io https://heapanalytics.com https://*.sumo.com https://*.delighted.com wss://*.hotjar.com https://*.linkedin.com https://*.amplitude.com https://twitter.com https://*.cloudflare.com https://*.facebook.com https://*.getsentry.com 'self' https://*.prfct.co https://*.recurly.com https://*.reddit.com https://*.google.com https://*.lever.co https://*.ads.linkedin.com https://*.hotjar.com:12443 https://*.segment.io https://*.timekit.io https://*.googleapis.com http://*.prfct.co http://*.g.doubleclick.net http://heapanalytics.com https://sumo.com https://*.sqreen.com wss://*.intercom.io https://*.g.doubleclick.net https://*.fullstory.com ws://*.hotjar.com https://*.google-analytics.com https://*.hotjar.com http://*.sqreen.com https://github.com https://*.contentful.com https://*.herokuapp.com wss://*.appcues.net http://*.google-analytics.com https://*.intercomcdn.com; default-src 'self'; font-src data: https://github.com https://*.cloudflare.com https://*.sqreen.com http://*.sqreen.com chrome-extension: 'self' https://*.googleapis.com https://*.intercomcdn.com https://*.gstatic.com https://*.cloudfront.net; frame-src https://*.typeform.com https://*.g.doubleclick.net ws://*.hotjar.com https://*.hotjar.com http://*.hotjar.com https://*.twitter.com https://*.amazonaws.com https://*.appcues.com https://*.facebook.com 'self' wss://*.hotjar.com http://*.g.doubleclick.net https://*.recurly.com http://*.appcues.com https://headway-widget.net 'unsafe-inline'; img-src https://t.co https://*.ctfassets.net http://*.adnxs.com https://*.google.ch https://*.google.co.il https://*.google.com.ph https://*.google.com.tw https://*.google.de https://*.amazonaws.com https://*.google.ae https://*.google.ie https://*.openx.net https://*.sumo.com https://heapanalytics.com https://*.marinsm.com https://*.gstatic.com https://*.intercomassets.com https://*.google.pt https://*.google.cz https://twitter.com https://*.google.it https://sumo.com https://*.google.se https://*.facebook.com https://*.google.pl 'self' https://*.prfct.co https://*.adnxs.com https://*.reddit.com https://*.twimg.com https://*.addthis.com http://*.googletagmanager.com https://*.google.com https://*.univide.com https://*.google.co.jp https://*.rubiconproject.com https://*.clearbit.com https://*.google.ca https://*.google.es http://*.g.doubleclick.net https://*.googleapis.com https://*.google.com.mx http://*.prfct.co data: https://*.sqreen.com https://*.googletagmanager.com http://heapanalytics.com https://*.google.be https://*.google.com.ar https://*.google.no https://*.google.com.au https://*.google.nl https://*.b-cdn.net https://*.fullstory.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com.ua https://*.googleadservices.com http://*.googleadservices.com http://*.sqreen.com https://*.twitter.com https://*.google.co.uk https://*.yahoo.com https://*.google.com.sg https://*.google.fr https://*.intercomcdn.com http://*.google-analytics.com https://*.google.co.in https://*.google.com.br http://t.co https://*.cloudfront.net; manifest-src 'self'; media-src https://*.intercomcdn.com 'self'; object-src 'self'; script-src https://*.ads-twitter.com 'unsafe-eval' http://*.perfectaudience.com http://*.hotjar.com https://fullstory.com https://*.amazonaws.com https://*.intercom.io https://*.sumo.com https://*.redditstatic.com wss://*.hotjar.com https://*.appcues.com https://*.linkedin.com 'unsafe-inline' http://*.ads-twitter.com https://*.typeform.com http://*.getdrip.com https://*.amplitude.com https://*.cloudflare.com https://*.perfectaudience.com 'self' https://*.prfct.co https://*.recurly.com https://*.reddit.com http://*.appcues.com http://*.googletagmanager.com https://*.bufferapp.com https://*.jquery.com https://*.heapanalytics.com http://*.facebook.net https://*.getdrip.com https://*.ads.linkedin.com https://*.timekit.io https://*.facebook.net https://*.googleapis.com http://*.g.doubleclick.net http://*.prfct.co https://*.googletagmanager.com https://*.licdn.com https://*.googleadservices.com wss://*.intercom.io data: https://reddit.com https://*.b-cdn.net https://*.g.doubleclick.net ws://*.hotjar.com https://*.google-analytics.com http://*.segment.com https://*.hotjar.com http://*.googleadservices.com http://*.heapanalytics.com https://*.twitter.com https://*.headwayapp.co https://*.herokuapp.com http://*.google-analytics.com https://*.segment.com https://*.intercomcdn.com https://*.cloudfront.net https://*.pinterest.com; style-src https://*.b-cdn.net https://*.twitter.com https://*.cloudflare.com https://*.amazonaws.com https://*.appcues.com https://*.cloudfront.net 'self' https://*.googleapis.com http://*.appcues.com 'unsafe-inline'; worker-src 'self'; report-uri https://reports-api.sqreen.com/browser/v0/csp-violations/f637ed5d-4ac6-441d-a0f5-04c3d7e976c4; style-src-elem https://*.b-cdn.net https://*.twitter.com https://*.cloudflare.com https://*.sqreen.com http://*.sqreen.com https://*.amazonaws.com https://heapanalytics.com https://*.googleapis.com http://heapanalytics.com https://*.cloudfront.net 'unsafe-inline'; script-src-elem https://fullstory.com https://*.amazonaws.com https://heapanalytics.com https://*.sumo.com https://*.redditstatic.com https://*.linkedin.com 'unsafe-inline' http://*.getdrip.com https://*.amplitude.com https://twitter.com https://*.cloudflare.com https://*.prfct.co https://*.recurly.com https://*.reddit.com http://*.googletagmanager.com https://*.bufferapp.com https://*.heapanalytics.com https://*.getdrip.com https://*.ads.linkedin.com https://*.googleapis.com http://*.prfct.co http://*.g.doubleclick.net http://heapanalytics.com https://*.sqreen.com https://*.googletagmanager.com https://*.licdn.com https://reddit.com https://*.b-cdn.net https://*.g.doubleclick.net http://*.segment.com https://*.google-analytics.com https://*.twitter.com http://*.sqreen.com http://*.heapanalytics.com https://*.headwayapp.co http://*.google-analytics.com https://*.segment.com https://*.intercomcdn.com https://*.cloudfront.net https://*.pinterest.com`