| Content-Security-Policy | default-src 'self'; img-src www.google-analytics.com googleads.g.doubleclick.net pixel.quantserve.com a8b03ffbc00ed4da54a1-0c6684360696717b63d89dbc0edb802c.ssl.cf1.rackcdn.com e1fb6cb20426c9f446d7-c189afbaf93f5496308e0de3fd0efbd4.ssl.cf1.rackcdn.com www.facebook.com static.hotjar.com cms.quantserve.com platform.twitter.com syndication.twitter.com 'self' *.addthis.com cdn.userecho.com v2.zopim.com v2assets.zopim.io www.googletagmanager.com cm.g.doubleclick.net stats.g.doubleclick.net data: 68ef2f69c7787d4078ac-7864ae55ba174c40683f10ab811d9167.ssl.cf1.rackcdn.com www.google.co.uk www.google.com web.facebook.com bat.bing.com www.googleadservices.com optimize.google.com csi.gstatic.com www.gstatic.com *.googlesyndication.com ssl.gstatic.com secure.adnxs.com imp2.ads.linkedin.com blog.exclaimer.com track.hubspot.com i.s-microsoft.com maps.gstatic.com maps.googleapis.com *.spiceworks.com cdn2.hubspot.net; frame-src vars.hotjar.com *.addthis.com platform.twitter.com www.facebook.com www.youtube.com accounts.google.com staticxx.facebook.com apis.google.com exclaimer.userecho.com www.googleadservices.com bid.g.doubleclick.net www.google.com www.googletagmanager.com youtu.be *.googlesyndication.com api.linkedin.com/; script-src www.google-analytics.com 'self' *.zopim.com m.addthis.com munchkin.marketo.net ajax.googleapis.com www.googletagmanager.com www.exclaimer.com static.hotjar.com script.hotjar.com www.googleadservices.com 'unsafe-inline' 'unsafe-eval' *.addthis.com m.addthisedge.com connect.facebook.net apis.google.com platform.twitter.com stats.g.doubleclick.net cdn.userecho.com bat.bing.com/bat.js *.zopim.com translate.googleapis.com sjs.bizographics.com *.googlesyndication.com dc.ads.linkedin.com ssl.google-analytics.com widgets.pinterest.com graph.facebook.com www.linkedin.com tagmanager.google.com www.google.com snap.licdn.com www.gstatic.com secure.adnxs.com www.bizographics.com eu-west-1.dc.ads.linkedin.com t.gatorleads.co.uk js.hs-scripts.com js.hs-analytics.net api.usemessages.com platform.linkedin.com googleads.g.doubleclick.net js.usemessages.com syndication.twitter.com px.ads.linkedin.com www.google.co.uk api.hubspot.com maps.googleapis.com js.hsleadflows.net sitesearch360.com js.hsleadflows.net/ data: *.spiceworks.com; style-src netdna.bootstrapcdn.com fonts.googleapis.com 'self' 'unsafe-inline' tagmanager.google.com; font-src netdna.bootstrapcdn.com fonts.gstatic.com v2.zopim.com data: fonts.googleapis.com *.zopim.com themes.googleusercontent.com 'self' cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/fonts/fontawesome-webfont ssl.proxy-interceptor.netdna.bootstrapcdn.com; connect-src 381-kzc-440.mktoresp.com wss://*.zopim.com insights.hotjar.com wss://*.hotjar.com userecho.com munchkin.marketo.net *.addthis.com v2.zopim.com cloudsupport.exclaimer.com 'self' graylog.hotjar.com www.google-analytics.com graylog.hotjar.com:* *.googlesyndication.com stats.g.doubleclick.net *.zopim.com www.facebook.com cssdig.com snap.licdn.com syndication.twitter.com api.hubspot.com api.sitesearch360.com forms.hubspot.com client.getinchat.com; media-src i.s-microsoft.com; report-uri /csp-report; |