Revised Csp headers file

_headersCsp.json

{
  "base-uri": "'none'",
  "default-src": ["'self'", "data:", "https:", "wss:"],
  "style-src": ["'self'", "data:", "https:", "wss:", "'unsafe-inline'"],
  "script-src": [
    "'self'",
    "https://api.scrivito.com",
    "https://app.intercom.io",
    "https://assets.scrivito.com",
    "https://js.intercomcdn.com",
    "https://widget.intercom.io",
    "https://www.google-analytics.com",
    "https://services.cognitoform.com",
    "https://app.conversiobot.com"
  ],
  "object-src": "'none'",
  "block-all-mixed-content": true
}