interview.txt

default-src 'none'; report-uri https://report-uri.robinhood.com/_csp?type=webapp&version=2020.35.13; block-all-mixed-content; upgrade-insecure-requests; base-uri 'self'; script-src 'self' 'nonce-WbxnLSJ/WKd7K5X7AJEO2eslbvuHxV+A' cdn.robinhood.com www.google-analytics.com platform.twitter.com ethn.io www.gstatic.com www.google.com cdn.checkout.com/js/framesv2.min.js cdn.plaid.com; style-src 'self' 'unsafe-inline' cdn.robinhood.com; font-src 'self' fonts.gstatic.com cdn.robinhood.com; media-src 'self' cdn.rob…inhood-prism-storage.s3.amazonaws.com stats.g.doubleclick.net www.google-analytics.com www.google.com/ads/ga-audiences/ syndication.twitter.com assets.pd.gpsrv.com robinhood-newsfeed-images.s3.amazonaws.com newsfeed-images.robinhood.com maps.googleapis.com; connect-src robinhood.com 'self' *.robinhood.com www.google-analytics.com stats.g.doubleclick.net ssl.google-analytics.com www.google.com ethn.io sentry.io secure-agserv.pd.gpsrv.com api.userleap.com https://js.checkout.com/framesv2/log api.checkout.com