Content-Security-Policy: default-src 'self' cdn.360-value.com/ *.melissadata.net *.360-value.com; script-src 'nonce-h9HuRJrY25i4zF9aZbYfoA==' 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' cdn.360-value.com/ *.melissadata.net *.360-value.com *.google.com *.googleapis.com *.bing.com *.virtualearth.net *.kampyle.com; frame-src cdn.360-value.com/ *.melissadata.net *.360-value.com *.kampyle.com; style-src 'self' 'unsafe-inline' cdn.360-value.com/ *.melissadata.net *.360-value.com *.google.com *.googleapis.com *.bing.com *.medallia.com *.kampyle.com; img-src 'self' cdn.360-value.com/ *.melissadata.net *.360-value.com *.google.com *.googleapis.com *.gstatic.com *.ggpht.com *.propmix.io *.bing.com *.virtualearth.net *.iso.com *.airmapserver.com:8080 *.kampyle.com data:; font-src 'self' cdn.360-value.com/ *.melissadata.net *.360-value.com *.google.com *.googleapis.com *.gstatic.com data:; connect-src 'self' cdn.360-value.com/ *.melissadata.net *.360-value.com *.googleapis.com *.gstatic.com *.bing.com *.virtualearth.net *.kampyle.com *.cybersource.com *.medallia.com; report-uri https://360-value.com/apps/iv/rest/cspReport; frame-ancestors * http: https: ; base-uri 'self';