Content-Security-Policy-Report-Only: default-src 'self'; object-src 'none'; script-src 'self' ${param:cspANDI}${param:cspLOCAL}https://www.google.com https://www.gstatic.com https://*.go-mpulse.net https://dap.digitalgov.gov https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' ${param:cspANDI}${param:cspLOCAL}'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' ${param:cspLOCAL}data: https://translate.google.com https://fonts.gstatic.com https://www.google-analytics.com; connect-src 'self' ${param:cspANDI}${param:cspLOCAL}https://idp.int.identitysandbox.gov https://www.google.com https://www.gstatic.com https://*.googleapis.com https://browser-intake-ddog-gov.com https://*.go-mpulse.net https://*.akamaihd.net https://*.akstat.io https://www.google-analytics.com https://dap.digitalgov.gov https://www.googletagmanager.com https://cognito-idp.us-gov-east-1.amazonaws.com; frame-src  https://www.google.com https://wwww.gstatic.com; frame-ancestors 'none'; worker-src 'self' blob: