Content-Security-Policy: default-src https://id.b2b.yahooinc.com/ https://id.identityb2b.aws.oath.cloud/ https://*.identityb2b.aws.prod.private.aws.oath.cloud:*/; font-src https://id.b2b.yahooinc.com/ https://id.identityb2b.aws.oath.cloud/ https://*.identityb2b.aws.prod.private.aws.oath.cloud:*/ https://fonts.gstatic.com https://s.yimg.com; script-src https://id.b2b.yahooinc.com/ https://id.identityb2b.aws.oath.cloud/ https://*.identityb2b.aws.prod.private.aws.oath.cloud:*/ 'unsafe-inline' 'unsafe-eval'; style-src https://id.b2b.yahooinc.com/ https://id.identityb2b.aws.oath.cloud/ https://*.identityb2b.aws.prod.private.aws.oath.cloud:*/ 'unsafe-inline'; img-src https://id.b2b.yahooinc.com https://id.identityb2b.aws.oath.cloud https://*.identityb2b.aws.prod.private.aws.oath.cloud:* data:; frame-ancestors https://id.b2b.yahooinc.com https://sso.admanagerplus.yahoo.com; report-uri /identity/_csp_report_