Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' * data: blob: filesystem: ; object-src 'none'; frame-ancestors 'self' *.sharepoint.com teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com teams.microsoftonline.cn *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;