Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'none'; child-src 'self'; connect-src 'self' wss: *.carcogroup.com *.checktohire.com *.cisive.com *.driveriq.com *.esiprovider.com *.everifile.com *.inquiriesscreening.com *.intellicorp.com *.precheck.com *.screenid.net https://*.niceincontact.com onboard.morganstanley.com www.recaptcha.net; font-src 'self' data: font.googleapis.com fonts.gstatic.com https://*.niceincontact.com p.typekit.net use.typekit.net www.carcogroup.com www.cisive.com www.recaptcha.net; form-action 'self'; frame-ancestors 'self' https://*.niceincontact.com www.recaptcha.net; frame-src 'self' https://*.niceincontact.com www.recaptcha.net; img-src 'self' data: https: *.carcogroup.com *.checktohire.com *.cisive.com *.driveriq.com *.esiprovider.com *.everifile.com *.inquiriesscreening.com *.intellicorp.com *.precheck.com *.screenid.net https://*.niceincontact.com play.google.com tools.applemediaservices.com www.recaptcha.net; manifest-src 'self'; media-src 'self'; object-src 'none'; report-uri https://admintest.carcogroup.com/cspheader-report.cfm; report-to csp-endpoint; script-src 'nonce-XHwjtudJ8RGbCEYqllLdfw==' *.amazonaws.com *.carcogroup.com *.checktohire.com *.cisive.com *.driveriq.com *.esiprovider.com *.everifile.com *.inquiriesscreening.com *.intellicorp.com *.precheck.com *.screenid.net chart.googleapis.com font.googleapis.com fonts.gstatic.com https://*.niceincontact.com onboard.morganstanley.com play.google.com www.google.com www.recaptcha.net 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'nonce-XHwjtudJ8RGbCEYqllLdfw=='  'strict-dynamic' https: 'unsafe-inline'; style-src-attr 'self' *.carcogroup.com *.checktohire.com *.cisive.com *.driveriq.com *.esiprovider.com *.everifile.com *.inquiriesscreening.com *.intellicorp.com *.precheck.com *.screenid.net font.googleapis.com https://*.niceincontact.com onboard.morganstanley.com www.recaptcha.net 'unsafe-inline'; style-src-elem 'self' 'nonce-XHwjtudJ8RGbCEYqllLdfw==' *.carcogroup.com *.checktohire.com *.cisive.com *.driveriq.com *.esiprovider.com *.everifile.com *.inquiriesscreening.com *.intellicorp.com *.precheck.com *.screenid.net font.googleapis.com https://*.niceincontact.com onboard.morganstanley.com www.recaptcha.net 'strict-dynamic' https: 'unsafe-inline'