Content-Security-Policy: default-src 'self' *.tackle.io login.microsoftonline.com; connect-src tackle.auth0.com *.tackle.io tackle.io *.tkl.sh tkl.sh *.s3.amazonaws.com s3.amazonaws.com www.google-analytics.com login.microsoftonline.com graph.microsoft.com *.browser-intake-us3-datadoghq.com; child-src *.tackle.io tackle.auth0.com *.statuspage.io; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: filesystem: mediastream: blob: *; media-src ssl.gstatic.com; object-src 'none'; script-src 'self' 'unsafe-eval' www.google-analytics.com status.tackle.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; worker-src blob:;