Content-Security-Policy: child-src blob:; connect-src 'self' wss://*.app.chime.aws https://*.nr-data.net https://cirrusmdcustomersupport.zendesk.com https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zopim.com https://api.rollbar.com https://cirrusmd-cmd-production1-data-public-us-east-1.s3.amazonaws.com https://cirrusmd-cmd-production1-data-private-us-east-1.s3.amazonaws.com https://cmd-production1-jabberwocky.cirrusmd.com/api/v1/icdsearch https://cmd-production1-jabberwocky.cirrusmd.com wss://cmd-production1-ws.cirrusmd.com https://sdk.iad-02.braze.com; default-src 'self' https://static.zdassets.com https://*.zopim.com; font-src 'self' data: https://fonts.gstatic.com; frame-ancestors 'none'; img-src 'self' data: blob: https://cirrusmd-cmd-production1-data-public-us-east-1.s3.amazonaws.com https://cirrusmd-cmd-production1-data-private-us-east-1.s3.amazonaws.com https://*.zopim.io https://*.googleusercontent.com https://translate.google.com https://*.gstatic.com https://*.nr-data.net https://braze-images.com; object-src 'none'; report-uri /csp_violation_reports; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://cdn.rollbar.com https://static.zdassets.com https://*.zopim.com https://js-agent.newrelic.com https://*.nr-data.net https://assets-production.cirrusmd.com 'nonce-'; script-src-attr 'self' blob: 'unsafe-inline' 'unsafe-eval' https://cdn.rollbar.com https://static.zdassets.com https://*.zopim.com https://js-agent.newrelic.com https://*.nr-data.net https://assets-production.cirrusmd.com; script-src-elem 'self' blob: 'unsafe-inline' 'unsafe-eval' https://cdn.rollbar.com https://static.zdassets.com https://*.zopim.com https://js-agent.newrelic.com https://*.nr-data.net https://assets-production.cirrusmd.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com 'nonce-'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline' https://fonts.googleapis.com; worker-src 'self'