Content-Security-Policy: default-src 'self'; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' app.salesloft.com; img-src 'self' data:; object-src 'none'; script-src 'none'; script-src-attr 'none'; style-src 'self'; upgrade-insecure-requests; require-trusted-types-for 'script';