Content-Security-Policy: frame-ancestors https://*.box.com/ https://www.microsoft.com/ 'self'; base-uri 'self'; form-action https://www.facebook.com https://www.microsoft.com; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'sha256-kku4Td90tvWRjRfWM2//FkpDVijaluU9wwSG7BJD6pE=' https://translate.google.com https://translate.googleapis.com 'report-sample'; worker-src 'self' blob:; report-to CREMSEndpoint; report-uri https://csp.microsoft.com/report/Clipchamp-Classic-PROD

Content-Security-Policy-Report-Only: manifest-src 'self'; font-src 'self' https://clipchamp.com https://fonts.gstatic.com https://use.fontawesome.com https://res-1.cdn.office.net; report-to CREMSEndpoint; report-uri https://csp.microsoft.com/report/Clipchamp-Classic-PROD