Content-Security-Policy: default-src *.salemove.com *.glia.com; connect-src data: *.salemove.com wss://*.salemove.com *.glia.com wss://*.glia.com *.twilio.com wss://*.twilio.com *.twiliocdn.com wss://*.twiliocdn.com graph.facebook.com wss://graph.facebook.com *.sentry.io wss://*.sentry.io http://localhost:9714; font-src data: *.salemove.com *.glia.com fonts.gstatic.com; frame-ancestors 'none'; frame-src blob: *.salemove.com *.glia.com *.facebook.com glia-applets.com *.quicksight.aws.amazon.com *.cobrowsing.com; img-src data: blob: *.salemove.com *.glia.com *.facebook.com *.slack-edge.com; media-src 'self' https: blob:; object-src 'self' https: blob:; script-src *.salemove.com *.glia.com connect.facebook.net 'wasm-unsafe-eval' 'nonce-joaXpGo6krFiTybJk9Z9EEmooXh98EiSXybZa0VpJyA='; style-src https: 'unsafe-inline'; upgrade-insecure-requests; worker-src *.salemove.com *.glia.com 'self' blob:; report-uri https://app.salemove.com/csp_violations