Content-Security-Policy: default-src https: wss: blob: mailto:; worker-src 'self' blob:; img-src * 'self' data: https:; style-src 'self' 'unsafe-inline' fonts.googleapis.com web-sdk-eu.aptrinsic.com *.posthog.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' secure.aadcdn.microsoftonline-p.com web-sdk-eu.aptrinsic.com *.posthog.com teams.microsoft.com; frame-ancestors https://*.visualforce.com https://*.force.com https://*.logicalware.com https://*.puzzel.com https://teams.microsoft.com;