Content-Security-Policy: child-src 'self' https://intercom-sheets.com/sheets_proxy; connect-src 'self' wss: https: https://*.quicksight.aws.amazon.com; default-src 'self' https:; font-src 'self' https: data:; frame-ancestors 'none'; frame-src 'self' https: data: blob: https://*.quicksight.aws.amazon.com; img-src 'self' https: data:; object-src 'self'; report-uri https://shipcloud.report-uri.com/r/d/csp/enforce; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; upgrade-insecure-requests