Content-Security-Policy: default-src 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: about: ws: *;        frame-src 'self' https://*.smartdraw.com https://*.youtube.com https://*.youtube-nocookie.com/ https://*.paypal.com/ https://*.zendesk.com/ https://*.microsoft.com https://*.google.com https://*.googletagmanager.com/ https://*.bing.com https://*.recaptcha.net/ https://*.g2.com/ https://*.fetchback.com/ data: blob:;        frame-ancestors 'self' https://*.smartdraw.com;        base-uri 'unsafe-inline' about: data: *;        form-action 'unsafe-inline' data: *;        worker-src 'unsafe-inline' data: blob: *;