Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' kendo.cdn.telerik.com cdnjs.cloudflare.com cdn.jsdelivr.net blob: www.googletagmanager.com *.google-analytics.com www.youtube.com s.ytimg.com;object-src 'self';style-src 'self' 'unsafe-inline' kendo.cdn.telerik.com cdnjs.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com;img-src 'self' kendo.cdn.telerik.com cdnjs.cloudflare.com cdn.jsdelivr.net *.google-analytics.com data: blob: *.ytimg.com;media-src 'self' blob: data:;frame-src 'self' *.quicksight.aws.amazon.com blob: www.youtube.com;font-src 'self' kendo.cdn.telerik.com cdnjs.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com fonts.googleapis.com data:;connect-src 'self' kendo.cdn.telerik.com cdnjs.cloudflare.com cdn.jsdelivr.net *.google-analytics.com api.openai.com *.openai.azure.com *.ai.azure.com;form-action 'self';frame-ancestors 'self';manifest-src 'self';report-to /csp-report