Content-Security-Policy: default-src 'self'; base-uri 'self'; block-all-mixed-content; font-src 'self' https://docucdn-a.akamaihd.net/ https://apps.docusign.com; frame-ancestors ; img-src 'self' data: https://docucdn-a.akamaihd.net/ https://apps.docusign.com; object-src 'self' https://docucdn-a.akamaihd.net/ https://apps.docusign.com; script-src 'self' 'nonce-67b22992-2e5c-4039-8d48-55d59e91a3b8' https://docucdn-a.akamaihd.net https://artifactory.docusignhq.com https://apps.docusign.com; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests; connect-src 'self' https://docucdn-a.akamaihd.net https://cdn.optimizely.com https://api-js.mixpanel.com https://apps.docusign.com https://telemetry.docusign.net https://services.docusign.net/observability-opentelemetry-collector; frame-src 'self' https://docucdn-a.akamaihd.net/ https://apps.docusign.com; media-src; worker-src 'self'