Content-Security-Policy: default-src 'self' mailto: tel: *.nr-data.net *.stripe.com *.cookiebot.com *.fluke.com *.flukenetworks.com *.link-lightning.com *.google-analytics.com *.googletagmanager.com *.amazonaws.com *.doubleclick.net *.googleapis.com; font-src 'self' 'unsafe-inline' *.gstatic.com *.bootstrapcdn.com *.zdassets.com *.flukenetworks.com; img-src * 'self' data: https:; manifest-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.cookiebot.com *.stripe.com *.linkwarelive.com *.google-analytics.com *.googletagmanager.com *.google.com *.desk.com *.googlecode.com *.googleapis.com *.zdassets.com *.zendesk.com *.flukenetworks.com blob:; style-src 'self' 'unsafe-inline' *.googleapis.com *.bootstrapcdn.com; frame-ancestors 'self' https://*.fluke.com;