Content-Security-Policy: base-uri 'self'; script-src 'strict-dynamic' https://www.clarity.ms https://ai.microsoftol.com https://copilot.microsoft.com https://copilot.com https://challenges.cloudflare.com/ https://fpt.dfp.microsoft.com/ https://assets.msn.com 'self' 'nonce-MPhMCRGw21BUYMpvBRgcvw==' *.paypal.com *.paypalobjects.com; frame-ancestors 'self' https://edgeservices.bing.com edge://* *.microsoft365.com *.office.com m365.cloud.microsoft copilot.cloud.microsoft ccm.mobile.m365.svc.cloud.microsoft copilot.cloud-dev.microsoft; require-trusted-types-for 'script'; trusted-types default lit-html copilotPolicy dompurify @centro/hvc-loader fast-html base-html-policy @office/dime#webpack paypal-web-sdk; report-to csp-endpoint