Content-Security-Policy-Report-Only: object-src 'none'; base-uri https://mysignins.microsoft.com; default-src https://mysignins.microsoft.com https://api.mysignins.microsoft.com; script-src https://mysignins.microsoft.com https://api.mysignins.microsoft.com https://amcdn.msftauth.net https://js.monitor.azure.com; style-src https://mysignins.microsoft.com https://api.mysignins.microsoft.com 'unsafe-inline'; img-src https://mysignins.microsoft.com https://api.mysignins.microsoft.com https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.msocdn.com https://*.azureedge.net https://*.azure.com https://*.office.net https://*.office.com https://*.office365.com https://*.microsoft.com https://*.windows.net https://*.microsoftonline.com https://*.microsoftonline-int.com https://*.office.net https://*.sharepointonline.com data: blob:; font-src https://mysignins.microsoft.com https://api.mysignins.microsoft.com https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.msocdn.com https://*.azureedge.net https://*.azure.com https://*.office.net https://*.office.com https://*.office365.com https://*.microsoft.com https://*.windows.net https://*.microsoftonline.com https://*.microsoftonline-int.com https://*.office.net https://*.sharepointonline.com data: blob:; frame-ancestors https://mysignins.microsoft.com https://api.mysignins.microsoft.com; upgrade-insecure-requests; report-to csp-report-endpoint