Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.cookielaw.org https://edge.fullstory.com https://rs.fullstory.com *.quest.com *.myerwin.com *.livehelpnow.net; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com developer.livehelpnow.net; img-src 'self' https: data: developer.livehelpnow.net rs.fullstory.com; frame-src 'self' https: *.blob.core.windows.net; font-src 'self' https: data: fonts.gstatic.com cdn.livehelpnow.net; media-src developer.livehelpnow.net; connect-src 'self' https: *.azurewebsites.net *.blob.core.windows.net *.azure-api.net edge.fullstory.com rs.fullstory.com *.quest.com *.myerwin.com *.quest-on-demand.com fonts.gstatic.com developer.livehelpnow.net wss://app.livehelpnow.net wss://*.service.signalr.net wss://*.azure-api.net wss://*.signalr.azure.us wss://*.quest-on-demand.com wss://*.myerwin.com; frame-ancestors 'self'; object-src 'none';