Content-Security-Policy: default-src 'self' *.force.com *.salesforce.com *.netsuite.com *.visualforce.com *.xactlycorp.com *.topopps.com *.talarianweb.com 'unsafe-inline' https://*.pendo.io; style-src 'unsafe-inline' fonts.googleapis.com *.topopps.com; font-src 'self' data: fonts.gstatic.com *.topopps.com *.talarianweb.com; img-src 'self' data: *.topopps.com *.talarianweb.com *.force.com *.salesforce.com *.netsuite.com *.visualforce.com *.xactlycorp.com *.pendo.io; frame-ancestors 'self' *.force.com *.salesforce.com *.visualforce.com *.netsuite.com *.xactlycorp.com *.topopps.com;