Content-Security-Policy: default-src 'self';script-src 'self' 'wasm-unsafe-eval' 'unsafe-inline' *.microsoft.com *.clarity.ms js.monitor.azure.com res.cdn.office.net; style-src 'self' 'unsafe-inline' *.microsoft.com;img-src 'self' data: blob: https:;font-src 'self' data: https:;connect-src 'self' https:;frame-src 'self' *.microsoft.com www.youtube.com www.youtube-nocookie.com;frame-ancestors 'self';base-uri 'self';form-action 'self' *.microsoft.com;object-src 'none';upgrade-insecure-requests