Content-Security-Policy-Report-Only: default-src 'self' ;          base-uri 'self' ;          object-src 'none' ;          script-src 'self' 'unsafe-eval' 'nonce-vc1NTmezKubZnx3E3NtX7Q==' *.googleapis.com *.baidu.com *.zohocdn.com *.cloudfront.net *.googletagmanager.com *.cdn.pagesense.io *.youtube.com *.seatsio.net;          connect-src 'self' *.googleapis.com *.google-analytics.com *.nimbuspop.com ws: data: ;          font-src 'self' *.gstatic.com *.zohowebstatic.com *.zohostatic.com *.zohocdn.com data:  ;          style-src 'self' 'unsafe-inline' *.zoho.com *.zohocdn.com;          frame-src 'self' * ;          img-src 'self' *.ytimg.com *.zohoexternal.com *.zohocdn.com data: blob: *.nimbuspop.com *.zohopublic.com