Content-Security-Policy: frame-ancestors 'self'

Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-inline' 'unsafe-eval' tagdelivery.mayoclinic.org  nexus.ensighten.com  resources.digital-cloud-west.medallia.com  *.fontawesome.com s.go-mpulse.net  code.jquery.com  ; default-src 'self' mayo.edu *.mayo.edu mayoclinicpayment.org *.mayoclinicpayment.org fontawesome.com *.fontawesome.com bootstrapcdn.com *.bootstrapcdn.com medallia.com *.medallia.com ; frame-src 'self'; object-src 'none'; form-action 'self'; report-uri https://csp-d2l.domdog.io/report-uri/d2l.com/1086/1-1;