Content-Security-Policy: object-src 'none';script-src 'nonce-c2c366be-7810-42f5-8ee6-dae9305fb6f2' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;base-uri 'none';require-trusted-types-for 'script'; report-uri https://csp.microsoft.com/report/Forms-PROD;report-to endpoint-1;