Content-Security-Policy: upgrade-insecure-requests, frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce

Content-Security-Policy-Report-Only: img-src *.force.com slack-imgs-mil-dev.com 'self' https://api.mixpanel.com *.slack.com https://www.paypal.com https://img.youtube.com https://payments.salesforce.com/icons/ https://login.salesforce.com/icons/ *.slack-imgs.com slack-imgs-gov.com https://*.springcm.com https://traject.file.force.com https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ *.salesforce-experience.com https://www.gstatic.com https://*.clm.docusign.mil *.slack-edge-gov.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com *.cloudinary.com https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ slack-mil-dev.com https://www.gstatic.com/recaptcha/ blob: https://traject.my.salesforce.com https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com https://usa354.sfdc-yfeipo.salesforce.com/icons/ https://*.clmfed.docusign.com https://i.vimeocdn.com slack-imgs.com slack-gov-dev.com *.sfdcstatic.com *.salesforce.com *.twimg.com https://*.adyen.com slack-imgs.mil data: guide.gatherup.com; report-to sfdc-csp-ep; report-uri https://traject.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D6g0000054HyC&networkId=0DM4V000000TXRm&type=communities