Content-Security-Policy: upgrade-insecure-requests; default-src https: data: filesystem: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:, frame-ancestors  'self' https://*.tebra.com https://*.patientpop.com https://*.kareo.com https://*.force.com;