Content-Security-Policy: script-src 'self' 'unsafe-inline' https://ajax.cloudflare.com https://cc.cdn.civiccomputing.com/9/cookieControl-9.9.min.js https://cc.cdn.civiccomputing.com/9/cookieControl-9.11.min.js https://js.globalpay.com/v1/globalpayments.js https://webservices.data-8.co.uk/javascript/ chatbot.ico.org.uk analytics.silktide.com; style-src 'self' 'unsafe-inline' https://webservices.data-8.co.uk/content/ https://fonts.googleapis.com/; connect-src 'self' http://localhost:* ws://localhost:* wss://localhost:* https://apikeys.civiccomputing.com/c/v https://clapi.civiccomputing.com https://webservices.data-8.co.uk/ wss://livechat.ico.org.uk *.ico.org.uk flexbot-app-anonymoustoken-prod.azurewebsites.net flexbot-app-bottoken-prod.azurewebsites.net directline.botframework.com wss://directline.botframework.com a.eu.silktide.com;