Content-Security-Policy: frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.ca  *.interactivebrokers.com.hk  *.interactivebrokers.hk  *.interactivebrokers.ch  *.interactivebrokers.eu  *.interactivebrokers.ie  *.interactivebrokers.lu  *.interactivebrokers.hu  *.interactivebrokers.com.sg  *.ibkr.com.sg  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkram.com  IBKR.docebosaas.com  *.interactiveadvisors.com  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.youtube.com  *.interactivebrokers.ie  *.interactivebrokers.lu  *.interactivebrokers.hu  *.clientam.ch  *.clientam.com.hk  *.go-mpulse.net  *.akstat.io  impact.interactivebrokers.com  *.ibkrcampus.com  widgets.tipranks.com  site.recognia.com  *.portfolioanalyst.com  portfolioanalyst.com  www.portfolioanalyst.com  www.interactivebrokers.com  https://www.interactivebrokers.com/  *.lynxbroker.com  site.recognia.com  ibkr.paxosclients.com  worldtrader.hsbc.ae  *.xstaging.tv  *.ibkrcampus.com  ibkrcampus.com  *.ibkrguides.com  ibkrcampusstg.wpenginepowered.com  *.greenwichcompliance.com  bsmart.quantex.com.ar  www.ig.com;

Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-inline' 'unsafe-eval'   *.interactivebrokers.com   *.interactivebrokers.ca   *.interactivebrokers.com.hk   *.interactivebrokers.hk   *.interactivebrokers.ch   *.interactivebrokers.eu   *.interactivebrokers.ie   *.interactivebrokers.lu   *.interactivebrokers.hu   *.interactivebrokers.com.sg   *.interactivebrokers.co.uk   *.interactivebrokers.com.au   *.interactivebrokers.co.jp   *.interactivebrokers.co.in   *.ibkr.com   *.ibkr.com.cn   *.ibkrcampus.com   *.ibkrguides.com   *.clientam.com   *.interactiveadvisors.com   *.portfolioanalyst.com   *.go-mpulse.net   *.akstat.io   *.tradingview.com   bat.bing.com   *.taboola.com   googleads.g.doubleclick.net   www.googletagmanager.com   *.tiktok.com   *.quora.com   *.facebook.net   *.amazon-adsystem.com   *.ads-twitter.com   *.redditstatic.com   *.getlimy.ai   *.googleapis.com   *.google-analytics.com   *.gstatic.com   *.googleadservices.com   *.plaid.com   ; report-to csp-endpoint; report-uri /response_handlers/csplogger/index.php