Content-Security-Policy: frame-ancestors 'self' *.atlassian.net *.jira.com *.atl-paas.net *.atlassian.com trello.com bitbucket.org *.jiraalign.com loom.com www.loom.com chrome-extension://npbjhobkibekbklkghlhfhieggcggpdb; report-uri https://web-security-reports.services.atlassian.com/csp-report/jira-frontend-bifrost; report-to csp-default-endpoint

Content-Security-Policy-Report-Only: style-src 'self' *.cloudfront.net *.atl-paas.net *.atlassian.com 'unsafe-inline'; script-src 'self' *.cloudfront.net *.atl-paas.net *.atlassian.com *.ingest.sentry.io/api 'unsafe-inline' 'unsafe-eval'; img-src * data: