Content-Security-Policy: default-src * blob: data: https:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors 'self' https://integrate.1mind.com https://respond1.com;