Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-xbXiYJBHWwGP68t5ZhClunL6In+d9+g53up+S+XIQmY=' https://cdn.jsdelivr.net https://js-agent.newrelic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; connect-src 'self' https://bam.nr-data.net; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; base-uri 'none';