Content-Security-Policy: object-src 'self' blob:; base-uri https://*.cloudfront.net 'self'; report-uri https://cspappdirect.report-uri.com/r/d/csp/enforce; worker-src 'self' blob:;

Content-Security-Policy-Report-Only: default-src 'self' catalog.appdirect.com catalogsandbox.byappdirect.com d3bql97l1ytoxn.cloudfront.net app-direct-www-cloudfront.s3.amazonaws.com wss://catalog.appdirect.com wss://catalogsandbox.byappdirect.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://cdn.jsdelivr.net/npm/@meltingspot/meltingspot-js https://js.stripe.com/v3/ https://maps.googleapis.com/maps/api/js https://kendo.cdn.telerik.com https://code.jquery.com/ https://maps.googleapis.com/maps-api-v3/api/js https://cdnjs.cloudflare.com https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/ https://*.appdirect.com https://catalogsandbox.byappdirect.com https://www.googletagmanager.com https://js.userpilot.io https://deploy.userpilot.io; style-src 'report-sample' https://fonts.googleapis.com/css 'self' https://unpkg.com https://cdn.jsdelivr.net/npm/@meltingspot/meltingspot-js/stylesheet.css https://fonts.googleapis.com/ https://*.appdirect.com https://catalogsandbox.byappdirect.com 'unsafe-inline' https://*.logicmonitor.com/ https://cdn.jsdelivr.net https://*.userpilot.io; img-src 'self' 'unsafe-inline' https://*.cloudfront.net/ https://*.vcomsolutions.com/ https://*.logicmonitor.com/ https://static-prod.logicmonitor.com/sbui209-1/commons/images/favicons/ https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data: d3bql97l1ytoxn.cloudfront.net app-direct-www-cloudfront.s3.amazonaws.com https://*.userpilot.io; font-src 'self' https://*.logicmonitor.com/ https://unpkg.com https://fonts.gstatic.com https://fonts.googleapis.com https://fonts.userpilot.io https://js.stripe.com/; connect-src 'self' https://unpkg.com/ https://*.vcomsolutions.com wss://catalogsandbox.byappdirect.com/ https://*.logicmonitor.com/ https://login.microsoftonline.com/ https://kendo.cdn.telerik.com https://*.googleapis.com *.google.com https://*.appdirect.com https://catalogsandbox.byappdirect.com https://*.gstatic.com data: blob: *.appdirect.com catalogsandbox.byappdirect.com d3bql97l1ytoxn.cloudfront.net app-direct-www-cloudfront.s3.amazonaws.com wss://*.appdirect.com wss://catalogsandbox.byappdirect.com https://cdn.jsdelivr.net https://*.userpilot.io wss://*.userpilot.io; frame-src 'self' https://vcom.logicmonitor.com https://js.stripe.com/ https://go.meltingspot.io/ https://vmanager.vcomsolutions.com; form-action 'self' https://*.appdirect.com https://catalog.appdirect.com https://catalogsandbox.byappdirect.com; object-src 'self' https://*.logicmonitor.com/ https://js.stripe.com/; media-src 'self' https://*.logicmonitor.com/ https://js.userpilot.io https://*.userpilot.io;