Content-Security-Policy: frame-ancestors 'self' ; upgrade-insecure-requests; form-action 'self' ; base-uri 'self' ; default-src 'self' *.exlibrisgroup.com;report-uri /infra/CSPReportEndpoint.jsp; report-to csp-report-endpoint;