Content-Security-Policy: default-src 'self' ;  img-src 'self' blob: data: https://*.numiga.com ;  media-src 'self';  font-src  'self';  object-src 'self';  script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.gstatic.com https://cdn.jsdelivr.net https://cdn.botframework.com;  style-src 'unsafe-inline' 'self';  style-src-elem 'unsafe-inline' 'self';  connect-src 'self' https://*.gstatic.com https://*.numiga.com https://sso.numiga.com:8443 https://directline.botframework.com blob: https://nge.numiga.com wss://directline.botframework.com https://cdn.jsdelivr.net;  worker-src 'self' data: blob: https://*.numiga.com; manifest-src 'self'; frame-src 'self' data: *; frame-ancestors 'self';