Content-Security-Policy: script-src 'self' 'unsafe-inline' https://*.paytm.in https://*.paytm.com https://*.youtube.com https://*.googletagmanager.com https://static.cloudflareinsights.com;   frame-src 'self' https://*.paytm.in https://*.paytm.com https://*.youtube.com https://esg.churchgatepartners.com https://www.googletagmanager.com;   child-src 'self' https://*.paytm.in https://*.paytm.com https://*.youtube.com https://esg.churchgatepartners.com https://www.googletagmanager.com;   font-src https://fonts.gstatic.com https://pwebassets.paytm.com;   report-uri https://csp-report.mypaytm.com/reportcspviolations.php;   report-to https://csp-report.mypaytm.com/reportcspviolations.php;   frame-ancestors 'self';   object-src 'none';   img-src 'self' https://paytm.com https://*.paytm.com https://*.paytm.in https://*.paytmbank.com https://www.google.com;   connect-src 'self' https://paytm.com wss://*.paytm.com https://*.paytm.com https://*.paytm.in https://*.paytmdgt.io https://*.googleapis.com https://*.google-analytics.com https://*.doubleclick.net https://analytics.google.com https://www.google.com;   base-uri 'self';

Content-Security-Policy-Report-Only: report-uri https://csp-report.mypaytm.com/reportcspviolations.php; report-to https://csp-report.mypaytm.com/reportcspviolations.php;