Content-Security-Policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googleapis.com https://*.bootstrapcdn.com https://www.googletagmanager.com https://code.jquery.com/jquery-3.6.0.min.js https://code.jquery.com/jquery-migrate-3.3.2.min.js https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://cdn.syncfusion.com https://web-sdk.aptrinsic.com https://cdn.botframework.com/ everify.fiddletreesystems.com ; style-src 'self' 'unsafe-inline' blob: https://*.googleapis.com https://*.trimble.com https://web-sdk.aptrinsic.com  ; object-src 'none'  ; form-action 'self'  ; frame-ancestors 'self' *.viewpointforcloud.com team.viewpoint.com https://*.viewpointforcloud.com https://team.viewpoint.com/ ; worker-src 'self' 'unsafe-inline' blob:;