Content-Security-Policy: default-src 'none'; script-src 'self' 'nonce-NTVlODdiZTYtYTg2Ny00ODA0LTljMjgtNWEyNmEwNzk4Y2Q0' 'strict-dynamic'; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com; img-src 'self' blob: data: *.gstatic.com storage.googleapis.com cdn.dojo.tech cdn.braze.eu images.yapily.com; font-src 'self' https://assets.dojo.tech/; connect-src 'self' *.eu.amplitude.com api2.amplitude.com cdn.amplitude.com *.googleapis.com staging.paymentsense.tech *.dojo.dev *.dojo.tech *.paymentsense.tech *.paymentsense.cloud app.launchdarkly.com events.launchdarkly.com clientstream.launchdarkly.com *.googletagmanager.com sdk.fra-01.braze.eu consent.api.osano.com tattle.api.osano.com cmp.osano.com disclosure.api.osano.com *.sentry.io; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'self' *.dojo.dev *.dojo.tech *.paymentsense.tech; frame-src https://pay.dojo.tech/ https://web.e.connect.paymentsense.cloud https://web.e.test.connect.paymentsense.cloud https://checkout.dojo.dev/ https://staging-checkout.dojo.dev https://checkout.dojo.dev; worker-src 'self' blob:;