Content-Security-Policy: base-uri 'self'; default-src 'self'; connect-src 'self' *.sentry.io https://api.amplitude.com/ https://browser-intake-datadoghq.com https://edge.fullstory.com https://rs.fullstory.com https://connect-assets.polytomic.com https://static.polytomic.com https://o329718.ingest.us.sentry.io; font-src 'self' data: https://fonts.gstatic.com https://connect-assets.polytomic.com https://static.polytomic.com https://o329718.ingest.us.sentry.io; form-action 'self'; frame-src https://docs.google.com/picker; frame-ancestors 'none'; img-src 'self' data: https://rs.fullstory.com https://connect-assets.polytomic.com https://static.polytomic.com https://o329718.ingest.us.sentry.io; object-src 'none'; script-src 'self' 'unsafe-eval' https://apis.google.com https://browser.sentry-cdn.com https://edge.fullstory.com https://js.sentry-cdn.com https://rs.fullstory.com https://connect-assets.polytomic.com https://static.polytomic.com https://o329718.ingest.us.sentry.io 'nonce-Rlca0Gh97UI'; style-src 'self' 'unsafe-inline' https://connect-assets.polytomic.com https://static.polytomic.com https://o329718.ingest.us.sentry.io; worker-src 'self' blob:; report-uri https://o329718.ingest.us.sentry.io/api/5536473/security/?sentry_key=959a054f76b74f7eaf737bc4d2a2e48b