Content-Security-Policy: child-src https://*.driftt.com; connect-src 'self' wss: https://*.force.com https://*.fullstory.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.storage.googleapis.com https://api.honeybadger.io https://api.openai.com https://app.pendo.io https://data.pendo.io https://rum-http-intake.logs.datadoghq.com https://static.spiff.com https://storage.googleapis.com https://tattle.api.osano.com https://www.g2.com https://www.google-analytics.com; frame-ancestors 'self' https://*.force.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.visualforce.com https://app.pendo.io https://zeroheight.com; frame-src https://*.force.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.spiff.com https://*.workato.com https://app.hellosign.com https://app.pendo.io https://embedded.hellosign.com https://spiff.sisense.com https://www.youtube.com; img-src 'self' data: https://*.force.com https://*.google-analytics.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.storage.googleapis.com https://app.pendo.io https://cdn.pendo.io https://data.pendo.io https://image.flaticon.com https://static.spiff.com https://stats.g.doubleclick.net https://storage.googleapis.com https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.force.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.storage.googleapis.com https://app.pendo.io https://assets.g2.com https://cdn.pendo.io https://cmp.osano.com https://data.pendo.io https://edge.fullstory.com https://fullstory.com https://js.driftt.com https://pendo-io-static.storage.googleapis.com https://spiff.sisense.com https://spiff.sisense.com https://static.spiff.com https://storage.googleapis.com https://www.fullstory.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.force.com https://*.my.site.com https://*.my.pc-rnd.site.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.storage.googleapis.com https://app.pendo.io https://cdn.pendo.io https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://static.spiff.com https://storage.googleapis.com; worker-src 'self' blob: https://*.sfdcfc.net;