Content-Security-Policy: upgrade-insecure-requests, frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce

Content-Security-Policy-Report-Only: font-src *.force.com https://*.docusign.net 'self' https://stats.g.doubleclick.net https://api.mixpanel.com https://gateway.zscalertwo.net https://*.springcm.com https://*.clm.docusign.mil https://auth.vibe-box.ai https://recaptchaenterprise.googleapis.com https://fonts.googleapis.com https://circlefin.okta.com https://fonts.gstatic.com/ https://circleinternetfinancial--c.vf.force.com https://td.doubleclick.net blob: *.hubspotusercontent00.net https://*.clmfed.docusign.com https://www.googletagmanager.com https://status.circle.com https://circleinternetfinancial.lightning.force.com https://www.google-analytics.com *.salesforce.com *.google.com data: https://circleinternetfinancial.live-preview.salesforce-experience.com; report-to sfdc-csp-ep; report-uri https://circleinternetfinancial.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D8b000002Begn&networkId=0DM8b000000kPY9&type=communities