Content-Security-Policy: upgrade-insecure-requests, frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce

Content-Security-Policy-Report-Only: script-src https://pay.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ 'self' https://payments.salesforce.com/ https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com blob: https://www.google.com/recaptcha/ https://js.stripe.com/ https://checkoutshopper-live.adyen.com/ import: https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ *.salesforce.com https://www.paypal.com/sdk/js 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://classedu.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D4W000001WPt2&networkId=0DMPE0000008y74&type=communities