Content-Security-Policy: upgrade-insecure-requests, frame-ancestors *; report-uri /_/commcsp?disposition=enforce

Content-Security-Policy-Report-Only: font-src *.force.com https://fonts.gstatic.com/ 'self' https://stats.g.doubleclick.net https://35blqf1aden92dok8un11nz1-wpengine.netdna-ssl.com https://api-cdn.usw2.pure.cloud blob: https://apps.usw2.pure.cloud wss://webmessaging.usw2.pure.cloud https://www.googletagmanager.com https://www.dotloop.com https://www.google-analytics.com *.salesforce.com data: https://dotloop.force.com; report-to sfdc-csp-ep; report-uri https://dotloop.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00Dd0000000e3gM&networkId=0DM6T000001DYVF&type=communities