Content-Security-Policy: upgrade-insecure-requests;default-src https: data: wss: blob: 'self';style-src 'unsafe-eval' 'unsafe-inline' 'self' https://*.trustedshops.com https://*.gstatic.com https://*.smassets.net https://*.surveymonkey.com;object-src 'none';media-src 'self' https://www.youtube.com https://player.vimeo.com https://cf-media.sndcdn.com blob: data:;base-uri 'self';frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.office.com https://*.office365.com;script-src 'unsafe-eval' 'unsafe-inline' https: blob: 'self' 'strict-dynamic' 'nonce-JLI0KxkGa/yz8zy3K2Iv1A=='