Content-Security-Policy: default-src * data: blob: 'self';worker-src * data: blob: 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'self' blob:;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;style-src-elem 'self' https: blob:  'unsafe-inline';img-src 'self' * data: blob: *.sentry.io sentry.io *.stripe.com stripe.com *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.tinymce.com *.tiny.cloud *.launchdarkly.com *.posthog.com https://cdn.prod.notable.engineering https://checkin.pcmahealth.org;script-src 'self' 'unsafe-eval' *.sentry.io sentry.io *.stripe.com stripe.com *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.tinymce.com *.tiny.cloud *.launchdarkly.com *.posthog.com https://cdn.prod.notable.engineering https://checkin.pcmahealth.org;connect-src 'self' https://app.notablehealth.com *.sentry.io sentry.io *.stripe.com stripe.com *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.tinymce.com *.tiny.cloud *.launchdarkly.com *.posthog.com https://cdn.prod.notable.engineering https://checkin.pcmahealth.org;frame-ancestors 'self' https://vendorservices.epic.com chrome-extension://nikbjinanfbmjmoaegdhhbeihgeeddcj chrome-extension://hdgoooiiinahjoahcfaeihjogkplhfea;form-action 'self'