Content-Security-Policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-78f9280b-56b5-4e5f-b4dc-a5b33871478a' 'wasm-unsafe-eval' https://www.google.com/recaptcha/api.js;