Content-Security-Policy: default-src 'unsafe-inline' 'unsafe-eval' data: https://*; connect-src 'self' https://*; media-src https://* http://download.milestonesys.com/;

Content-Security-Policy-Report-Only: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; report-uri https://www.milestonesys.com/csp/report