Content-Security-Policy: default-src 'self' https://orpts.xactware.com:443 https://orpts.xactware.com https://www.google.com https://sso.verisk.com https://fonts.gstatic.com https://service.force.com https://veriskpropertyestimatingsolutions.my.site.com; object-src 'self' https://orpts.xactware.com:443 https://sso.verisk.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.gstatic.com https://orpts.xactware.com:443 https://orpts.xactware.com https://www.google.com; connect-src 'self' https://sso.verisk.com https://www.googletagmanager.com https://*.salesforce.com https://*.site.com https://*.salesforce-scrt.com; img-src 'self' https://sso.verisk.com https://www.googletagmanager.com https://ok2static.oktacdn.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://sso.verisk.com https://service.force.com https://*.salesforce.com https://*.site.com; base-uri 'self'; script-src-elem 'self' https://www.google.com https://www.gstatic.com https://sso.verisk.com https://www.googletagmanager.com https://service.force.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.site.com https://*.salesforce-scrt.com https://*.force.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com