{
  "img-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "https: data:"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "https: data:"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "https: data:"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'self'"
    }
  ],
  "frame-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'self'"
    }
  ],
  "font-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "'self' https: data:"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'self' https: data:"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'self' https: data:"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'self' https: data:"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'self'"
    }
  ],
  "style-src": [
    {
      "pattern": "^/portal/login(Page)?",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/logout",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/portal/logout(\\.jsp)?",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/forgotpassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/framework/error/.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/mobileAuthSuccessHandler/.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/changepassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/setpassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/mfa_verification_code.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/mfa_resend_verification_code.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/saml/idp_selection.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'unsafe-inline' 'self'"
    }
  ],
  "object-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "https:"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "https:"
    }
  ],
  "script-src": [
    {
      "pattern": "^/portal/login(Page)?",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/logout",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/portal/logout(\\.jsp)?",
      "enforcedValue": "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/forgotpassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/framework/error/.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/mobileAuthSuccessHandler/.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/changepassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/setpassword.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/mfa_verification_code.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/personalization/mfa_resend_verification_code.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/saml/idp_selection.*",
      "enforcedValue":  "'self'",
      "enforcementEnvironment": "AUTHORIZATION"
    },
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'self' 'unsafe-inline' 'unsafe-eval'"
    }
  ],
  "child-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "'none'"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'none'"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'none'"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'none'"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'none'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'none'"
    }
  ],
  "worker-src": [
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/process/.*",
      "reportOnlyValue": "'self'"
    }
  ],
  "default-src": [
    {
      "pattern": "^/webapi/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/admin/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/design/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/design",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/logs/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/logs",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/quickapps/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/quickapps",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/api/.*",
      "reportOnlyValue": "'self'"
    },
    {
      "pattern": "^/rest/.*",
      "reportOnlyValue": "'self'"
    }
  ]
}