<script type="text/javascript" src="/assets/js/utils/selfsubmit.js"></script>

Content-Security-Policy: default-src 'self' data:; style-src 'self' 'unsafe-inline';
   img-src * data:; frame-src *; report-uri /pingid/ppm/csp-reports;