default-src 'self' 'unsafe-inline' data: https://my.site.com https://externalsignature.moxis.cloud/ https://cdn.jsdelivr.net/; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://my.site.com https://externalsignature.moxis.cloud/ https://cdn.jsdelivr.net/; frame-ancestors https://my.site.com https://externalsignature.moxis.cloud/ https://cdn.jsdelivr.net/; form-action https://my.site.com https://externalsignature.moxis.cloud/ https://cdn.jsdelivr.net/; img-src 'self' 'unsafe-inline' data:;