custom-csp.conf

location ^~ /sites/bb-docs/ {
    add_header Content-Security-Policy "
    default-src 'self';
    script-src 'self' *.dso.mil 'nonce-$cspNonce';
    script-src-elem 'self' *.dso.mil 'nonce-$cspNonce' unpkg.com;
    style-src 'self' *.dso.mil 'unsafe-inline';
    style-src-elem 'self' *.dso.mil 'unsafe-inline';
    img-src 'self' data: mediastream: blob: *.dso.mil img.shields.io 'nonce-$cspNonce';
    connect-src 'self' *.dso.mil 'nonce-$cspNonce';
    font-src 'self' *.dso.mil  'nonce-$cspNonce';
    object-src 'self' *.dso.mil 'nonce-$cspNonce';
    media-src 'self' *.dso.mil 'nonce-$cspNonce';
    form-action 'self' *.dso.mil;
    frame-src 'none';
    frame-ancestors 'none';" always;
}