Content-Security-Policy

base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' https: 'self' 'unsafe-inline' 'nonce-Q+S/z3ITDQUPs8TW1PXcpQ==' 'strict-dynamic'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; default-src 'self' data: inline: blob: *.rsm.govt.nz rsm.govt.nz *.mbie.govt.nz dc.services.visualstudio.com *.analysis.windows.net atlas.microsoft.com basemaps.linz.govt.nz content.powerapps.com app.powerbi.com *.pbidedicated.windows.net *.blob.core.windows.net *.google-analytics.com *.browser-intake-datadoghq.com fonts.googleapis.com fonts.gstatic.com *.azureedge.net res.cdn.office.net static2.sharepointonline.com *.koordinates.com; img-src 'self' data: blob:; form-action 'self'; frame-ancestors 'none'; sandbox allow-forms allow-scripts allow-same-origin allow-popups allow-downloads; block-all-mixed-content

charset

utf-8

viewport

width=device-width,initial-scale=1

theme-color

#000000

stylesheet

https://fonts.googleapis.com/css?family=Fira+Sans|Roboto|Roboto+Mono

stylesheet

/ui/static/css/main.09580ac5.css