Header set Content-Security-Policy "frame-ancestors 'self' *.microsoft.com *.office.com *.microsoft365.com *.live.com *.office365.com *.skooler.com"