Content Security Policy Header WHMCS

Recently implemented "Content Security Policy Header" on our site which uses whmcs. After that client complaining they are unable to pay invoice. On invoice page showing "Please wait" after clicking make payment.  and if we disable "Content Security Policy Header" Bitpay login iframe showing normally. 

Please can you tell what "Content Security Policy Header" we need to set?