Content-Security-Policy: default-src 'self'; frame-ancestors https://*.exabel.com https://*.battlefinensemble.com; script-src 'self'; connect-src 'self' https://*.exabel.com https://sentry.io https://api.hsforms.com https://btqvgsubqqgwdhekczup.supabase.co; style-src 'self' 'unsafe-inline'; font-src 'self' data:; media-src 'self'; img-src 'self' https://*.exabel.com blob: data:; object-src 'none'; report-uri https://o205722.ingest.us.sentry.io/api/4511054855208960/security/?sentry_key=56cef7a90a75493b8d59f15129dc6362; report-to csp-endpoint