Content-Security-Policy: script-src 'self' https://cdnjs.cloudflare.com; script-src-attr 'unsafe-hashes' 'sha256-1jAmyYXcRq6zFldLe/GCgIDJBiOONdXjTLgEFMDnDSM='; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com/css2; img-src 'self' https://api.2fa.directory https://cdnjs.cloudflare.com/ajax/libs/flag-icons/; font-src https://cdnjs.cloudflare.com https://fonts.gstatic.com/l/font; report-uri https://2factorauth.report-uri.com/r/d/csp/enforce;