Content-Security-Policy: frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' https://cdn.redoc.ly ;style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com;object-src 'none';frame-src 'self';child-src 'self';img-src 'self' data: validator.swagger.io;font-src 'self' https://fonts.gstatic.com/;connect-src 'self';manifest-src 'self';base-uri 'self';form-action 'self';media-src 'self';prefetch-src 'self';worker-src 'self' blob:;