Content-Security-Policy: default-src 'self' blob:;script-src 'nonce-PDNBi6BG' *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net https://*.facebook.net 'self' blob:;style-src 'self' 'unsafe-inline' https://static.whatsapp.net data: blob:;connect-src 'self' https://*.whatsapp.com data: blob:;font-src https://*.fbcdn.net https://static.whatsapp.net data:;img-src https://*.fbcdn.net https://*.whatsapp.net 'self' data: blob:;media-src 'self' data: blob:;child-src 'self' data: blob:;frame-src whatsapp: 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src 'nonce-PDNBi6BG' *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net https://*.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;, frame-ancestors https://*.whatsapp.com https://whatsapp.com;