Content-Security-Policy: frame-ancestors 'self'; frame-src 'self' https://*.joppy.me https://*.merge.dev https://*.firebaseio.com  https://www.google.com https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net https://*.firebaseapp.com https://*.googletagmanager.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self'; form-action 'self' https://*.joppy.me; worker-src 'self' https://*.joppy.me blob:;