Content-Security-Policy: default-src 'self' blob:; style-src 'self' 'unsafe-inline' *.googleapis.com fonts.googleapis.com; script-src 'self' blob: maps.googleapis.com googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' *.googleapis.com *.google.com googleapis.com *.googleusercontent.com *.gstatic.com *.googleusercontent.com asi.securitytrails.com data: blob:; object-src 'none'; frame-ancestors 'self'; connect-src 'self' https://app.recordedfuture.com/ https://id.recordedfuture.com/ https://ase.recordedfuture.com https://graphql.recordedfuture.com/ https://apm-server-internal.recfut.com *.googleapis.com *.google.com *.gstatic.com asi.securitytrails.com data: blob:; frame-src 'self' blob: https://id.recordedfuture.com/