Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' data: https://fonts.gstatic.com;form-action 'self';frame-ancestors 'none';img-src 'self' data: blob: https:;object-src 'none';script-src 'self' https://apis.google.com https://www.googletagmanager.com https://widget.ybug.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;upgrade-insecure-requests;frame-src https://gen-lang-client-0157944114.firebaseapp.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://www.google-analytics.com https://region1.google-analytics.com https://*.ybug.io https://www.google.com/recaptcha/;worker-src 'self' blob: