Content-Security-Policy: default-src 'self'; script-src 'self' *.titanos.tv *.comcast.com 'unsafe-eval'; connect-src 'self' *.apple.com *.cdn-apple.com *.mzstatic.com *.irdeto.com events.applemusic.com http://*:9009 http://*:56792 http://*:9888 ws://*:9888 ws://*:56792 ws://*:10415 ws://*:10016 ws://127.0.0.1:3473 data: blob:; img-src 'self' *.apple.com *.cdn-apple.com *.mzstatic.com events.applemusic.com android-webview-video-poster: data: blob:; style-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob:; media-src 'self' *.apple.com *.cdn-apple.com blob:; font-src 'self' *.cdn-apple.com; child-src 'self' *.apple.com *.cdn-apple.com *.mzstatic.com data: blob: