Content-Security-Policy: script-src 'self' *.gmx.com/ *.uicdn.com/; base-uri 'self'; child-src 'none'; connect-src 'self' *.gmx.com/ https://*.sentry.io; font-src *.ui-portal.de/ci/; frame-ancestors 'none'; frame-src 'self' *.ui-portal.de/ *.gmx.com/; img-src 'self' *.ui-portal.de/ *.gmx.com/ *.uicdn.com/; media-src 'none'; object-src 'none'; style-src 'self' 'unsafe-inline'; worker-src 'none'; upgrade-insecure-requests; report-uri https://csp-report.ui-portal.de/report; report-to csp-endpoint;