Content-Security-Policy

script-src Keyword —
'report-sample'
script-src Nonce —
'nonce-1nyLiMFitwjrkWYO_5y2-w'
script-src Keyword —
'unsafe-inline'
object-src Keyword —
'none'
base-uri Keyword —
'self'
worker-src Host —
worker-src Host —
worker-src Keyword —
'script'

Content-Security-Policy-Report-Only

No report-only CSP headers found.