Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self'; img-src 'self'; worker-src 'none'; frame-ancestors 'none'; form-action 'none'; block-all-mixed-content; report-uri https://o65548.ingest.sentry.io/api/4506711265902592/security/?sentry_key=349eef6246c1915147b0ff8e8f5d56e5;