Content-Security-Policy: default-src 'self'; script-src 'self' code.jquery.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' code.jquery.com; style-src-attr 'unsafe-inline'; img-src 'self' data: secure.gravatar.com code.jquery.com content.jquery.com static.jquery.com jquery.com jqueryui.com jquerymobile.com blog.jquery.com blog.jqueryui.com blog.jquerymobile.com; connect-src 'self' typesense.jquery.com *.jquerymobile.com; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; block-all-mixed-content ; report-to csp-endpoint; report-uri https://csp-report-api.openjs-foundation.workers.dev/; frame-src 'self' player.vimeo.com;