Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data: img.shields.io javadoc.io www.sqlite.org www.postgresql.org www.happycoders.eu alistair.cockburn.us/ raw.githubusercontent.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.capire-matomo.cloud.sap cdn.jsdelivr.net;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;connect-src 'self' https://www.capire-matomo.cloud.sap https://huggingface.co https://cas-bridge.xethub.hf.co;frame-src 'self' data: *.youtube.com video.sap.com