Content-Security-Policy: frame-ancestors 'self' *.apple.com; connect-src 'self' *.cdn-apple.com *.apple.com ; default-src 'self' *.apple.com *.cdn-apple.com *.apple-mapkit.com; img-src *.apple.com *.cdn-apple.com *.apple-mapkit.com *.apple.com.cn data: 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval' *.apple.com *.cdn-apple.com *.apple-mapkit.com blob:; frame-src 'self' *.apple.com *.cdn-apple.com *.apple-mapkit.com; media-src 'self' *.apple.com data:;style-src 'unsafe-inline' *.apple.com *.cdn-apple.com *.apple-mapkit.com