Content-Security-Policy: default-src 'none'; connect-src 'self' https://*.block64.com https://*.google-analytics.com; img-src 'self' https://*.block64.com https://*.google-analytics.com data:; worker-src 'self' blob:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.google-analytics.com https://*.gstatic.com https://*.googletagmanager.com https://status.block64.com; style-src 'unsafe-inline' 'self'; font-src 'self' https://*.block64.com https://fonts.gstatic.com data:; frame-src https://*.statuspage.io https://copilotstudio.microsoft.com