Content-Security-Policy: upgrade-insecure-requests; base-uri 'self'; default-src 'self' https://www.recaptcha.net data:; script-src 'self' 'unsafe-inline' https://www.google.com https://www.recaptcha.net https://www.gstatic.com https://www.gstatic.cn; img-src https: data: blob:; object-src 'none'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com ;frame-src https://www.google.com https://www.recaptcha.net;frame-ancestors 'self' https://distribute.notified.com;