Content-Security-Policy: default-src 'self' https://*.simplifed.com https://*.s3.us-west-2.amazonaws.com/ http://localhost:8000/graphql http://localhost:8000 https://s3.us-west-2.amazonaws.com;    script-src 'self' 'unsafe-inline' 'unsafe-eval';  style-src 'self' 'unsafe-inline';  img-src 'self' blob: data:;  font-src 'self' data:;  object-src 'none';  base-uri 'self';  form-action 'self';  frame-ancestors 'none';  upgrade-insecure-requests;