Content-Security-Policy: default-src 'self' *.fontawesome.com data:; base-uri 'self'; img-src * 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' duotrope.com *.duotrope.com *.cloudflare.com hcaptcha.com cloudflare.hcaptcha.com stripe.com *.stripe.com platform.twitter.com *.fontawesome.com cdn.jsdelivr.net; form-action 'self' duotrope.com *.cloudflare.com *.stripe.com; frame-ancestors *; frame-src 'self' duotrope.com *.duotrope.com stripe.com *.stripe.com docs.google.com view.officeapps.live.com *.cloudflare.com platform.twitter.com; object-src 'none'; style-src 'self' 'unsafe-inline' duotrope.com *.duotrope.com *.cloudflare.com *.googleapis.com *.gstatic.com *.fontawesome.com; font-src 'self' *.fontawesome.com data: duotrope.com *.duotrope.com *.googleapis.com fonts.gstatic.com *.fontawesome.com; manifest-src 'self' duotrope.com *.duotrope.com; connect-src 'self' duotrope.com *.duotrope.com *.fontawesome.com cdn.jsdelivr.net *.cloudflare.com hcaptcha.com cloudflare.hcaptcha.com stripe.com *.stripe.com platform.twitter.com; report-uri /csp.aspx; report-to /csp.aspx;