Content-Security-Policy: upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: podcasts: com.apple.podcasts: itmss: itms-podcast: https://*.apple.com; connect-src 'self' http: https: blob: podcasts: com.apple.podcasts: itmss: itms-podcast:; img-src 'self' data: https://*.apple.com https://*.mzstatic.com; media-src * blob: