Content-Security-Policy: script-src 'nonce-361bb5a5c1ba75c78bb166da5d88994c1ca2dcf650bb928c0ee3f70dc8c549ad' 'strict-dynamic'; object-src 'none'; base-uri 'self'; upgrade-insecure-requests;