Content-Security-Policy: base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; object-src 'none'; form-action 'self'; font-src 'self' data:; connect-src 'self'; img-src 'self' 'unsafe-inline' data:;