Content-Security-Policy: script-src 'nonce-PbkG8WcFxjI8j9SFHcdmeLHHmDqUoCWxQDfsbnvYBmk' 'strict-dynamic'; style-src 'nonce-S1ryGikDpCkIfO8RUvIn3r9oPITT3-fKUB9j4zCqyYE'; connect-src 'self' https://*.hcaptcha.com https://api.stripe.com https://s.hex.pm; default-src 'self'; img-src 'self' data: https://www.gravatar.com https://q.stripe.com; form-action 'self'; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://asciinema.org https://*.stripe.com https://readme.hex.pm; base-uri 'self'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; object-src 'none';