Content-Security-Policy: script-src 'self';                                                                 frame-src 'self' *.maropost.com;                                                                 object-src 'none';                                                                 frame-ancestors 'self' https://*.maropost.com http://localhost:8081;