Content-Security-Policy: base-uri 'none'; default-src 'self'; img-src 'self' data: cdn.interledger.app; connect-src 'self' *.pusher.com wss://*.pusher.com *.dinitcs.com dinitcs.com; form-action 'self'; frame-ancestors 'none'; frame-src 'self' interledger.app *.sandbox.gatehub.net *.gatehub.net *.chimoney.io *.sandbox.chimoney.io *.stripe.com withpersona.com sdk.staging.fiant.io sdk.platform.fiant.io api.sardine.ai forms.staging.fiant.io; object-src 'none'; script-src 'self' 'unsafe-inline' cdn.withpersona.com cdn.interledger.app sdk.staging.fiant.io sdk.platform.fiant.io api.sardine.ai; style-src 'self' 'unsafe-inline' 'unsafe-hashes' cdn.interledger.app; font-src 'self' cdn.fynbos.app cdn.interledger.app; worker-src 'self' blob:;