Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-hashes' 'sha256-gySCkhURv2yiGiM3EljhVVuvUAOV3t+tA33bLwxKGno=' 'sha256-2/YI3gjp4eM4SJGzeoiaVXsn2oytUnTmy+a//GcQf94=' 'sha256-hSWPvMd5ykOPWvNnbcty4LklrlSXs8obuKF+tP7STKg=' 'sha256-d3mc9RADjjLwKpxc/0lAVhY6XzAX62Mzscfj8fo16gI=' 'sha256-fLTdiTg6rM65saP46T8WsbV+eflb0NbBGSIJ8536Ang=' 'sha256-BN07yaKRoJdPk5CPTywtWnAcUb5zgvyK62wsRk5DYlQ=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-SaCkFfPruIdTXT8/97JArQmGxiJAL2o4bBDvSgJ5y3Q=' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://apis.google.com https://www.gstatic.com; connect-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://firestore.googleapis.com https://firebasestorage.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://script.google.com https://script.googleusercontent.com https://challenges.cloudflare.com wss://*.firebaseio.com; frame-src 'self' https://challenges.cloudflare.com https://itdbtcom.firebaseapp.com https://maps.google.com https://www.google.com; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://script.google.com https://script.googleusercontent.com