Content-Security-Policy: default-src 'self';      script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;      connect-src 'self'  https:;      style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;      img-src 'self' blob: data: https: *.public.blob.vercel-storage.com;      media-src 'self' blob: data: https: *.public.blob.vercel-storage.com;      font-src 'self' https://fonts.googleapis.com;      frame-src 'self' https:;      object-src 'none';      base-uri 'self';      form-action 'self';      frame-ancestors 'none';      upgrade-insecure-requests;