Content-Security-Policy: default-src wss: https: 'unsafe-inline'; style-src 'unsafe-inline' https:;