Content-Security-Policy: default-src 'self' https://ipapi.co https://maps.google.com/ https://www.google.com/ https://europe-west2-lockit-website.cloudfunctions.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com;