Content-Security-Policy: script-src 'self' https://js.hcaptcha.com;frame-src 'self' https://newassets.hcaptcha.com;img-src 'self' data: https://skm.idmelon.com https://storage.googleapis.com;style-src 'self' 'unsafe-inline';font-src 'self' data:;connect-src 'self' https://skm.idmelon.com https://hcaptcha.com https://*.hcaptcha.com https://*.sentry.io;default-src 'self';base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests