Content-Security-Policy: default-src https:; font-src https: data:; img-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: https://pagead2.googlesyndication.com https://www.googletagmanager.com; style-src https: 'unsafe-inline';  connect-src https: wss: data: https://pagead2.googlesyndication.com https://connect.facebook.net https://log.cookieyes.com; worker-src https: blob:; media-src https: data: blob:; frame-src https: blob:; report-to csp-endpoint;