Content-Security-Policy: default-src 'self' https: http: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: blob:; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' https: http: data:; frame-src 'self' https: http:; connect-src * 'self' https://api.runpod.ai https://*.runpod.ai https://*.proxy.runpod.net https: http: wss: ws: blob:; img-src 'self' data: blob: https: http:; child-src 'self' https: http:; object-src 'none'; base-uri 'self';