Content-Security-Policy: base-uri 'self';default-src 'none';font-src 'self' ;form-action 'self';frame-src 'self' https://www.instagram.com https://platform.instagram.com https://embed.acast.com/ https://player.vimeo.com/;img-src 'self' https://ssl-nrk.tns-cs.net/*;media-src 'self';object-src 'none';script-src 'self' https://cdn.matomo.cloud/met.matomo.cloud/matomo.js https://www.google-analytics.com/analytics.js https://platform.instagram.com https://www.instagram.com ;style-src 'self' 'unsafe-inline';connect-src 'self' met.matomo.cloud/matomo.php https://www.met.no/;frame-ancestors 'self';