Content-Security-Policy: default-src 'self' https://*.apple.com; img-src 'self' https://*.apple.com https://*.apple-mapkit.com https://*.mzstatic.com data: blob:; style-src 'self' https://*.apple.com https://*.apple-mapkit.com 'unsafe-inline'; script-src 'self' https://*.apple.com https://*.apple-mapkit.com blob: 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-p7PoC97FO+Lu90RNjGWxhbm13yALSR4xzV8vaDhaQBo=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'unsafe-eval'; connect-src 'self' https://*.apple.com https://*.apple-mapkit.com https://*.applemusic.com https://*.mzstatic.com https://mediaservices.cdn-apple.com https://*.push.apple.com wss://*.push.apple.com; media-src 'self' https://*.apple.com https://*.applemusic.com https://*.mzstatic.com blob:; child-src 'self' https://*.apple.com https://apple.songshift.com music: musics: blob: itms: itmss:; frame-ancestors 'none'; block-all-mixed-content; report-uri /api/csp-report