Content-Security-Policy: connect-src https: data: blob: 'self' wss://*.stream-io-api.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; img-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; media-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; default-src https: data: 'unsafe-inline' 'unsafe-eval'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors https://myprop.ch https://*.myprop.ch; frame-src https: blob: data: 'self'; worker-src blob: