Content-Security-Policy: default-src 'self';base-uri 'self';object-src 'none';frame-ancestors 'self';form-action 'self';script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: https:;connect-src 'self' https://moboo.ci https://resi.moboo.ci https://event.moboo.ci;script-src-attr 'none';upgrade-insecure-requests