Content-Security-Policy: object-src 'none'; base-uri 'self'; script-src https://*.go-mpulse.net https: 'unsafe-inline' 'unsafe-eval'; frame-src https:; frame-ancestors https:; form-action 'self'; default-src https://*.go-mpulse.net https://*.akstat.io https: 'unsafe-inline' 'unsafe-eval' data: blob: mediastream: ws: wss:;