Content-Security-Policy: frame-src blob: https://runbox.com https://js.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://video.runbox.com/; script-src https://runbox.com https://support.runbox.com/ https://video.runbox.com/ https://js.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.hcaptcha.com 'unsafe-inline' 'unsafe-eval'; object-src https://runbox.com; img-src 'self' data: https://* http://*; media-src 'self'; child-src https://runbox.com blob:; font-src 'self'; connect-src 'self' wss://runbox.com https://sentry.runbox.com https://video.runbox.com/ https://js.stripe.com https://gravatar.com https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'