Content-Security-Policy: default-src 'self' https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.google-analytics.com https://*.google.com; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://plausible.io https://*.googlesyndication.com https://*.googleadservices.com https://*.google.com https://*.gstatic.com https://*.google https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self' blob:; connect-src 'self' blob: https://newsapi.org https://api.allorigins.win https://corsproxy.io https://*.corsproxy.io https://api.rss2json.com https://*.googleads.g.doubleclick.net https://*.googlesyndication.com https://*.google.com https://*.adtrafficquality.google https://plausible.io https://*.google; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://fonts.googleapis.com https://*.googlesyndication.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https: https://*.googlesyndication.com https://*.googleadservices.com https://*.google.com https://*.doubleclick.net https://*.google; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://dexscreener.com https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google https://*.google-analytics.com; object-src 'none'; base-uri 'self';