Content-Security-Policy: default-src https: 'self'; font-src 'self' https: data:; style-src https: 'unsafe-inline' cdn.shopifycloud.com; script-src https: 'unsafe-inline' 'unsafe-eval' cdn.shopifycloud.com; img-src 'self' https: data: cdn.shopifycloud.com; upgrade-insecure-requests; frame-ancestors https: *.myshopify.com admin.shopify.com; connect-src 'self' https: wss://*.userpilot.io https://*.userpilot.io