Content-Security-Policy: frame-ancestors 'self' *.stoneshot.com

Content-Security-Policy-Report-Only: default-src *; object-src 'none'; style-src * 'unsafe-inline'; script-src * 'unsafe-inline';