Content-Security-Policy: default-src 'self' *.mspek.no https://storage.googleapis.com; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.statcounter.com *.googletagmanager.com *.mspek.no https://storage.googleapis.com; connect-src 'self' *.cloudfunctions.net wss://mspek-test.ey.r.appspot.com wss://enhanced-canyon-354609.ey.r.appspot.com *.google-analytics.com *.ingest.sentry.io *.sentry.io *.mspek.no https://storage.googleapis.com https://mspek.no; frame-ancestors 'self' *.mspek.no http://localhost:5173 http://localhost:8000; frame-src 'self'; img-src 'self' *.mspek.no https://storage.googleapis.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com https://cdn.jsdelivr.net data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com https://cdn.jsdelivr.net;