Content-Security-Policy: default-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; connect-src 'self' https://uploadthingstatus.com https://*.amazonaws.com https://*.r2.cloudflarestorage.com https://unpkg.com https://cdn.jsdelivr.net https://*.ufs.sh https://*.ingest.uploadthing.com https://*.clerk.com https://*.clerk.services https://clerk.uploadthing.com; font-src 'self'; frame-src 'self' https://vercel.live; img-src 'self' blob: data: https://utfs.io https://*.ufs.sh https://img.clerk.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vercel.live https://*.clerk.com https://*.clerk.services https://clerk.uploadthing.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob: