Content-Security-Policy: default-src 'self'; img-src 'self' blob: data: https://vercel.live/ https://vercel.com https://api-frameworks.vercel.sh https://sockjs-mt1.pusher.com/ https://emoji.slack-edge.com/ https://vercel.fides-cdn.ethyca.com/ https://hebbkx1anhila5yf.public.blob.vercel-storage.com/ https://xurtccytrzafbfk3.public.blob.vercel-storage.com/ https://gvsmhepiuiax2e6y.public.blob.vercel-storage.com/ https://4o3mjgkuedjhm5we.public.blob.vercel-storage.com/ https://ss5vlswhqmiddtca.public.blob.vercel-storage.com/ https://7oslg1lqcbxvjpfm.public.blob.vercel-storage.com/ https://9z6zzmtcb9nt0fnu.public.blob.vercel-storage.com/ https://pdgvvgmkdvyeydso.public.blob.vercel-storage.com/ https://rzlr8f5n71kfl4us.public.blob.vercel-storage.com/ https://blobs.vusercontent.net https://uploads.vusercontent.net https://avatars.githubusercontent.com; script-src 'self' blob: 'unsafe-inline' https://vercel.live/ https://vercel.com https://vercel.fides-cdn.ethyca.com/ https://va.vercel-scripts.com/v1/ https://js.stripe.com/ https://unpkg.com/react-scan/dist/auto.global.js https://cdn.jsdelivr.net/npm/react-scan/dist/auto.global.js https://cdn.jsdelivr.net/npm/@huggingface/ *.cr-relay.com; style-src 'self' 'unsafe-inline' data: https://vercel.live/ https://vercel.fides-cdn.ethyca.com/ https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com https://vercel.live https://assets.vercel.com data:; connect-src 'self' https://v0.dev https://v0.app https://vercel.live/ https://vercel.com https://*.pusher.com/ https://blob.vercel-storage.com https://*.blob.vercel-storage.com https://blobs.vusercontent.net https://uploads.vusercontent.net wss://*.pusher.com/ wss://*.vercel.run https://fides-vercel.us.fides.ethyca.com/api/v1/ https://cdn-api.ethyca.com/location https://privacy-vercel.us.fides.ethyca.com/api/v1/ https://vercel.com/.well-known/otel/metrics https://huggingface.co/onnx-community/ https://cas-bridge.xethub.hf.co/xet-bridge-us/ https://cdn.jsdelivr.net/npm/@huggingface/ *.cr-relay.com https://*.s3.us-east-1.amazonaws.com; frame-src 'self' http://localhost:* https://*.vusercontent.net/ https://*.lite.vusercontent.net/ https://generated.vusercontent.net/ https://*.vercel.run/ https://*.vercel.app/ https://*.vercel.sh/ https://vercel.live/ https://vercel.com https://vercel.fides-cdn.ethyca.com/ https://js.stripe.com/ https://*.accounts.dev https://*.clerk.accounts.dev https://ops.askchapter.org https://*.workos.com; frame-ancestors 'self' https://notion.site https://embed.notion.co notion://www.notion.so https://www.notion.so https://notion.so https://*.notion.so notion://notion.so https://inflight.co https://*.inflight.co https://v0-git-shu-e7sf.vercel.sh http://localhost:3000; media-src 'self' https://hebbkx1anhila5yf.public.blob.vercel-storage.com/ https://xurtccytrzafbfk3.public.blob.vercel-storage.com/ https://pdgvvgmkdvyeydso.public.blob.vercel-storage.com/ https://rzlr8f5n71kfl4us.public.blob.vercel-storage.com/ https://blobs.vusercontent.net https://uploads.vusercontent.net; report-uri /api/csp-report;