Content-Security-Policy: default-src 'none';base-uri 'self';style-src 'self' 'unsafe-inline' https: fonts.googleapis.com;font-src 'self' https: data:;img-src 'self' https: data: app.icepanel.io s.icepanel.io thumbnail.icepanel.io;media-src 'self' https:;script-src blob: app.icepanel.io s.icepanel.io apis.google.com www.youtube.com/iframe_api www.youtube.com/s/player/ uptime.betterstack.com/widgets/;form-action 'none';connect-src https: wss: api-js.mixpanel.com *.ingest.sentry.io;manifest-src 'self' https:;frame-src https: youtube.com www.youtube.com;frame-ancestors 'self' https://s.icepanel.io/;upgrade-insecure-requests;