Content-Security-Policy: base-uri 'self'; report-uri https://o4508469207040000.ingest.us.sentry.io/api/4508474076758016/security/?sentry_key=c8465d3ef299e77266c567d3d790d3a3; script-src 'nonce-DeOx-_DWNE0Zzod6tV8GBXX1Tl6nNgDHY2rHQjRXs7U' 'strict-dynamic'; style-src 'nonce-xvOSEMWQke4oSRjqTaxz1P97yrrfL_RcAYZzR6CE4qk'; connect-src 'self' https://*.hcaptcha.com https://api.stripe.com https://s.hex.pm; default-src 'self'; img-src 'self' data: https://www.gravatar.com https://q.stripe.com; form-action 'self'; report-to csp-endpoint; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://asciinema.org https://*.stripe.com; object-src 'none';