Content-Security-Policy | script-src 'self' https://dmoj.ml *.dmojsites2fpbeve.onion https://cdn.mathjax.org https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; default-src; style-src 'self' https://dmoj.ml *.dmojsites2fpbeve.onion data: 'unsafe-inline'; connect-src wss://dmoj.ca *.dmojsites2fpbeve.onion 'self' https://dmoj.ml https://maps.googleapis.com; child-src; reflected-xss filter; form-action 'self'; img-src 'self' data: https://dmoj.ml *.dmojsites2fpbeve.onion https://camo.dmuser.ml https://www.gravatar.com https://cdn.mathjax.org https://www.google-analytics.com https://stats.g.doubleclick.net https://slack.dmoj.ca; frame-ancestors 'self'; frame-src 'self' https://en.m.wikipedia.org https://www.youtube.com https://www.google.com https://docs.google.com; object-src https://dmoj.ml; media-src; font-src https://dmoj.ml *.dmojsites2fpbeve.onion https://cdn.mathjax.org |