Content-Security-Policy | default-src 'self'; script-src 'self' http://* https://*; connect-src * 'self' http://* https://*; img-src data: 'self' http://* https://*; style-src 'self' 'unsafe-inline' http://*.bootstrapcdn.com https://*.bootstrapcdn.com; media-src 'self' http://res.cloudinary.com https://res.cloudinary.com http://*.imgur.com https://*.imgur.com http://*.giphy.com https://*.giphy.com; frame-src 'self' http://* https://*; font-src 'self' http://*.gstatic.com https://*.gstatic.com http://*.bootstrapcdn.com https://*.bootstrapcdn.com; object-src 'none'; |