Content-Security-Policy-Report-Only | default-src 'none'; script-src 'none'; object-src 'none'; style-src 'none'; img-src 'none'; media-src 'none'; frame-src 'none'; font-src 'none'; connect-src 'none'; report-uri http://csp.iseclab.org/cgi-bin/csp.cgi?type=regular&rsrc=is, default-src *; script-src * 'unsafe-inline'; style-src * 'unsafe-inline'; report-uri http://csp.iseclab.org/cgi-bin/csp.cgi?type=eval&rsrc=is, default-src *; script-src * 'unsafe-eval'; style-src *; report-uri http://csp.iseclab.org/cgi-bin/csp.cgi?type=inline&rsrc=is |