Content-Security-Policy-Report-Only | default-src 'self'; script-src 'self' 'nonce-8f39d4dd-26a8-4acc-b5cc-e8d34cb5ecdc' www.google-analytics.com maps.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: www.google-analytics.com https://scontent.cdninstagram.com https://*.gstatic.com https://res.cloudinary.com https://*.googleusercontent.com https://*.googleapis.com https://*.miles.no https://*.miles.in https://photos.smugmug.com; child-src 'self'; connect-src 'self'; report-uri https://miles.report-uri.io/r/default/csp/reportOnly; object-src 'none' |