From 88ccfdad6e1b3fbbe6eb8b6dbcfd1a08b1522975 Mon Sep 17 00:00:00 2001 From: Nolan Lawson Date: Sat, 6 Mar 2021 15:21:26 -0800 Subject: [PATCH] fix: add permissions policy (#1984) does not really do anything right now, but fun to experiment with --- bin/build-vercel-json.js | 4 +++ vercel.json | 70 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 74 insertions(+) diff --git a/bin/build-vercel-json.js b/bin/build-vercel-json.js index 533fdf6b..d58ff7fe 100644 --- a/bin/build-vercel-json.js +++ b/bin/build-vercel-json.js @@ -63,6 +63,8 @@ const SCRIPT_CHECKSUMS = [inlineScriptChecksum] .map(_ => `'sha256-${_}'`) .join(' ') +const PERMISSIONS_POLICY = "sync-xhr 'none'; document-domain 'none';" + const HTML_HEADERS = { 'cache-control': 'public,max-age=3600', 'content-security-policy': [ @@ -82,6 +84,8 @@ const HTML_HEADERS = { ].join(';'), 'referrer-policy': 'no-referrer', 'strict-transport-security': 'max-age=15552000; includeSubDomains', + 'feature-policy': PERMISSIONS_POLICY, + 'permissions-policy': PERMISSIONS_POLICY, 'x-content-type-options': 'nosniff', 'x-download-options': 'noopen', 'x-frame-options': 'DENY', diff --git a/vercel.json b/vercel.json index 9e5078d8..533a7e0a 100644 --- a/vercel.json +++ b/vercel.json @@ -48,6 +48,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -61,6 +63,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -74,6 +78,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -87,6 +93,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -100,6 +108,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -113,6 +123,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -126,6 +138,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -139,6 +153,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -153,6 +169,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -167,6 +185,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -181,6 +201,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -195,6 +217,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -209,6 +233,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -222,6 +248,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -235,6 +263,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -249,6 +279,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -262,6 +294,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -275,6 +309,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -289,6 +325,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -302,6 +340,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -315,6 +355,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -328,6 +370,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -341,6 +385,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -355,6 +401,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -369,6 +417,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -383,6 +433,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -396,6 +448,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -409,6 +463,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -422,6 +478,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -435,6 +493,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -449,6 +509,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -462,6 +524,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -475,6 +539,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -488,6 +554,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", @@ -502,6 +570,8 @@ "content-security-policy": "default-src 'self';script-src 'self' 'sha256-KyBprPAmQSsb0xKVHQ92TdDFstGIcvsFR64DqTzHxzs=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self'", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", + "feature-policy": "sync-xhr 'none'; document-domain 'none';", + "permissions-policy": "sync-xhr 'none'; document-domain 'none';", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY",