Content-Security-Policy

Sample output #1
<meta http-equiv=”Content-Security-Policy”
content=”
default-src ‘self’ ‘unsafe-inline’;
font-src ‘self’ https://url.com;
style-src ‘self’ ‘unsafe-inline’ https://url.com;
script-src ‘self’ ‘sha256-gSAFTnjCZPmQx1AtAQAYIU+/IL04OQhhbGWKojxHtCk=’ https://url.com;
img-src ‘self’ data:; manifest-src ‘self’;
connect-src ‘unsafe-inline’ https://url.com https://url.com;
object-src ‘none’;”>