| Content-Security-Policy-Report-Only | default-src https: 'unsafe-inline' 'unsafe-eval'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; frame-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: 'unsafe-inline' 'unsafe-eval'; object-src https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' https: data:; media-src 'self' https: data: blob:; img-src 'self' https: data: blob:; report-uri https://csp-logging.jimdo-platform.net/?w=4055705&p=2&s=web |