Content-Security-Policy: connect-src {{location[scheme]}}://{{host}}.:{{location[port]}}