Content-Security-Policy-Report-Only: frame-src https:; img-src https:
Content-Security-Policy: upgrade-insecure-requests