1 2
Content-Security-Policy-Report-Only: frame-src https:; img-src https: Content-Security-Policy: upgrade-insecure-requests