Security Headers (4)content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requestsstrict-transport-security: max-age=15552000; includeSubDomainsx-content-type-options: nosniffx-frame-options: SAMEORIGIN
