Security Headers (4)strict-transport-security: max-age=63072000; includeSubDomains; preload; alwaysx-content-type-options: nosniffx-frame-options: DENYcontent-security-policy: default-src 'self' * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; font-src 'self' *; connect-src 'self' *
