ist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-encoding: gzip x-github-request-id: 95A0:24A95D:462543D:6066D41:69A67AF0 server: github.com X-Firefox-Spdy: h2