# response_headers

name: content-security-policy
value:
  block-all-mixed-content; default-src 'none'; base-uri 'none'; form-action 'self'; connect-src 'self' ws: wss:; style-src 'self' https: 'unsafe-inline'; script-src 'self'; worker-src 'self'; manifest-src 'self'; font-src 'self' https:; media-src 'self' https:; img-src 'self' data: https://user-images.githubusercontent.com, default-src 'self' blob: rtmp:; script-src 'self' https://code.jquery.com/ https://vjs.zencdn.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://vjs.zencdn.net 'unsafe-inline'; frame-src 'self' blob: https://lainchan.org/ https://kiwiirc.com; child-src 'self' blob: https://lainchan.org/ https://kiwiirc.com; img-src 'self' data: blob:;media-src 'self' blob: rtmp: rtmp://lainchan.org/show/&stream https://lainchan.org/ https://lainchan.org:8080  https://radio.lainchan.org; connect-src 'self' https://radio.lainchan.org https://lainchan.org:8080;font-src 'self' data: application;object-src 'self' https://vjs.zencdn.net;worker-src 'self' blob: ;


name: content-security-policy
value:
  default-src 'self' blob: rtmp:; script-src 'self' https://code.jquery.com/ https://vjs.zencdn.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://vjs.zencdn.net 'unsafe-inline'; frame-src 'self' blob: https://lainchan.org/ https://kiwiirc.com; child-src 'self' blob: https://lainchan.org/ https://kiwiirc.com; img-src 'self' data: blob:;media-src 'self' blob: rtmp: rtmp://lainchan.org/show/&stream https://lainchan.org/ https://lainchan.org:8080  https://radio.lainchan.org; connect-src 'self' https://radio.lainchan.org https://lainchan.org:8080;font-src 'self' data: application;object-src 'self' https://vjs.zencdn.net;worker-src 'self' blob: ;


