# response_headers

name: content-security-policy
value:
  base-uri 'none';object-src 'self' data:;script-src 'sha256-cn+m4pgNe3IRKICUaY3gG23Aofqr4BdxhBFi1A5Tg+Y=' 'sha256-ZNumia+5/9kqsTG18Bq9sp+4TDGre4ghlK5+/rgNZig=' 'sha256-TySAq9mfDJ7IPyttG9+RdOB+TGNDhey59XsGfFpw4vg=' 'sha256-Z2dLC8i/Z5SzG2LduMOBUlHHkTB1aQopojs5Dc1YwEA=' 'sha256-qBkywo7yasFP9P+ErkRH/VdHjUi3aNK7UdAAz1Ba674=' 'sha256-8vBHcrHltWkpbEVC4QKjHrFBgyZb+X32zKqeQ6l0qpo=' 'sha256-B7uwDAzv07fJBQ5Lrjd46hGfThZBHGY3KL3UGDKesA4=' 'sha256-btEfwm6PixrxsF3K/8pY/T+UZt6LkRdcbu5YRf2LJm0=' 'sha256-yRswpmov+AxTUvccky36ROK1GAliE/DVj3bVarRGS84=' 'sha256-oGbglMu4QQRoFeXBhCr2IZC3GZbvLqMD7Hn5z1nSqo0=' 'sha256-lWik/DTuzflALuwIdFoEa27YoO6Y3MkOtMVAwrTYdDU=' 'sha256-xkftsoET0xiFlHC4L/q7sdhNzuq8J6eTf7yjpinxIGw=' 'sha256-iovF5sV99VSTddV41IxK+2yeaUaTuft4hhMiFOaWvoA=' 'sha256-xnAQd9z3v53faS6N35LQru4VuYLDtInU9q9RCEQWLE8=' 'sha256-hUY9Z5K+ulj+moK1t1x0Nu/7rq0Bc3V9vcoElZvdeSk=' 'sha256-rG1ZiaWjXVtTxVly847cpV+Egnfaexpi2PH4o33yKbk=' 'sha256-JmOHOv6ifyNkf6A9XIvAo4+VC6+cLPQFhaG0C65KwC8=' 'sha256-Mfijc5ng1HSrdP0aV51ub1qul3u+ZbfdQDivCCTwaVQ=' 'sha256-2ACKbDhNAL28wjS7x6MmQJaCH4wvqFeL5ELgFzRVrN4=' 'sha256-n6vTNe/6PubA3aTuumlTB0MBB3tozgwz6+WptMm2h8w=' 'sha256-Sv7AYquCRjd3kM8iVFVsYJ8uZcMhOhfL3Xrf7al1kkQ=' 'sha256-F0c8w6FaizCiJOXVBPyYARX2vzPYnd8/e/z5pN5Aotg=' 'sha256-6RrYx2D6uzyYEZrjGxisfByNQVj5A9dnUOnfbQrcH2Y=' 'sha256-9d383ZP7Tg8tQVad/QXHU6HneRA+WBF+Vv41J/E1O08=' 'sha256-UgVdMIW7pAYdJ5YUqs1QVQ9YRFjHuu+aGUQVSSUhAnY=' 'sha256-kFggNugiMlQgV8PgG2kfw+T/rL/RehA9c+dmmzpWkiI=' 'sha256-pqlUlNTywujDA0M+2j5LuHLrM+4/Nxyom1mMfCNph9I=' 'sha256-n199oP83p72gzdQNIs6HAk2gSv0psuOcW1hZZ5RVcyM=' 'sha256-EDj7W9PPlDOnfrxwlZJboGk7wwu+J3wk8oTwWfffEBc=' 'sha256-v85YtynazVNzwFHrNo1gjzjnYnAxaCZPR1KMVQHFNdU=' 'sha256-u35GM1kxpA8/DCeeZy0G6Pl2pa1oXUebKf7VoPnTPsA=' 'sha256-E0z5qgk9mtw2Gim81djyDxPJ9GFPolS4P/T2yVJQbkY=' 'sha256-XB8/cQ54gItx6qZ4K1UBeWn+49o1h2TqGfoau1d16EA=' 'sha256-NPOLFnhPFX/MPAmGqCOwC7ti3S/fjVLfZVbdVKo0qg4=' 'sha256-NPOLFnhPFX/MPAmGqCOwC7ti3S/fjVLfZVbdVKo0qg4='  https://a.localmonero.co 'sha256-kU270cRNgDiWGJyZygoB0f3LgtdWDmBQqyk4wxYOYq8=' 'sha256-/6SBPqW+GW+//4nlXX6Y1nR9dWlh0gsQJ6KK71djH6A=' 'self' https://maps.googleapis.com 'unsafe-eval';worker-src 'self' blob:;default-src 'self' https://a.localmonero.co;img-src 'self' blob: data:;connect-src 'self' https://api.mapbox.com https://a.localmonero.co https://cdn.jsdelivr.net/npm/redoc@next/bundles/redoc.standalone.js https://blockchain.info https://mempool.space https://blockstream.info https://api.blockcypher.com https://api.coingecko.com https://api.coincap.io https://bitcoiner.live https://kowalski.fiatfaucet.com:443 https://dewitte.fiatfaucet.com:443 https://node.portemonero.com:443 https://node.sethforprivacy.com:443 https://monerod.slvit.us:443 https://xmr.yemekyedim.com:18081 https://xmr.yemekyedim.com:18089 https://xmrr.deb8.eu.org:443 https://node.sethforprivacy.com:18089 https://xmr.bunkerlab.net:443 https://chad.fiatfaucet.com:443 https://localhost:18081;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'


name: content-security-policy-report-only
value:
  default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.gstatic.com a.localmonero.co localmonero.co ; form-action 'none' ; frame-ancestors 'self' ; report-uri /csp_report


