ws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-encoding: gzip x-github-request-id: AD76:34EDCA:1D8A524:27E17AC:69A67F06 server: github.com X-Firefox-Spdy: h2