le-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-encoding: gzip server: github.com x-github-request-id: D5EE:2762A2:739B1CC:6535453:69A80A19 X-Firefox-Spdy: h2