src *; font-src 'self'; form-action *; img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' content-type: text/html; charset=UTF-8 server: Apache X-Firefox-Spdy: h2