duly / web/_headers · raw
/*  Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://1click.chaindefuser.com https://free.rpc.fastnear.com https://rpc.mainnet.fastnear.com https://rpc.mainnet.near.org https://test.rpc.fastnear.com https://rpc.testnet.fastnear.com https://rpc.testnet.near.org; base-uri 'none'; form-action 'none'; frame-ancestors 'none'  Referrer-Policy: no-referrer  X-Content-Type-Options: nosniff  Permissions-Policy: publickey-credentials-get=(self), publickey-credentials-create=(self)