_headers

/*
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.googletagmanager.com https://challenges.cloudflare.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://www.google.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com/ https://www.gstatic.com *.cloudflareinsights.com https://d3js.org https://cdn.datatables.net https://ajax.cloudflare.com *.grafana.net https://kit.fontawesome.com; worker-src 'self' blob:; 
Permissions-Policy: camera=(), microphone=(), geolocation=(), accelerometer=(), magnetometer=()
strict-transport-security: max-age=15552000;
frame-ancestors 'none'
style-src: 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com ;
img-src: 'self' www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://*.xposedornot.com;
connect-src: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.xposedornot.com;