_headers

/*
Content-Security-Policy: 
  default-src 'self'; 
  script-src 'self' 'unsafe-inline' https://instant.page https://chromedino.com https://*.hearthis.at https://cdn.jsdelivr.net; 
  style-src 'self' 'unsafe-inline' https://*.hearthis.at; 
  connect-src 'self' https://chromedino.com https://*.hearthis.at https://cdn.jsdelivr.net https://tecnik.bio.link; 
  img-src 'self' https://www.svgrepo.com https://play.vsthemes.org;
  frame-ancestors 'self' https://chromedino.com https://*.chromedino.com https://*.hearthis.at https://*.hearthis.at; 
  media-src 'self' data: blob:; 
  frame-src 'self' https://chromedino.com https://*.hearthis.at;
Cross-Origin-Opener-Policy: same-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Cache-Control: max-age=604800