Default-src * 'unsafe-inline' 'unsafe-eval' July 8, 2019 16 32 64 128 Default src * unsafe inline unsafe eval Default src self unsafe inline unsafe eval Default src https data unsafe inline unsafe eval