// demo
Content-Security-Policy: default-src 'self';
  script-src 'self' 'nonce-4d61f7fe-97fe-44' https://www.himango.com/ 'strict-dynamic';
  style-src 'self' 'nonce-4d61f7fe-97fe-44' https://www.himango.com/;
  img-src 'self' https://www.himango.com/;
  object-src 'none';
  base-uri 'self';
  report-uri /csp-violation-report-endpoint