// demo
Content-Security-Policy: default-src 'self';
  script-src 'self' 'nonce-f69d7d8e-a36e-4e' https://www.himango.com/ 'strict-dynamic';
  style-src 'self' 'nonce-f69d7d8e-a36e-4e' https://www.himango.com/;
  img-src 'self' https://www.himango.com/;
  object-src 'none';
  base-uri 'self';
  report-uri /csp-violation-report-endpoint