*
'self'
'none'
'unsafe-inline'
'unsafe-eval'
'strict-dynamic'
'report-sample'
http:
https:
data:
mediastream:
blob:
filesystem: