script-src: 'self' 'unsafe-inline' https://airport.landinghub.cloud https://airport-dev.rockman.andco.group connect-src: 'self' img-src: 'self' media-src: 'self'