default-src 'self' @HrmDomain;
child-src 'self' @HrmDomain;
connect-src 'self' @HrmDomain;
font-src 'self' @HrmDomain;
frame-src 'self' @HrmDomain;
img-src 'self' data: @HrmDomain;
manifest-src 'self' @HrmDomain;
media-src 'self' @HrmDomain;
object-src 'self' @HrmDomain;

script-src 'self' 'unsafe-eval' 'unsafe-inline' @HrmDomain;
style-src 'self' 'unsafe-inline' @HrmDomain;

worker-src 'self' @HrmDomain;
base-uri 'self' @HrmDomain;

form-action 'self' @HrmDomain;
frame-ancestors  'self' @HrmDomain;
navigate-to 'self' @HrmDomain;