# Local image previews, OCR workers, and the OCR WebAssembly engine.
# Scope this policy to Cyberpwned rather than changing the site's global policy.
<IfModule mod_headers.c>
    Header unset Content-Security-Policy
    Header always unset Content-Security-Policy
    Header always set Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' blob:; font-src 'self'; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'none'"
</IfModule>
