default-src 'self'
    http://localhost:*
    https://localhost:*;

script-src 'self' 'unsafe-inline' 'unsafe-eval'
    http://localhost:*
    https://localhost:*;

script-src-elem 'self' 'unsafe-inline'
    http://localhost:*
    https://localhost:*
    https://t1.daumcdn.net
    https://www.youtube.com
    https://s.ytimg.com;

worker-src 'self' data: blob:
    http://localhost:*
    https://localhost:*;

img-src 'self' data: blob:
    http:
    https:;

style-src 'self' 'unsafe-inline'
    http://localhost:*
    https://localhost:*;

font-src 'self' data:
    http://localhost:*
    https://localhost:*;

connect-src 'self'
    ws://localhost:*
    wss://localhost:*
    http://localhost:*
    https://localhost:*
    https://api.ipify.org
    https://t1.daumcdn.net
    https://postcode.map.daum.net
    https://handstack.kr
    https://www.youtube.com
    https://www.youtube-nocookie.com;

frame-src 'self'
    http://localhost:*
    https://localhost:*
    https://t1.daumcdn.net
    https://postcode.map.daum.net
    https://handstack.kr;

object-src 'none';

base-uri 'self';

frame-ancestors 'self'
    http://localhost:8282
    http://localhost:8420
    http://localhost:8421
    https://handstack.kr;
