angular.headers.Content-Security-Policy: {
    default-src: "* data: blob: 'self' gap://ready"
    connect-src: "*"
    img-src: "* data: blob:"
    style-src: "* 'unsafe-inline'"
    script-src: "* 'unsafe-inline' 'unsafe-eval' https://app-registry.edu-sharing.com"
    font-src: "'self' data:"
    frame-ancestors: "https://serlo.edusharing-81.81.134.76.15.243.nip.io"
}
security.sso.lti.enabled: true