Content-Security-Policy: img-src https://{{host}}:{{ports[https][0]}}