Content-Security-Policy: connect-src 'none' Content-Security-Policy: trusted-types tt-policy-name-1 tt-policy-name-2 tt-policy-name-3