Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src *; child-src *; frame-ancestors *;_headers file (auto-generated) is not working for a static pages deployment:/**/* as a prefix on the preceding line. Annoying because of the automations that will need to change, but workable.