<--dangerously-skip-permissions Security: CSP moved to vercel.json HTTP headers -->