add csp

Author: abe-hu

astro.config.mjs

@@ -15,9 +15,6 @@ const isLocalDevelopment = process.env.NODE_ENV === 'development';
 export default defineConfig({
   server: {
 		port: DEV_PORT,
-		headers: {
-			"Content-Security-Policy": "default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests",
-		}
 	},
 	output: "static",
 	base: '/',

src/components/hero.astro

@@ -22,7 +22,7 @@ import Container from "@components/container.astro";
         </h1>
         <p
           class="text-lg mt-4 max-w-lg text-slate-600 [text-wrap:balance] text-center lg:text-start">
-          1 centralized platform that standardizes the development, deployment, and execution of frontend experiences within a unified app shell and shared infrastructure.
+          A centralized platform that standardizes the development, deployment, and execution of frontend experiences within a unified app shell and shared infrastructure.
         </p>
         <div
           class="mt-6 flex flex-col sm:flex-row sm:justify-center lg:justify-start gap-3">

vercel.json

@@ -0,0 +1,13 @@
+{
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        {
+          "key": "Content-Security-Policy",
+          "value": "default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
+        }
+      ]
+    }
+  ]
+}