add csp

Author: abe-hu

astro.config.mjs

@@ -15,6 +15,9 @@ const isLocalDevelopment = process.env.NODE_ENV === 'development';
 export default defineConfig({
   server: {
 		port: DEV_PORT,
+		headers: {
+			"Content-Security-Policy": "default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests",
+		}
 	},
 	output: "static",
 	base: '/',