[docsy] Configure Google Custom Search Engine but leave it disabled (#92)

Author: chalin

hugo.yaml

@@ -83,7 +83,9 @@ params:
       [Funding](/docs/project/funding/) |
     # from_year: 2024
   github_repo: &repo https://github.com/theupdateframework/theupdateframework.io
-  gcs_engine_id: 011217106833237091527:la2vtv2emlw # CUSTOMIZE # FIXME get an ID for the starter?
+  ## 2024-10-05 Disabling search until we agree on a viable solution. For context
+  ## see https://github.com/theupdateframework/theupdateframework.io/pull/92
+  # gcs_engine_id: 06ecafa260afd40f9 # Also see layouts/partials/hooks/head-end.html
   privacy_policy: https://www.linuxfoundation.org/legal/privacy-policy
   ui:
     navbar_logo: true

layouts/partials/hooks/head-end.html

@@ -0,0 +1 @@
+<script type="text/javascript" async src="https://cse.google.com/cse.js?cx={{ .Site.Params.gcs_engine_id }}"></script>

netlify.toml

@@ -16,7 +16,7 @@ to = "https://theupdateframework.github.io/specification/:splat"
 [[headers]]
   for = "/*"
   [headers.values]
-    Content-Security-Policy = "default-src 'self' code.jquery.com fonts.googleapis.com fonts.gstatic.com use.fontawesome.com app.netlify.com netlify-cdp-loader.netlify.app youtube.com; frame-src youtube.com www.youtube.com"
+    Content-Security-Policy = "default-src 'self' code.jquery.com fonts.googleapis.com fonts.gstatic.com cse.google.com www.google.com use.fontawesome.com app.netlify.com netlify-cdp-loader.netlify.app youtube.com; frame-src youtube.com www.youtube.com"
     X-Frame-Options = "deny"
     X-Content-Type-Options = "nosniff"
     Referrer-Policy = "no-referrer-when-downgrade"