chore(HTTP): add headers allowing external scripts

Former-commit-id: ca353279421ad458b0dd18fca305301b2e8a4fba

1 files changed, 10 insertions, 0 deletions

diff --git a/static/_headers b/static/_headers
new file mode 100644
index 00000000..a96d80e5
--- /dev/null
+++ b/static/_headers
@@ -0,0 +1,10 @@
+/*
+  Content-Security-Policy:
+    script-src 'self'
+      https://remark.guhub.cn
+      https://umami.guhub.cn
+      https://static.cloudflareinsights.com
+      'unsafe-inline'
+      'unsafe-eval';
+    img-src 'self' data: https://remark.guhub.cn;
+    connect-src 'self' https://remark.guhub.cn;