chore(HTTP): add headers allowing external scripts

1 files changed, 10 insertions, 0 deletions

diff --git a/static/_headers b/static/_headers
new file mode 100644
index 00000000..a96d80e5
--- /dev/null
+++ b/static/_headers
@@ -0,0 +1,10 @@
+/*
+  Content-Security-Policy:
+    script-src 'self'
+      https://remark.guhub.cn
+      https://umami.guhub.cn
+      https://static.cloudflareinsights.com
+      'unsafe-inline'
+      'unsafe-eval';
+    img-src 'self' data: https://remark.guhub.cn;
+    connect-src 'self' https://remark.guhub.cn;