Skipper Configuration

config.eskip

myapp: *
	  -> setResponseHeader("Content-Security-Policy","default-src 'none'; script-src 'self' 'unsafe-inline' cdn.jsdelivr.net; connect-src 'self'; img-src 'self' 'unsafe-inline' fastapi.tiangolo.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net; base-uri 'self'; form-action 'self'")
	  -> setResponseHeader("Strict-Transport-Security","max-age=31536000; preload")
	  -> setResponseHeader("X-Content-Type-Options","nosniff")
	  -> setResponseHeader("Referrer-Policy","same-origin")
	  -> "http://frontend:5173";