(CSP) Content Security Policy Headers

routes.js

const { Router } = require('@layer0/core/router')

const ContentSecurityPolicy = `
  default-src 'self';
  script-src 'self' 'unsafe-eval' 'unsafe-inline' *.layer0.co;
  style-src 'self' 'unsafe-inline' *.googleapis.com;
  img-src * blob: data:;
  media-src 'none';
  connect-src *;
  font-src 'self' *.gstatic.com;
`;

new Router()
  .get("/:route", ({ setResponseHeader }) => {
    setResponseHeader("Content-Security-Policy", ContentSecurityPolicy.replace(/\n/g, ""));
  }
)