From b7084bd01bd3f5cab0a66792c09c329a3ef11052 Mon Sep 17 00:00:00 2001
From: Collin Barrett <collinbarrett@users.noreply.github.com>
Date: Fri, 14 Jun 2024 15:04:02 -0500
Subject: [PATCH] =?UTF-8?q?feat(web):=20=E2=9C=A8=F0=9F=94=90=20add=20Cont?=
 =?UTF-8?q?ent-Security-Policy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/staticwebapp.config.json | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/web/staticwebapp.config.json b/web/staticwebapp.config.json
index 0187b16d5..dcc203d30 100644
--- a/web/staticwebapp.config.json
+++ b/web/staticwebapp.config.json
@@ -2,5 +2,8 @@
   "navigationFallback": {
     "rewrite": "/index.html"
   },
-  "trailingSlash": "never"
-}
+  "trailingSlash": "never",
+  "globalHeaders": {
+    "Content-Security-Policy": "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; manifest-src 'self';"
+  }
+}
\ No newline at end of file