Set "minimal" Content-Security-Policy HTTP header

This is the minimum configuration required to render the home page for the website

config/_default/config.toml

@@ -43,4 +43,5 @@ enableGitInfo = true
 [[server.headers]]
   for = '/**'
   [server.headers.values]
+    Content-Security-Policy = "default-src 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self' data: https://cdnjs.cloudflare.com; img-src 'self' data: https://*.technologytoolbox.com; script-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com https://www.google-analytics.com; style-src 'self' https://cdnjs.cloudflare.com;"
     X-Frame-Options = 'DENY'

static/staticwebapp.config.json

@@ -1,5 +1,6 @@
 {
   "globalHeaders": {
+    "Content-Security-Policy": "default-src 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self' data: https://cdnjs.cloudflare.com; img-src 'self' data: https://*.technologytoolbox.com; script-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com https://www.google-analytics.com; style-src 'self' https://cdnjs.cloudflare.com;",
     "X-Frame-Options": "DENY"
   }
 }