custom-headers.json

{
  "headers": {
    "Content-Security-Policy": "default-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob:; worker-src 'self' blob:; connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io; img-src 'self' data:; style-src * 'unsafe-inline'; font-src *; object-src 'none'; base-uri 'self'; form-action 'self';"
  }
}