matchory
diff --git a/‎Caddyfile‎
Lines changed: 1 addition & 0 deletions b/‎Caddyfile‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎index.html‎
Lines changed: 3 additions & 3 deletions b/‎index.html‎
Lines changed: 3 additions & 3 deletions
@@ -34,6 +34,7 @@ http://localhost:2020 {
 http:// {
     root * /app/dist
     file_server
+    header Content-Security-Policy "default-src 'self'; connect-src {env.GRAPHQL_ENDPOINT}; style-src 'self' 'sha256-xGV5EQQkhfzt8q6nGkoKAAVcmITvYwkeAwFuMJcSIKE='; font-src data:"
 
     handle_path /__/config.js {
         header Content-Type application/javascript
 
@@ -17,14 +17,14 @@
             display: flex;
             align-items: center;
             justify-content: center;
-            font-size: 4rem;
+            font-size: 4rem
         }
     </style>
-    <script type="application/javascript" src="/__/config.js"></script>
+    <script crossorigin="anonymous" type="application/javascript" src="/__/config.js"></script>
 </head>
 
 <body>
 <div id="root"></div>
-<script type="module" src="./src/main.tsx"></script>
+<script type="module" async defer src="./src/main.tsx"></script>
 </body>
 </html>