Add Content-Security-Policy to the UI

[vanillajonathan]

Is your feature request related to a problem?

Banana Cake Pop sends no Content-Security-Policy HTTP header to the browser.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

The solution you'd like

Add a Content-Security-Policy (CSP) HTTP header to Banana Cake Pop in order to increase the security.

Product

Banana Cake Pop

[vanillajonathan]

https://docs.microsoft.com/en-us/aspnet/core/blazor/fundamentals/startup?view=aspnetcore-6.0#control-headers-in-c-code