Content Security Policy for Jekyll blog hosted on Github
As of writing this post it was not possible to add a CSP in the http header for github.io pages. As an alternativ you can add a CSP in the HTML meta tag. The only limitation is that you can’t use frame-ancestors, report-uri, or sandbox features of CSP.
[Read More]