netlify.toml

[[headers]]
for = "/*"
[headers.values]
Content-Security-Policy = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://aac.saavncdn.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://c.saavncdn.com http://www.w3.org https://www.jiosaavn.com https://fontawesome.com data:; connect-src 'self' https://github.com https://lowkey-backend.vercel.app https://www.jiosaavn.com https://aac.saavncdn.com https://twitter.com https://x.com https://facebook.com https://en.wikipedia.org; media-src 'self' https://aac.saavncdn.com blob:"
X-Content-Type-Options = "nosniff"
X-XSS-Protection = "1; mode=block"
X-Frame-Options = "DENY"
Referrer-Policy = "no-referrer-when-downgrade"
Permissions-Policy = "geolocation=(), microphone=()"
Strict-Transport-Security = "max-age=31536000; includeSubDomains; preload"