Add CSP & Cache Control headers (rilldata#2478)

* Add CSP & Cache Control headers

.github/workflows/cloud-admin.yml

@@ -3,7 +3,8 @@ on:
   push:
     tags:
       - "*"
-    branches: ["main"]
+    branches:
+      - "main"
     paths:
       - ".github/workflows/cloud-admin.yml"
       - "web-admin/**"
@@ -43,4 +44,5 @@ jobs:
           enable-pull-request-comment: false
           enable-commit-comment: true
           overwrites-pull-request-comment: true
+          netlify-config-path: ./netlify.toml
         timeout-minutes: 1

netlify.toml

@@ -0,0 +1,10 @@
+# This should be used for docs also
+[[headers]]
+  for = "/*"
+  [headers.values]
+    Content-Security-Policy = "default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:"
+    Permissions-Policy = "geolocation=(),midi=(),sync-xhr=(self),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"
+    Referrer-Policy = "no-referrer"
+    X-Frame-Options = "SAMEORIGIN"
+    X-Content-Type-Options = "nosniff"
+