Fix: Removes Quotes from CSP header urls

Removes quotes around urls in the CSP rules. Quoted urls don't work.

Add Option for CloudFront urls

Adds options for supporting Cloudfront urls as a default src. These are generated by Netlify's Optimization steps.

Add Report URL Input

Adds support for sending CSP Reports based on either an input or an environment variable.

Add Option for "Unsafe-Inline" Script tags.

Adds configuration options for unsafe-inline script tags. This should help get around the problems created by Netlify optimizing fonts and other assets, even if only "pretty urls" is turned on.

Feat: Adds "strict-dynamic" CSP header to scripts.

v0.0.1.alpha.04

bumps version to alpha.04

Fix: Fixes non-dynamic sources by adding quotes

The fallback sources were broken in the last release. This fixes them.

e.g. default-src self was fixed to default-src 'self'

fix: uses base64 instead of hex

Fixes the encoding for the hashes. Use base64 instead of hex.

Add Quotes to CSP Values

Adds quotes to CSP Values.