add CSP to CF pages projects

Author: AlexErrant

app-ugc/buildHeaders.ts

@@ -5,6 +5,7 @@ const contents = `/*
   Cross-Origin-Embedder-Policy: require-corp
   Cross-Origin-Opener-Policy: same-origin
   Cross-Origin-Resource-Policy: cross-origin
+  Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors ${process.env.VITE_APP_ORIGIN};
   ${hstsName}: ${hstsValue}`
 
 fs.writeFile('./dist/_headers', contents, (err) => {

app-ugc/deploy.sh

@@ -4,6 +4,6 @@
 set -euo pipefail # https://stackoverflow.com/a/2871034
 # set -x
 
-npx tsx --tsconfig ./tsconfig.deploy.json buildHeaders.ts
 [[ -f "env.sh" ]] && source env.sh
+npx tsx --tsconfig ./tsconfig.deploy.json buildHeaders.ts
 npx wrangler pages deploy ./dist --project-name app-ugc --branch main

app-ugc/example.env.sh

@@ -1 +1,2 @@
+export VITE_APP_ORIGIN=$VITE_PRODUCTION_APP_ORIGIN
 export CLOUDFLARE_ACCOUNT_ID=$cloudflareAccountId

app/buildHeaders.ts

@@ -5,6 +5,7 @@ const contents = `/*
   Cross-Origin-Embedder-Policy: require-corp
   Cross-Origin-Opener-Policy: same-origin
   Cross-Origin-Resource-Policy: cross-origin
+  Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none';
   ${hstsName}: ${hstsValue}`
 
 fs.writeFile('./dist/_headers', contents, (err) => {

hub-ugc/buildHeaders.ts

@@ -5,6 +5,7 @@ const contents = `/*
   Cross-Origin-Embedder-Policy: require-corp
   Cross-Origin-Opener-Policy: same-origin
   Cross-Origin-Resource-Policy: cross-origin
+  Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors ${process.env.VITE_HUB_ORIGIN};
   ${hstsName}: ${hstsValue}`
 
 fs.writeFile('./dist/_headers', contents, (err) => {

hub-ugc/deploy.sh

@@ -4,6 +4,6 @@
 set -euo pipefail # https://stackoverflow.com/a/2871034
 # set -x
 
-npx tsx --tsconfig ./tsconfig.deploy.json buildHeaders.ts
 [[ -f "env.sh" ]] && source env.sh
+npx tsx --tsconfig ./tsconfig.deploy.json buildHeaders.ts
 npx wrangler pages deploy ./dist --project-name hub-ugc --branch main

hub-ugc/example.env.sh

@@ -1 +1,2 @@
+export VITE_HUB_ORIGIN=$VITE_PRODUCTION_HUB_ORIGIN
 export CLOUDFLARE_ACCOUNT_ID=$cloudflareAccountId