From c45488dea995a5e9145575570e4811e0731b74bf Mon Sep 17 00:00:00 2001
From: Amita Rajput <rajputamita78@gmail.com>
Date: Wed, 20 May 2026 02:39:09 +0530
Subject: [PATCH] feat: implement Content Security Policy headers (#139)

---
 vercel.json | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 vercel.json

diff --git a/vercel.json b/vercel.json
new file mode 100644
index 00000000..a30240f7
--- /dev/null
+++ b/vercel.json
@@ -0,0 +1,13 @@
+{
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        {
+          "key": "Content-Security-Policy",
+          "value": "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; connect-src 'self' https://cdn.jsdelivr.net; worker-src blob:; img-src 'self' blob: data:; media-src blob:;"
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file