tree 7328ae94e1c35298b27d542480d42dcff36d7203
parent 003301a24bad4cfe066bb1f5720243a3f7c45742
author Ed Tanous <ed@tanous.net> 1713113829 -0700
committer Ed Tanous <ed@tanous.net> 1713884309 +0000

Implement a Content-Security-Policy TODO

This TODO has been in bmcweb for a very long time.  Implement it.

W3 sets rules for what security policies apply to which content
types[1].  Reading through this, essentially CSP should only apply to
HTML files.

Tested: Unit tests pass.  Webui loads properly.  Chrome network window
Shows headers show up as expected.

[1] https://www.w3.org/TR/CSP2/#which-policy-applies

Change-Id: I5467d0373832668763c72a66da2a8872e07bfb58
Signed-off-by: Ed Tanous <ed@tanous.net>