add CSP

_headers

@@ -0,0 +1,2 @@
+/*
+  Content-Security-Policy: default-src 'self'; manifest-src *; child-src 'none'; worker-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src *; img-src * data: blob:; font-src https://fonts.gstatic.com; media-src * blob:; script-src 'self';

package.json

@@ -42,9 +42,11 @@
   },
   "browserslist": {
     "production": [
-      ">0.2%",
-      "not dead",
-      "not op_mini all"
+      "chrome >= 67",
+      "edge >= 79",
+      "firefox >= 68",
+      "opera >= 54",
+      "safari >= 14"
     ],
     "development": [
       "last 1 chrome version",

webpack.config.js

@@ -38,6 +38,7 @@ const config = {
       patterns: [
         { from: "public/manifest.json" },
         { from: "public/robots.txt" },
+        { from: "_headers" },
       ],
     }),
     new HtmlWebpackPlugin({