Add content security policy to web app headers

[exalate-issue-sync]

See https://guides.18f.gov/engineering/security/content-security-policy/

QA Notes

null

DEV Notes

null

Design

null

See full ticket and images here: FECFILE-1908

[exalate-issue-sync]

akhorsand commented: [~accountid:712020:2a1493e5-adee-45bd-b27e-868a5c8d3f62] [~accountid:5b92c509d0b4022bdc51bdf4] if this is adding something to the headers, then can we get BAs and design involved? Or is this something more technical? What is the link for?

[exalate-issue-sync]

Todd Lees commented: [~accountid:61b0b42cd5986c006a9e1c94] I can work on updating this ticket. “headers” here refers to HTTP headers and not the ui page layout “header”. The ticket is to implement a security measure for the requests between the frontend app and the server. The link explains what the measure is and how to use it.