feat: adding security headers to improve observatory score

astro.config.mjs

@@ -257,7 +257,7 @@ export default defineConfig({
 				clientsClaim: true,
 				inlineWorkboxRuntime: true,
 				skipWaiting: true,
-				globIgnores: ["**_redirects**"],
+				globIgnores: ["**_redirects**", "**_headers**"],
 				globPatterns: ["**/*.js", "**/*.css"],
 				runtimeCaching: [{
 					urlPattern: new RegExp('.*'),

public/_headers

@@ -0,0 +1,5 @@
+/*
+  X-Frame-Options: DENY
+  X-XSS-Protection: 1; mode=block
+  X-Content-Type-Options: nosniff
+  Content-Security-Policy: default-src 'self';