csp.html

{{- with site.Data.website.external_domains -}}
<meta http-equiv="Content-Security-Policy"
      content="
        default-src 'self' {{ delimit . " " }}
        {{ if not hugo.IsProduction }}'unsafe-inline'{{ end }}
        {{ if site.Params.search.active }}'wasm-unsafe-eval'{{ end }};
      " />
{{- end -}}