csp.html

{{- with site.Data.website.external_domains -}}
<meta
  http-equiv="-Content-Security-Policy"
  content="default-src 'self' {{ delimit . " " }} {{ if not hugo.IsProduction }}'unsafe-inline'{{ end }};{{ if site.Params.search.active }} img-src * 'self' data: https:;{{ end }}"/>
{{- end -}}