pbakaus_impeccable/tests/oracle/workspaces/ctx-csp-append-string/next.config.mjs

const csp = "default-src 'self'; script-src 'self'; connect-src 'self'";
export default {
  async headers() {
    return [{ source: "/(.*)", headers: [{ key: "Content-Security-Policy", value: csp }] }];
  },
};