Merge pull request steam-bell-92#1301 from Siddh2024/fix/894-add-csp-headers

fix: add Content Security Policy meta tags to all web pages (steam-bell-92#894)

Author: steam-bell-92

web-app/404.html

@@ -7,6 +7,7 @@
   <meta name="robots" content="noindex, nofollow">
   <meta name="color-scheme" content="dark light">
   <meta id="themeColorMeta" name="theme-color" content="#0f172a">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'">
   <title>404 — Page Not Found | Python Mini Projects</title>
   <link rel="icon" href="assets/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">

web-app/faq.html

@@ -6,6 +6,7 @@
     <meta name="description" content="Frequently Asked Questions about Python Mini Projects — contributions, requirements, GSSoC participation, and running projects locally.">
     <meta name="color-scheme" content="dark light">
     <meta id="themeColorMeta" name="theme-color" content="#0f172a">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'">
     <meta property="og:type" content="website">
     <meta property="og:url" content="https://steam-bell-92.github.io/python-mini-project/faq.html">
     <meta property="og:title" content="FAQ - Python Mini Projects">

web-app/games.html

@@ -9,6 +9,7 @@
     />
     <meta name="color-scheme" content="dark light" />
     <meta id="themeColorMeta" name="theme-color" content="#0f172a" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'" />
 
     <!-- Open Graph / Facebook -->
     <meta property="og:type" content="website" />

web-app/index.html

@@ -9,6 +9,7 @@
     />
     <meta content="dark light" name="color-scheme" />
     <meta content="#0c0f1a" id="themeColorMeta" name="theme-color" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'" />
     <meta content="Python Mini Projects — Web Edition" property="og:title" />
     <meta
       content="Interactive games, math visualizations, and utilities—no install required."

web-app/math.html

@@ -9,6 +9,7 @@
     />
     <meta name="color-scheme" content="dark light" />
     <meta id="themeColorMeta" name="theme-color" content="#0f172a" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'" />
 
     <!-- Open Graph / Facebook -->
     <meta property="og:type" content="website" />

web-app/privacy-policy.html

@@ -4,6 +4,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="Read the Privacy Policy of py.mini(). Learn how we protect user privacy, minimize data tracking, and store state natively in local storage.">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'">
 
     <meta property="og:type" content="website">
     <meta property="og:url" content="https://steam-bell-92.github.io/python-mini-project/privacy-policy.html">

web-app/terms-condition.html

@@ -3,6 +3,7 @@
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'">
     <title>Terms of Service - Python Mini Projects</title>
     <style>
         /* Base Layout & Exact Homepage Match Theme Colors */

web-app/utilities.html

@@ -9,6 +9,7 @@
     />
     <meta name="color-scheme" content="dark light" />
     <meta id="themeColorMeta" name="theme-color" content="#0f172a" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://pyodide-cdn2.iodide.io; base-uri 'self'; form-action 'self'" />
 
     <!-- Open Graph / Facebook -->
     <meta property="og:type" content="website" />