staticwebapp config: add back CSP and allow unsafe-eval and unsafe-in…

…line

This adds the CSP back and also adds unsafe-eval and unsafe-inline which are
needed for the search functionality and theme settings.

Fixes #61

static/staticwebapp.config.json

@@ -1,8 +1,9 @@
 {
-  "globalHeaders": {
-    "Content-Type": "text/html; charset=UTF-8",
-    "Permissions-Policy": "geolocation=(), microphone=(), camera=()",
-    "X-Frame-Options": "SAMEORIGIN",
-    "X-Permitted-Cross-Domain-Policies": "none"
-  }
+	"globalHeaders": {
+		"Content-Type": "text/html; charset=UTF-8",
+		"Content-Security-Policy": "script-src 'self' 'unsafe-eval' 'unsafe-inline'",
+		"Permissions-Policy": "geolocation=(), microphone=(), camera=()",
+		"X-Frame-Options": "SAMEORIGIN",
+		"X-Permitted-Cross-Domain-Policies": "none"
+	}
 }