Best practice for adding Content Security Policy with Quasar?

[chrissyast]

I need to implement Content-Security-Policy headers on my app. I want to be restrictive enough to block any potential malicious scripts from hackers etc. but still need to allow any scripts associated with Quasar.

What is the best way to achieve this?