Add content security policy support about pulse HOT 2 CLOSED

report-uri ... ; 
default-src 'none' ; 
connect-src 'self' ; 
font-src 'self' https://fonts.bunny.net/figtree/files/ ; 
frame-src 'none' ; 
img-src 'self' data: https://gravatar.com/avatar/ https://unavatar.io/ ; 
manifest-src 'self' ; 
script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' ; 
style-src 'self' 'unsafe-inline' https://fonts.bunny.net/css ; 
form-action 'self' ; 
frame-ancestors 'none'

<?php

namespace App\Csp\Policies;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Vite;
use Spatie\Csp\Directive;
use Spatie\Csp\Keyword;
use Spatie\Csp\Policies\Basic;
use Symfony\Component\HttpFoundation\Response;

class LaravelPulsePolicy extends Basic
{
    public function configure(): void
    {
        $this
            ->addDirective(Directive::DEFAULT, Keyword::NONE)
            ->addDirective(Directive::CONNECT, Keyword::SELF)
            ->addDirective(Directive::FONT, [Keyword::SELF, 'https://fonts.bunny.net/figtree/files/'])
            ->addDirective(Directive::FRAME, Keyword::NONE)
            ->addDirective(Directive::IMG, [Keyword::SELF, 'data: https://gravatar.com/avatar/ https://unavatar.io/'])
            ->addDirective(Directive::MANIFEST, Keyword::SELF)
            ->addDirective(Directive::SCRIPT, [Keyword::SELF, Keyword::UNSAFE_INLINE, Keyword::UNSAFE_EVAL])
            ->addDirective(Directive::STYLE, [Keyword::SELF, Keyword::UNSAFE_INLINE, 'https://fonts.bunny.net/css'])
            ->addDirective(Directive::FORM_ACTION, Keyword::SELF)
            ->addDirective(Directive::FRAME_ANCESTORS, Keyword::NONE);
    }
}

    'middleware' => [
        'web',
        Authorize::class,
        Spatie\Csp\AddCspHeaders::class . ':' . App\Csp\Policies\LaravelPulsePolicy::class,
    ],