https://developers.google.com/web/fundamentals/security/csp/?hl=ja nginx でCSP sites-available/default server { listen 443 ssl http2 default_server; server_name example.org; # More config here add_header Content-Security-Policy-Report-Only…