مولّد CSP وترويسات الأمان

A Content Security Policy (CSP) restricts which hosts may load scripts, styles, images and connections. Companion headers such as X-Frame-Options and Referrer-Policy close other browser-side gaps. Pick the directives you need, add third-party hosts, and copy the resulting header block.