(feat): add CSP headers

composer.json

@@ -12,7 +12,8 @@
 	"require": {
 		"php": ">=8.1",
 		"roots/acorn": "^4.3",
-		"sentry/sentry-laravel": "^4.4"
+		"sentry/sentry-laravel": "^4.4",
+		"spatie/laravel-csp": "^2.10"
 	},
 	"require-dev": {
 		"larastan/larastan": "^2.9",

src/Http/Kernel.php

@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Yard\Nutshell\Http;
+
+use Illuminate\Contracts\Foundation\Application;
+use Illuminate\Routing\Router;
+use Roots\Acorn\Http\Kernel as AcornKernel;
+
+class Kernel extends AcornKernel
+{
+	public function __construct(Application $app, Router $router)
+	{
+		parent::__construct($app, $router);
+		$this->middleware[] = \Spatie\Csp\AddCspHeaders::class;
+	}
+}

src/helpers.php

@@ -20,6 +20,11 @@ function bootloader(): Bootloader
 		\Yard\Nutshell\Console\Kernel::class
 	);
 
+	$bootloader->getApplication()->bind(
+		\Roots\Acorn\Http\Kernel::class,
+		\Yard\Nutshell\Http\Kernel::class
+	);
+
 	$bootloader->getApplication()->bind(
 		\Roots\Acorn\Exceptions\Handler::class,
 		\Yard\Nutshell\Exceptions\Handler::class