{
    "headers": [
      {
        "source": "/(.*)",
        "headers" : [
          {
            "key" : "Content-Security-Policy",
            "value" : "img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'"
          }
        ]
      }
    ]
  }