remove test Content-Security-Policy

netlify.toml

@@ -27,20 +27,4 @@
   [headers.values]
     X-Frame-Options = "SAMEORIGIN"
     X-XSS-Protection = "0"
-    X-Content-Type-Options = "nosniff"
-    Content-Security-Policy = """\
-      default-src 'self'; \
-      script-src 'self' \
-          https://*.google-analytics.com https://*.googletagmanager.com; \
-      style-src 'self' \
-          https://*.netlify.app https://fonts.googleapis.com https://www.youtube.com; \
-      object-src 'none'; \
-      base-uri 'self'; \
-      connect-src 'self'
-          https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; \
-      frame-src 'self'  https://www.youtube-nocookie.com https://www.youtube.com \
-          app.netlify.com; \
-      img-src 'self' data: https://*.netlify.app https://i.vimeocdn.com https://i.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com https://tile.openstreetmap.org; \
-      manifest-src 'self'; \
-      media-src 'self' \
-      """
+    X-Content-Type-Options = "nosniff"