The Content-Security-Policy header must not be overridden

https://github.com/apache/apisix-website/blob/0435d6f0eb5b8c674e0d5acb36eb705f92a7c425/.htaccess#L21

The Content-Security-Policy header must not be overridden.

There is now a standard way to add local exceptions to the CSP:

https://infra.apache.org/tools/csp.html

Please update the .htaccess file accordingly.

Start with the .htaccess file at the linked line and review the Apache CSP guidance at infra.apache.org/tools/csp.html. Update the header handling so the Content-Security-Policy header is not overridden and local exceptions use the documented standard. Done means the .htaccess change follows that guidance.

Written by the indexing model from the issue text.