The Content-Security-Policy header must not be overridden

https://github.com/apache/dubbo-website/blob/78c1b68d80ebb7d8571f4d5a390b8ccb82cce46f/.htaccess#L10

The Content-Security-Policy header must not be overridden.

There is now a standard way to add local exceptions to the CSP:

https://infra.apache.org/tools/csp.html

You need to get approval before adding any domains. Also please document such approval in the .htaccess file.

The following are already included in the default:

```
https://www.apachecon.com/
https://www.communityovercode.org/
https://*.apache.org/
https://apache.org/
https://*.scarf.sh/
```

Open .htaccess at the linked revision and inspect line 10, then read the Apache CSP guidance at infra.apache.org/tools/csp.html. Confirm that the existing header is not overridden; any required local domain exception should have approval and that approval documented in .htaccess.

Written by the indexing model from the issue text.