The Content-Security-Policy header must not be overridden

https://github.com/apache/tsfile/blob/054e8a380e83be9aa804132cdbdce578185d7763/src/.vuepress/public/.htaccess#L9

The Content-Security-Policy header must not be overridden.

There is now a standard way to add local exceptions to the CSP:

https://infra.apache.org/tools/csp.html

You need to get approval before adding any domains. Also please document such approval in the .htaccess file.

The following are already included in the default:

```
https://www.apachecon.com/
https://www.communityovercode.org/
https://*.apache.org/
https://apache.org/
https://*.scarf.sh/
```

Start by inspecting src/.vuepress/public/.htaccess at line 9 and read the CSP guidance at https://infra.apache.org/tools/csp.html. Confirm which local exceptions are needed and whether they are covered by the listed defaults. Done means the CSP header is not overridden and any approved added domains are documented in .htaccess.

Written by the indexing model from the issue text.