The Content-Security-Policy header must not be overridden

[sebbASF]

https://github.com/apache/mynewt-site/blob/6b7e6859b14fb6b7551b8df736b43ffc0379a9cd/.htaccess#L3

The Content-Security-Policy header must not be overridden.

There is now a standard way to add local exceptions to the CSP:

https://infra.apache.org/tools/csp.html

Please update the .htaccess file accordingly.

Please note that the policy says that any exceptions must have been approved, and a reference to the approval must be commented in the .htaccess file