feat: remove csp

apps/frontend/next.config.js

@@ -1,18 +1,5 @@
 // @ts-check
 
-const cspHeader = `
-default-src 'self' chrome-extension:;
-script-src 'self' 'unsafe-eval' 'unsafe-inline' chrome-extension:;
-style-src 'self' 'unsafe-inline' chrome-extension:;
-img-src 'self' blob: data: chrome-extension:;
-font-src 'self' chrome-extension:;
-object-src 'none';
-base-uri 'self';
-form-action 'self';
-frame-src 'self' chrome-extension: https:;
-upgrade-insecure-requests;
-`;
-
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   experimental: {
@@ -32,19 +19,6 @@ const nextConfig = {
       },
     ],
   },
-  async headers() {
-    return [
-      {
-        source: '/(.*)',
-        headers: [
-          {
-            key: 'Content-Security-Policy',
-            value: cspHeader.replace(/\n/g, ''),
-          },
-        ],
-      },
-    ];
-  },
   async redirects() {
     return [
       {