fix(netlify): fix GIT_SUBMODULE_STRATEGY indent + add security headers (#220)

Updated security headers and added strict transport security.

Signed-off-by: Igor <romanchaa997@gmail.com>

Author: romanchaa997

netlify.toml

@@ -6,7 +6,7 @@
   NODE_VERSION = "18"
   GIT_LFS_ENABLED = "false"
   PNPM_FLAGS = "--no-frozen-lockfile"
-    GIT_SUBMODULE_STRATEGY = "none"
+  GIT_SUBMODULE_STRATEGY = "none"
 
 # Build settings with correct pnpm commands
 [context.production]
@@ -27,12 +27,8 @@
   for = "/*"
   [headers.values]
     X-Frame-Options = "DENY"
-    X-XSS-Protection = "1; mode=block"
     X-Content-Type-Options = "nosniff"
     Referrer-Policy = "strict-origin-when-cross-origin"
-    Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: https:; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:;"
-
-[[headers]]
-  for = "/assets/*"
-  [headers.values]
-    Cache-Control = "public, max-age=31536000, immutable"
+    Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https:"
+    Permissions-Policy = "camera=(), microphone=(), geolocation=()"
+    Strict-Transport-Security = "max-age=31536000; includeSubDomains; preload"