update security config

nuxt.config.ts

@@ -141,8 +141,17 @@ export default defineNuxtConfig({
     },
   },
   security: {
+    ssg: {
+      meta: true,
+      hashScripts: true,
+      hashStyles: false,
+    },
     sri: true,
+    nonce: true,
+    hidePoweredBy: true,
     headers: {
+      contentSecurityPolicy: false,
+      crossOriginResourcePolicy: 'cross-origin',
       strictTransportSecurity: {
         maxAge: 31536000,
         includeSubdomains: true,
@@ -151,7 +160,6 @@ export default defineNuxtConfig({
       xContentTypeOptions: 'nosniff',
       xFrameOptions: 'SAMEORIGIN',
       xXSSProtection: '1; mode=block',
-      hidePoweredBy: true,
       crossOriginEmbedderPolicy:
         process.env.NODE_ENV === 'development' ? 'unsafe-none' : 'require-corp',
     },