Add a Content-Security-Policy to your AI-built app on Vercel or Netlify, step by step

When we check AI-built apps, two response headers are missing far more often than not: a Content-Security-Policy and framing protection. Both take a few lines in your host config. Here is the order I