Enable csp on lens proxy (#5581)

* enable csp on lens proxy

Signed-off-by: Jari Kolehmainen <jari.kolehmainen@gmail.com>

* move csp default value to package.json

Signed-off-by: Jari Kolehmainen <jari.kolehmainen@gmail.com>

src/common/vars.ts

@@ -143,3 +143,4 @@ export const appSemVer = new SemVer(packageInfo.version);
 export const docsUrl = "https://docs.k8slens.dev/main/" as string;
 
 export const sentryDsn = packageInfo.config?.sentryDsn ?? "";
+export const contentSecurityPolicy = packageInfo.config?.contentSecurityPolicy ?? "";

src/main/lens-proxy/lens-proxy.ts

@@ -7,7 +7,7 @@ import net from "net";
 import type http from "http";
 import spdy from "spdy";
 import type httpProxy from "http-proxy";
-import { apiPrefix, apiKubePrefix } from "../../common/vars";
+import { apiPrefix, apiKubePrefix, contentSecurityPolicy } from "../../common/vars";
 import type { Router } from "../router/router";
 import type { ClusterContextHandler } from "../context-handler/context-handler";
 import logger from "../logger";
@@ -239,6 +239,10 @@ export class LensProxy {
       }
     }
 
+    if (contentSecurityPolicy) {
+      res.setHeader("Content-Security-Policy", contentSecurityPolicy);
+    }
+
     this.dependencies.router.route(cluster, req, res);
   }
 }