chore(api): reorganize web assets and codegen types+handlers

webserver/router/middleware/headers.go

@@ -0,0 +1,17 @@
+package middleware
+
+import (
+	"fmt"
+	"net/http"
+	"strings"
+)
+
+// SetHeaders will set our global headers for web resources.
+func SetHeaders(w http.ResponseWriter, nonce string) {
+	// Content security policy
+	csp := []string{
+		fmt.Sprintf("script-src '%s' 'self'", nonce),
+		"worker-src 'self' blob:", // No single quotes around blob:
+	}
+	w.Header().Set("Content-Security-Policy", strings.Join(csp, "; "))
+}