@jackdbd/eleventy-plugin-content-security-policy

Eleventy plugin that writes Content-Security-Policy and Content-Security-Policy-Report-Only headers to a `_headers` file when Eleventy builds your site.

als-send-file

file serving with advanced options for caching, headers, and error handling, compatible with Express middleware.