Proposed changes

• Extracted middleware to a common library for managing security headers and country-based blocking, applied across all apps (every app should load & registry app should work exactly the same as before).
• Also, any issues with the Bond and Tokenomics apps will be addressed during the final migration, which is scheduled for the coming weeks.
• Apps security headers & blocking applied:
  • Registry
  • Bond
  • Tokenomics
  • Govern
  • Launch

NOTE: Please let me know if any issues arise.

• Here's why avoiding 'unsafe-inline' for styles is okay: Scott Helme's explanation. While challenging to remove, can be fixed through strict CSP settings. Let me know your thoughts - struggled removing it entirely; it's not as straightforward as it appears 🥲

Reports (for registry app)

• Security headers report: securityheaders.com
• Mozilla Observatory report: developer.mozilla.org
• Old Mozilla Observatory report: observatory.mozilla.org
• CSP evaluator report: csp-evaluator.withgoogle.com

Types of changes

What types of changes does your code introduce?
Put an x in the boxes that apply

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)