fix: try to make kapa work normally by setting CSP header (#1774)

Author: zll600

.htaccess

@@ -18,6 +18,7 @@ Options -Indexes
     Header set Access-Control-Allow-Origin: https://apisix.apache.org
     Header set Access-Control-Allow-Methods "*"
     Header set Access-Control-Allow-Headers "*"
+    Header set Content-Security-Policy "frame-src 'self' https://www.google.com https://app.netlify.com"
 </IfModule>
 
 <IfModule mod_expires.c>

doc/src/pages/edit.tsx

@@ -51,10 +51,6 @@ const Edit: FC = () => {
           name="og:description"
           content="Apache APISIX is a dynamic, real-time, high-performance Cloud-Native API gateway, based on the Nginx library and etcd."
         />
-        <meta
-          httpEquiv="Content-Security-Policy"
-          content="frame-src 'self' https://www.google.com/ https://app.netlify.com/;"
-        />
       </Head>
       {!isLoading && (
         <div className="page">

website/src/pages/contribute.tsx

@@ -74,10 +74,6 @@ const Contribute: FC = () => {
           name="twitter:description"
           content="Help new partners to Apache APISIX Community and make first contribution."
         />
-        <meta
-          httpEquiv="Content-Security-Policy"
-          content="frame-src 'self' https://www.google.com/ https://app.netlify.com/;"
-        />
       </Head>
       <Page>
         <PageTitle>

website/src/pages/index.tsx

@@ -63,10 +63,6 @@ const Index: FC = () => (
         name="og:description"
         content="Apache APISIX is a dynamic, real-time, high-performance Cloud-Native API gateway, based on the Nginx library and etcd."
       />
-      <meta
-        httpEquiv="Content-Security-Policy"
-        content="frame-src 'self' https://www.google.com/ https://app.netlify.com/;"
-      />
     </Head>
     <HeroSection />
     <Architecture />