remove csp and etc and do basic stuff

Signed-off-by: Rui Chen <rui@chenrui.dev>

netlify.toml

@@ -21,11 +21,7 @@
   [headers.values]
     X-Frame-Options = "DENY"
     X-XSS-Protection = "1; mode=block"
-    Content-Security-Policy = "default-src 'self'; frame-src 'self' https://app.netlify.com; script-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://*.algolianet.com https://*.algolia.net 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://*.algolianet.com https://*.algolia.net 'unsafe-inline'; img-src 'self' https://*.google-analytics.com data:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://*.algolianet.com https://*.algolia.net"
-    Cache-Control = "public, max-age=86400, must-revalidate"
-    Strict-Transport-Security = "max-age=86400; includeSubDomains; preload"
-    Referrer-Policy = "no-referrer"
-    X-Content-Type-Options = "nosniff"
+    Cache-Control = "public, max-age=86400"
 
 [[headers]]
   for = "*.html"