[Thread](https://answers.netlify.com/t/nextjs-build-ignoring-headers-set-in-netlify-toml/34812/7) Netlify is blocking the injected headers in `next.config.js` so we are unable to have a CSP implementation.