俺のVue レスポンスヘッダー

Azure Static Web App の場合

staticwebapp.config.json

"globalHeaders": {
        "Cache-Control": "no-cache, no-store, must-revalidate",
        "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self' data:; frame-src 'self'",
        "Access-Control-Allow-Origin": "https://${FRONTDOOR_DOMAIN}",
        "Cross-Origin-Embedder-Policy": "require-corp",
        "Cross-Origin-Opener-Policy": "same-origin",
        "Cross-Origin-Resource-Policy": "same-site",
        "Permissions-Policy": "geolocation=(self), camera=(self), microphone=(self), fullscreen=(self), payment=(self)",
        "Origin-Agent-Cluster": "?1",
        "Referrer-Policy": "strict-origin-when-cross-origin",
        "Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",
        "X-Content-Type-Options": "nosniff",
        "X-DNS-Prefetch-Control": "off",
        "X-Download-Options": "noopen",
        "X-Frame-Options": "DENY",
        "X-Permitted-Cross-Domain-Policies": "none",
        "X-XSS-Protection": "1; mode=block"
    }

こちらのサイトからチェック

A+ 獲得

参考

Microsoft Entra 認証で、エラーになる

Refused to apply style from 'https://HOGEHOGE.net/.auth/login/aad' because its MIME type ('text/html') is not a supported stylesheet MIME type, and strict MIME checking is enabled.