csp: improve docs

[ematipico]

Description (required)

Some users have asked how, with CSP, can support script-src-* and style-src-*.

Well, the thing is, we already do! However, this information was "hidden", in the sense that we don't explicitly state that resources can be used to add the values supported by those directives.

This was due to my lack of knowledge.

This PR expands the docs of resources.

Related issues & labels (optional)

• Suggested label:
• Related support thread: https://discord.com/channels/830184174198718474/1443253672036536445

[netlify]

✅ Deploy Preview for astro-docs-2 ready!

Name	Link
🔨 Latest commit	70b575e
🔍 Latest deploy log	https://app.netlify.com/projects/astro-docs-2/deploys/692db95651be920008431487
😎 Deploy Preview	https://deploy-preview-12812--astro-docs-2.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[astrobot-houston]

Lunaria Status Overview

🌕 This pull request will trigger status changes.

Learn more

By default, every PR changing files present in the Lunaria configuration's files property will be considered and trigger status changes accordingly.

You can change this by adding one of the keywords present in the ignoreKeywords property in your Lunaria configuration file in the PR's title (ignoring all files) or by including a tracker directive in the merged commit's description.

Tracked Files

File	Note
en/reference/experimental-flags/csp.mdx	Source changed, localizations will be marked as outdated.

Warnings reference

Icon	Description
🔄️	The source for this localization has been updated since the creation of this pull request, make sure all changes in the source have been applied.

[sarah11918]

Just left some tiny editing questions!

[sarah11918]

This looks great @ematipico !

Would it make sense to update line 149 to read something like:

A list of valid sources for the `script-src` and `style-src` directives, including [values for subclasses](#adding-values-for-subclasses).

I don't know if we can/need to say subclasses of what, or what the proper terminology is (directive subclasses?)

or

A list of valid sources for the `script-src` and `style-src` directives, including [subclasses](#directive-subclasses).

If anything like that makes sense, then I think having that statement in the opening line and a link to a section heading makes sense and is helpful. If there's no good way to do that, then I think this is good as is!

[ematipico]

@sarah11918 I applied your suggestion

[sarah11918]

Looks great to me! 🙌