Update the CSP configuration
Update the CSP configuration

- allow AJAX request to www.google-analytics.com as they are needed by GA
- restrict Algolia rules to HTTPS, following their own recommendation anyway
- remove the non-HTTPS img-src for google analytics. This is blocked by blocking mixed content anyway.
composer/packagist,composer/packagist,composer/packagist,composer/packagist