index.html

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <!-- Content Security Policy (CSP) - Helps prevent XSS attacks -->
    <!-- Visit https://content-security-policy.com/ to check all directives -->
    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'none'; font-src 'self';">
    <!-- Referrer Policy - Controls information sent along with requests -->
    <meta name="referrer" content="no-referrer">
    <title>Example</title>
</head>

<body>
    <div id="root"></div>
    <script type="module" src="/src/client/main.jsx"></script>
</body>

</html>