add security headers to our nginx configuration

[NoamGaash]

We want to allow communication with the following origins:

• self
• google analytics (google-analytics.com, googletagmanager.com)
• fonts.gstatic.com, fonts.googleapis.com
• *.hasadna.org.il

Also, feel free to apply more security best practices (iframes and such)

[Agastya18]

hey @NoamGaash assign it to me!!

[Agastya18]

hey, i am trying to push the change but, it say " Permission to hasadna/open-bus-map-search.git denied to Agastya18."

[NoamGaash]

Hi @Agastya18 , I've sent an invitation :)