Content security policy (3/26)

Content security policy