Content security policy (9/26)

Content security policy