Content security policy (21/26)

Content security policy