Content security policy (17/26)

Content security policy