Content security policy (25/26)

Content security policy