Content security policy (7/26)

Content security policy