Content security policy (8/26)

Content security policy