Content security policy (11/26)

Content security policy