Content security policy (18/26)

Content security policy