Content security policy (20/26)

Content security policy