Content security policy (23/26)

Content security policy