Content security policy header (20/22)

Content security policy header