Content security policy (19/26)

Content security policy