Content security policy (24/26)

Content security policy