Content security policy header (21/22)

Content security policy header