Content security
What the browser is allowed to load. Each directive is a space-separated list of sources, exactly as it appears in the Content-Security-Policy header.