https://blog.simplr.sh/posts/content-security-policy-your-websites-unsung-hero/