https://trustedsec.com/blog/content-security-policy-mitigating-web-vulnerabilities-by-controlling-the-rules-of-the-game