Implementing Content Security Policy [mozilla.org/implementing-content-security-policy]