Content Security Policy Level 3
w3c.github.io