CSP

Content Security Policy Configuration Guide

How to implement Content Security Policy headers that actually protect you: directive syntax, nonce-based inline scripts, reporting and safe rollout.