Used to set respose header: Content-Security-Policy - View it on GitHub