https://diogomonica.com/2015/12/30/deep-into-csp/

Creating a CSP Policy from Scratch
When I added the Content-Security-Policy (CSP) security header to my website, Iwas more concerned about getting a good rating[/2015/12/29/from-double-f-to-double-a/] on securityheaders.io[https://securityheaders.io], than actually creating a good policy. In this postI’ll show you how I created a…