How to create a 'Content Security Policy' for your website