Questions - content-security-policy