remove data from CSP

[amirbey]

User Story

Background (Optional)

data: Used in a Content Security Policy(CSP) Directive Refer to webscan for further details.

Acceptance Criteria

• [ ] <TODO>
• [ ] Change made live via <TODO>.

After evaluating, edit this part:

Level of effort - <low/medium/high>

Implementation outline (if higher than "low" effort):

• [ ] <TODO>