Add support for additional CSP directives

[keganlance]

Would be great if we can add additional restrictions. Like blocking images from certain domains using the img-src directive from CSP. Or blocking css code using style-src.

Thanks in advance.

[iiic]

This would be great, I join the request.