The old CSP broke #24. So we need a new one
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
m-rtijn
