Content-Security-Policy: style-src 'self';