./config/initializers/content_security_policy.rb
