added “Content Security Policy: Embedded Enforcement