add content-security-policy support

[bengerman13]

Changes Proposed

• Add content security policy injection with mozilla-recommended policy

Security Considerations

Adding CSP to our sites reduces the attack surface for XSS and other categories of attacks