Now is the time to seriously consider your Content Security Policy