Content Security Policy - commentaires