How does Content Security Policy (CSP) work? How does Content Security Policy (CSP) work? javascript javascript