Add a Content Security Policy (CSP)

[db-vol-1]

This should've happened sooner but I suppose this is still an alpha. This issue tracks the progress of adding a Content Security Policy to Open Tickets to help mitigate risk.