Add CSP meta tag

Dominic Couturerequested to merge
csp-tag-take-3 into master

Closes #850

Third attempt after #1144 (closed) failed 🤞

We're going with a CSP that's a little more permissive this time around and will iterate further at another point.

Merge request reports