CSP for Ember apps

environment.js

/* jshint node: true */
const contentSecurityPolicy = {
  'default-src': "'none'",
  'script-src': "'self'",
  'font-src': "'self'",
  'connect-src': "'self' localhost:*",
  'img-src': "'self'",
  'style-src': "'self' 'unsafe-inline'",
  'media-src': "'self'"
};

module.exports = function(environment) {
  var ENV = {
    (...)
    contentSecurityPolicy: contentSecurityPolicy
  };
};