Neos csp

Root.fusion

http://cspisawesome.com/content_security_policies

page.httpResponseHead.headers {
        Content-Security-Policy = "default-src 'none'; script-src 'self' 'unsafe-inline' *.creativeworkspace.de; style-src 'self' 'unsafe-inline'; img-src 'self' data:; media-src 'self'; font-src 'self'"
        X-Content-Security-Policy = "default-src 'none'; script-src 'self' 'unsafe-inline' *.creativeworkspace.de; style-src 'self' 'unsafe-inline'; img-src 'self' data:; media-src 'self'; font-src 'self'"
        X-WebKit-CSP = "default-src 'none'; script-src 'self' 'unsafe-inline' *.creativeworkspace.de; style-src 'self' 'unsafe-inline'; img-src 'self' data:; media-src 'self'; font-src 'self'"
}