X-Content-Security-Policy

.htaccess

Header set X-Content-Security-Policy "default-src 'self'; \
options inline-script eval-script;    \
allow *.ralree.com *.ralree.info      \
      *.flickr.com                    \
      github.com                      \
      *.github.com                    \
      https://*.github.com            \
      *.google.com                    \
      https://*.google.com            \
      *.google-analytics.com          \
      https://*.google-analytics.com  \
      *.googleapis.com                \
      https://*.googleapis.com        \
      *.googlesyndication.com         \
      https://*.googlesyndication.com \
      *.googleusercontent.com         \
      https://*.googleusercontent.com \
      *.youtube.com                   \
      https://*.youtube.com           \
      *.doubleclick.net               \
      https://*.doubleclick.net       \
;                                     \
img-src *;                            \
media-src *;"