spec: https://w3c.github.io/webappsec-csp/
suggested_reviewers:
  - andypaicu
  - hillbrad
