discourse/lib/content_security_policy