Functions for setting default CSP directives.

Also remove disallowScript, since that would break your whole app completely.
Throw error if you try to allow framing by multiple origins.