CSP for vanilla JavaScript.