From https://developer.chrome.com/extensions/contentSecurityPolicy.html