A validator checking Content-Security-Policy