CSP 1.1: Add a@ping to 'form-action'.