highlight unsafe CSPs as a warning.
add check for too-long html titles.