This is a combination of 2 commits.

[bug959277] - Added CSP into middleware, app; added hood into pakage.json

[bug959277] Removed useless lines

[bug959277] - Added more policies, changed link url to 'https:' protocol