Enable Content Security Policy.