Added CSP security consideration (closes #262)