This repo has some simple CSP policies delivered via http headers, and meta tags