evert/SabreDAV — pull request #325 by LukasReschke (2013-03-31 20:44:10+00:00)
Title: Add Content-Security-Policy

This would mitigate any possible XSS attack since the browser won't execute any Javascript.

@evert