spec: https://w3c.github.io/webappsec-csp/ suggested_reviewers: - andypaicu - hillbrad