Can I add a snippet to the header?

[Southpaw]

Hi @dafegosa,

I think option 1 in the site settings as described in this section of the Content Security Policy topic, might work for what you’re trying to do, but if not, there’s lots of good info in the topic:

Mitigate XSS Attacks with Content Security Policy

What is Content Security Policy? Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware. – Content Security Policy (CSP) - HTTP | MDN XSS is still one of the most common web vulnerability – if someone else can run scripts on your site, it is not your site anymore…