Mitigate XSS Attacks with Content Security Policy

[Falco]

@Falco

This directive will be enabled by default in the next release cycle.

As promised, this feature was just enabled by default: CSP Frame Ancestors enabled by default