Compose a Content-Security-Policy header from common directives.
Copy the output and use it anywhere.