sandbox allow-forms allow-scripts allow-same-origin allow-popups allow-downloads
CAM-14139 Make default content security policy more strict