https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html
https://developer.mozilla.org/fr/docs/Web/HTTP/CSP
https://content-security-policy.com/frame-ancestors/