Content Security Policy

A content security policy (CSP) allows you, as the author of the web application, to specify where various types of resources — such as JavaScript files, image files, or stylesheets — can be loaded from. In particular, it can prevent the execution of JavaScript that is loaded from suspicious URLs or injected into a web page.