Authors and rolls out a Content Security Policy using nonces or hashes, strict-dash directives, and reporting, so injected script cannot execute. Use when writing or tightening a CSP, eliminating unsafe-inline and unsafe-eval, or triaging CSP violation reports.
