* Adding CSP headers. * Adding Content-Security-Policy headers. * Fixing test. * CSP in ws server responses.