[FEATURE] Add support for Content-Security-Policy meta tags

[jkroepke]

To increase the security of my static web page, I would like to add a Content Security Policy. By default, the policy is delivered by HTTP headers.

But set HTTP headers are not always possible. A workaround is using tags to define a CSP.

https://content-security-policy.com/examples/meta/