Recommend that servers set a Content Security Policy for the content repository.