meta name="referrer" content="no-referrer" meta http-equiv="Content-Security-Policy" content="script-src 'self'"

Zurück