Created a very basic content security policy that blocks all insecure requests. Will make a more comprehensive and specific one soon!