What is Content Security Policy, and how do you roll it out safely?

Write or say your answer first, then compare it with the model answer.