Strict CSP - Content Security Policy
To get real value out of CSP your policy must prevent the execution of untrusted scripts; this page describes how to accomplish this using an approach called strict CSP. This is the recommended way to use CSP.
Source: csp.withgoogle.com