Add section about CSP

[eigan]

Could you provide a section about what exceptions is expected in our CSP?

See example from productfruits: https://help.productfruits.com/en/article/content-security-policy