Add Content Security Policy

[gbowne1]

Prerequisites

• I have read the Contributing Guidelines.
• I agree to follow the Code of Conduct.
• I have searched for existing issues that already report this problem, without success.

Current Behavior

There currently is no Content Security Policy (CSP) for this site.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

Expected Behavior

Google Lighthouse in Google Chrome reports no Content Security Policy (CSP).

Steps to Reproduce

[TODO]

[gbowne1]

This is coming from Google Maps:

Here is some reference docs:

https://developers.google.com/maps/documentation/javascript/content-security-policy
https://stackoverflow.com/questions/13228825/google-maps-api-script-does-load-due-to-content-security-policy
https://content-security-policy.com/examples/google-maps/