Used to set respose header: Content-Security-Policy
github.com/Val-istar-Guo/koa-csp
Val-istar-Guo/koa-csp