GetSimple vs. Mozilla Observatory

[shawn_a]

If you want to discuss or recommend default CSPs

https://github.com/GetSimpleCMS/GetSimpleCMS/issues/610

But I think this is something the end user needs to do. As far as enhancing security for backend, we are a little more flexible but still will have problems with plugins needing to register their own exclusions since they might use CDNs and xss policies.