X-Content-Security-Policy and X-Webkit-CSP are not needed anymore
X-Content-Security-Policy and X-Webkit-CSP are not needed anymore

All major browsers support standard by now. Only IE11 has limited support
for X-Content-Security-Policy. But that support is limited to sandbox
directive, which isn't used by Croodle.

jelhan/croodle,jelhan/croodle,jelhan/croodle