Improve CSP config (#1377)
Improve CSP config (#1377)

* Remove `'unsafe-eval'`; this was needed in the past for Chart.js.
* Remove `https://api.github.com` since we don't make any requests to this domain client-side
* Specify more directives which are not inherited by `default-src`

Signed-off-by: XhmikosR <b60f67e10123951b393d9ba15dcf79efc14744bb@gmail.com>
jacobsalmela/AdminLTE,jacobsalmela/AdminLTE,jacobsalmela/AdminLTE,jacobsalmela/AdminLTE