CSP: require-sri-for