Content Security Policy - SVG