Content Security Policy (CSP) Guidelines for Embedding Form-API