CSP linter

Inspect CSP headers and identify high-risk directives.