Content Security Policy - Allow Configuration via Environment Variables

[taearls]

I would like to pass in a list of options for

• script-src
• style-src
• font-src
• img-src
• default-src

as environment variables that extend a list of reasonable defaults.