Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.