Content Security Policy configurations that work with modern SPA frameworks. Tested with React, Vue, Angular, and Next.js.