@Override
    public void filter(DiscFilterResponse response, RequestView request) {
        response.setHeader("Content-Security-Policy", "sandbox");
    }
The HTTP Content-Security-Policy (CSP) sandbox directive enables a sandbox for the requested resource similar to
the &lt;iframe&gt; sandbox attribute. It applies restrictions to a page's actions including preventing popups,
preventing the execution of plugins and scripts, and enforcing a same-origin policy.

@author freva
jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/csp/CspResponseFilter.java