Better Content-Security-Policy

Make Ghost that can be run without errors in Content-Security_Policy when using “self” settings and block inline scripts and styles.