prevent xss code example

Example: prevent xss

<meta http-equiv="Content-Security-Policy" content="script-src 'self' https://apis.google.com">