“Its primary purpose is to govern what resources can load on a given page or what content can execute in the context of a given page load inside of a browser.”

Transcript evidence from Neil Matatall — Content Security Policy.