Content security policy hashes