https://www.davidcoltart.com/2013/01/zc-reject-src-directive/