The Content-Security-Policy headers exists to protect the users of your web site from the content they themselves might create.