From pentesting: use Sub Resource Integrity header instead of *.{domainName} in CSP meta tag

[KrupaPammi]

Reference: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity