I think you meant CSP (Content Security Policy), not SCP
Specifically script-src: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...
To many acronyms, my mind was probably thinking about SICP - https://mitpress.mit.edu/sites/default/files/sicp/index.html