Not OP but I have to assume they are referring to Content Security Policy headers: https://content-security-policy.com/