CSP declaration 'default-src: 'self''.
static final Csp allowSelf = Csp.parse("default-src: 'self'");