Troubles with CSP headers on by default

[jive]

Eh, why does a moderator need to approve my post?

We had some trouble with spam on discourse last week and folks have been adjusting settings to try and cope.