Learn how CSP script-src controls what scripts can be executed with allowlists, hashes, nonces, strict-dynamic, script-src-elem and script-src-attr.