message: feat(ionic4): enable csp
diff: <!-- connect-src needs data: because because of libsodium -->
  <!-- child-src needs blob: because worker-src is unknown in safari -->
  <!-- style-src needs 'unsafe-inline' because we have inline css on the generate screen -->
  - <!-- TODO: ENABLE
  <meta
  http-equiv="Content-Security-Policy"
  content="
  style-src 'self' 'unsafe-inline';
  "
  />
  - -->
  <link rel="icon" type="image/png" href="assets/icon/favicon.png" />
  