Content-Security-Policy in ASP.NET MVC

In the previous post, Improving security in ASP.NET MVC using custom headers, I skipped talking about the Content-Security-Policy header entirely.