Content Security Policy (CSP) is a standard that prevents code injection attacks, such as cross-site scripting. A website declares approved origins of content that a browser can load to display website content. The upgrade process checks for custom user interface components in the registered Operational Reference Store (ORS) databases. If any components are found, the appropriate content security policy is applied to ensure that no custom interface components are blocked.