Hash inline scripts only and remove the CSP Policy meta tag if enabled is false

[AnujRNair]

Summary

Hash inline scripts only and remove the CSP Policy meta tag if enabled is false
As all other scripts should be validated via hostnames

Requirements (place an x in each [ ])

• I've read and understood the Contributing Guidelines and have done my best effort to follow them.
• I've read and agree to the Code of Conduct.
• I've written tests to cover the new code and functionality included in this PR.
• I've read, agree to, and signed the Contributor License Agreement (CLA).

[codecov-io]

Codecov Report

Merging #5 into master will increase coverage by 4.44%.
The diff coverage is 100%.

@@ Coverage Diff @@ ## master #5 +/- ## ======================================== + Coverage 95.55% 100% +4.44%  ======================================== Files 2 2 Lines 180 98 -82 Branches 25 4 -21 ======================================== - Hits 172 98 -74  + Misses 8 0 -8

Impacted Files	Coverage Δ
plugin.js	100% <100%> (+5.83%)	⬆️
spec/plugin.spec.js	100% <100%> (+1.66%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f65467a...1a5f9d2. Read the comment docs.