[Feature request] Per-page CSP configuration

[stof]

The clickjacking protection supports applying a different configuration for different paths. It would be great if CSP could do it as well.

See https://github.blog/2016-04-12-githubs-csp-journey/#connect-src which describes a use case that Github has for this (which is also what gave me the idea to request it here. My own CSP journey is not yet at the point where I would need it, but it might come).

[kiler129]

We have another example: Sonata Admin uses inline JS. Enabling this for the whole site would be really irresponsible.

[alxndrbauer]

Another example would be allowing data: in img-src and unsafe-inline in style-src for googlemaps api.
I dont need the api on every page