ASP.NET WebForms中的Content-Security-Policy

I'm looking for a good way to implement a relatively strong Content-Security-Policy header for my ASP.NET WebForms application. I'm storing as much JavaScript as possible in files instead of inline, but by default, WebForms injects I'm looking for a good way to implement a relat