Adding base-uri to CSP

Nice plugin. Works great. I’m using it to implement CSP and it work great once I found the settings for “Use Apache (mod_headers) to send headers” (should this be on by default?).

Anyway, I just wanted to suggest to add the base-uri directive to the Content-Security-Policy section.

Also might be very helpful to add some more info or at least a link in that section. I know CSP is pretty robust info.

Thanks for the nice plugin.