A Restricted Directive Policy is a policy in which a user is only allowed to
provide a subset of directives.
A Directive Injection vulnerability occurs when an attacker can exploit a
Data/Directive Boundary Error to introduce directives that violate the intended