Use CSP to improve protection against XSS and improve user privacy.

No javascript is supposed to be executed on the error page.