Add CSP compliance to plugins

Change-Id: Ia13082bbad5348c8cbb5f5cb976bfe32c9fe0a27
diff --git a/Changes b/Changes
index 98225df..80b1bc0 100755
--- a/Changes
+++ b/Changes
@@ -15,6 +15,8 @@
         - Introduce X-Frame-Options header.
         - Introduce X-XSS-Protection header.
         - Support CSP in notifications framework.
+        - Fetch plugin configs from JSON file to be
+          CSP compliant.
 
 0.40 2020-12-17
         - Modernize ES and fix in-loops.