Make notifications framework CSP compliant

Change-Id: I95411f646053d76219908b91e9f0921c17280c28
diff --git a/Changes b/Changes
index c107578..98225df 100755
--- a/Changes
+++ b/Changes
@@ -14,6 +14,7 @@
         - defer main script.
         - Introduce X-Frame-Options header.
         - Introduce X-XSS-Protection header.
+        - Support CSP in notifications framework.
 
 0.40 2020-12-17
         - Modernize ES and fix in-loops.