The Drupal module seckit provides a UI for adding a CSP to your application. But you'll want to plan to review policy violations and tune your CSP. See my blog post, here.
As a side note, as I'm adding this article to my test site, it's almost spring.