The Drupal module seckit provides a UI for adding a CSP to your application. But you'll want to plan to review policy violations...
Cache strategy can get very complicated very quickly. My recommendations for optimal use of Varnish and CDN layers for a case...