Content Security Policy is best used as defense-in-depth, to reduce the harm caused by content injection attacks.
UTF-8 (8-bit UCS/Unicode Transformation Format) is a variable-length character encoding for Unicode. It is the preferred encoding for web pages.