Fix minor typos in csp.md

packages/docs/src/en/advanced/csp.md

@@ -5,7 +5,7 @@ title: CSP
 
 # CSP (Content-Security Policy)
 
-In for Alpine to be able to execute plain strings from HTML attributes as JavaScript expressions, for example `x-on:click="console.log()"`, it needs to rely on utilities that violate the "unsafe-eval" content security policy.
+In order for Alpine to be able to execute plain strings from HTML attributes as JavaScript expressions, for example `x-on:click="console.log()"`, it needs to rely on utilities that violate the "unsafe-eval" content security policy.
 
 > Under the hood, Alpine doesn't actually use eval() itself because it's slow and problematic. Instead it uses Function declarations, which are much better, but still violate "unsafe-eval".
 
@@ -14,7 +14,7 @@ In order to accomodate environments where this CSP is necessary, Alpine offers a
 <a name="installation"></a>
 ## Installation
 
-Like all Alpine extensions, you can use this include this either via `<script>` tag or module import:
+Like all Alpine extensions, you can include this either via `<script>` tag or module import:
 
 <a name="script-tag"></a>
 ### Script tag
@@ -40,7 +40,7 @@ window.Alpine.start()
 
 Because Alpine can no longer interpret strings as plain JavaScript, it has to parse and construct JavaScript functions from them manually.
 
-Because of this limitation, you must `Alpine.data` to register your `x-data` objects, and must reference properties and methods from it by key only.
+Because of this limitation, you must use `Alpine.data` to register your `x-data` objects, and must reference properties and methods from it by key only.
 
 For example, an inline component like this will not work.