10038 - content security policy (csp) header not set July 8, 2019 16 32 64 128 10038 content security policy csp header not set Passive 10038 content security policy csp header not set Content spoofing poc Content security policy 101