Add_header content security policy always July 8, 2019 16 32 64 128 Add_header content security policy default src self ' always Content spoofing poc Add content-security-policy Add name= content-security-policy