Add_header content security policy default src self

- Add_header content security policy default src self ' always
- Add_header content security policy default src self nginx
- Nodejs add header content security policy default src self ' img src *
- Content spoofing poc
- Add name= content-security-policy value= default-src 'self' /
- Add content-security-policy