Add_header content security policy default src self July 8, 2019 16 32 64 128 Add_header content security policy default src self ' always Add_header content security policy default src self nginx Content spoofing poc Add name= content-security-policy value= default-src 'self' / Add content-security-policy