Add_header content security policy script src self July 8, 2019 16 32 64 128 Add name= content-security-policy value= default-src 'self' / Content spoofing poc Add content-security-policy