Apache content security policy default src July 8, 2019 16 32 64 128 Apache content security policy default src self Apache header set content security policy default src self Content spoofing poc Apache http server download