Apache content security policy default src self July 8, 2019 16 32 64 128 Apache header set content security policy default src self Content spoofing poc Apache add content-security-policy
