Content security policy allow all domains July 8, 2019 16 32 64 128 Content spoofing poc Content-security-policy allow domain Content security policy allow all from domain