Content security policy default src allow all July 8, 2019 16 32 64 128 Content spoofing poc Content manager steam api failed to initialize Default content-security-policy Content-security-policy что это