Content security policy directive frame src self keycloak July 8, 2019 16 32 64 128 Keycloak violates the following content security policy directive frame src self Content spoofing poc