Content security policy script src allow all July 8, 2019 16 32 64 128 Content spoofing poc Content-security-policy script-src * Content security policy allow-scripts Content-security-policy что это Content security policy allow script