Content-security-policy default-src 'self' img-src * July 8, 2019 16 32 64 128 Content spoofing poc Content-security-policy img-src *