Framing violates the following content security policy directive default-src 'self' July 8, 2019 16 32 64 128