Header content security policy default src self July 8, 2019 16 32 64 128 Add_header content security policy default src self ' Add_header content security policy default src self ' always Header always set content security policy default src self Header content security policy default src self ' script src self ) Content spoofing poc