Header set content security policy frame ancestors self July 8, 2019 16 32 64 128 Header set content security policy frame ancestors self apache Header always set content security policy frame ancestors self Content spoofing poc