Header set content security policy unsafe inline July 8, 2019 16 32 64 128 Header set content security policy default src self unsafe inline Header set content security policy script src self unsafe inline Content spoofing poc