Missing or permissive content security policy http response header July 8, 2019 16 32 64 128 Missing or permissive content security policy frame ancestors http response header