Passive 10038 content security policy csp header not set July 8, 2019 16 32 64 128 Content spoofing poc 10038 - content security policy (csp) header not set