Unprefixed CSP header