Updated CSP header usage for different browsers

Make it consistent with https://www.owasp.org/index.php/Content_Security_Policy
Merge pull request #371 from michiel3/patch-1

Updated CSP header usage for different browsers