WebAppSec CSP tests