[CSP] removes inlined styles and scripts
[CSP] remove HTTP CSP Headers