provided support to both "X-Content-Security-Policy" and "Content-Security-Policy" header for websites