Add Content-Security-Policy header for Firefox

Add Content-Security-Policy header to cover latest versions of Firefox and Chrome as per  https://www.owasp.org/index.php/Content_Security_Policy