Fixed #15727 -- Add support for Content-Security-Policy header support for SecurityMiddleware