A configurable Java Servlet filter adding the "Content-Security-Policy" header to a ServletResponse