Updating CSP header to include top level duckduckgo.com for images