Ensure that content security policy headers are set. [#2380123]