Content-Security-Policy header generatator - preliminary version