Content-Security-Policy header generatator - work in progress