add default configuration
load the middleware when config.csp is not empty
put the four keyword into single-quote
put the four keyword into single-quote