Add support for Content-Security-Policy