https://kennisbank.assistsec.nl/kwetsbaarheden/content-security-policy