more_set_headers "Content-Security-Policy: %CONTENT_SECURITY_POLICY%";