HTTP Security with Content-Security-Policy headersKey notes of CSP response headers and troubleshooting guide