routingHttpResponseContentSecurityPolicyHeaderValue