module ActionController::ContentSecurityPolicy