Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>