CSP header

Could you pls. add Content-Security-Policy header to the code base or suggest correct policy that can be added to api-umbrella?

The excerpt on why this request:
Content Security Policy (CSP) is an added layer of security that helps
to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks.Content Security Policy (CSP) can be implemented by adding a Content-Security-Policy header. The value of this header is a string containing the
policy directives describing your Content Security Policy. To implement CSP, you should define lists of allowed origins for the all of the types of resources that your site utilizes. For example, if you have a simple site that needs to load scripts, stylesheets,
and images hosted locally, as well as from the jQuery library from their CDN, the CSP header could look like the following:Example:
Content-Security-Policy:
default-src 'self';
script-src 'self' https://code.jquery.com;It's recommended to implement Content Security Policy (CSP) into your web application. Configuring
Content Security Policy involves adding the Content-Security-Policy HTTP header to a web page and giving it values to control resources the user agent is allowed to load for that page.

No files, tests, or entry points are named. Start by locating where API Umbrella configures HTTP response headers, then determine the required policy scope and how completion would be verified without breaking the application.