Please add the ability to configure CSP in a supported and maintainable way, including: 1) Configurable CSP header - Ability to set CSP directives (e.g., default-src, script-src, style-src, img-src, connect-src, font-src, frame-src, object-src, base-uri, form-action, frame-ancestors, etc.). - Support for both Content-Security-Policy and Content-Security-Policy-Report-Only modes. 2) Admin setting section for CSP
