Added content secure policy headers to the spring security configuration.

Merged Thomas Reilly requested to merge content-secure-policy into master

Merge request reports