Add DSL for configuring Content-Security-Policy header
#31162

pixeltrix wants to merge add-csp-config into master

We do not currently have an analysis of these two commits