Called by:

• Mobilizon.Web.Plugs.HTTPSecurityPlug.csp_string (L126)
• Mobilizon.Web.Plugs.HTTPSecurityPlug.csp_string (L127)