title: how to configure Content-Security-Policy dotnet
body: <p>I would like to seek help. Im currently configuring the Content-Security-Policy for an existing web app for some owasp works. However, im unable to find there the csp is being created or configured.</p>
  <p>This is the generated report from owasp</p>
  <pre><code>default-src 'self'; script-src 'self' ; style-src 'self' 'unsafe-inline' ; img-src 'self' data:; font-src 'self' data:; report-uri https://121.23.142.1/onb21_owasp/IdentityServer/csp/report
  </code></pre>
  <p><a href="https://i.stack.imgur.com/CzSQI.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/CzSQI.png" alt="enter image description here" /></a></p>
  <p>Im also using postman for some tests and found out that there are some customheaders</p>
  <p><a href="https://i.stack.imgur.com/dFpXu.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/dFpXu.png" alt="enter image description here" /></a></p>
  <p>As you can see on the image there are 3 custom headers but on the middle one, is the one i can configure or change it's value. but what i need to change are the top and bottom value. i could not find any lead pointing to CSP.</p>
  <p>Could it be that the top and bottom custom headers are dynamically generated?</p>