title: Content security policy header in tomcat9
body: <p>i want to add content security policy header in tomcat.I am able to add x-frame header by changing webxml file.but i do not if i can add content security policy header in the same way.
  please help on this</p>