anchor.diff:  # The purpose of these settings is to send CSP response headers to
   # Mozilla FireFox users so that you can enforce how dynamic content
   # is used. CSP usage helps to prevent XSS attacks against your users.
  -#
  +#  
   # Reference Link:
   #
   #	https://developer.mozilla.org/en/Security/CSP
  
positive.code: # -- [[ Collaborative Detection Mode ]] --
  # This is a "delayed blocking" mode of operation where each matching rule will inherit
  # the "pass" action and will only contribute to anomaly scores.  Transactional blocking
  # can be applied
  #
  # -- [[ Alert Logging Control ]] --
  # You have three options -
  
negative.code: # Uncomment this SecAction line if you want use CSP enforcement.
  # You need to set the appropriate directives and settings for your site/domain and
  # and activate the CSP file in the experimental_rules directory.
  # 
  # Ref: http://blog.spiderlabs.com/2011/04/modsecurity-advanced-topic-of-the-week-integrating-content-security-policy-csp.html
  #
  #SecAction \
  