title: Can Tomcat 7 be configured to insert "Content-Security-Policy" HTTP header?
body: <p>Can Tomcat 7 be configured to insert <code>Content-Security-Policy: frame-ancestors 'self'</code> HTTP header with every response, like it can insert other security related headers, for example <code>X-Frame-Options</code>?</p>