title: Missing content security policy header - issue with chrome and firefox
body: <p>I have to fix Missing Content Security Policy Header issue for a Classic ASP application. We have added the below in Web.config </p>
  
  <pre><code>&lt;system.webServer&gt;
      &lt;httpProtocol&gt;
          &lt;customHeaders&gt;
              &lt;add name="Content-Security-Policy" value="default-src" /&gt;
          &lt;/customHeaders&gt;
      &lt;/httpProtocol&gt;
  &lt;/system.webServer&gt;
  </code></pre>
  
  <p>Post change in IE the application is working, but in Mozilla and Chrome the application is not rendering properly (the css are not loading properly). </p>
  
  <p>If I will add the same in particular asp page too(Response.AddHeader "Content-Security-Policy","default-src"), the same issue is happening.</p>
  
  <p>Please advise.</p>