'The default Content-Security-Policy header
Can be overridden by defining Content-Security-Policy in settings[\'headers\']'

@property
def content_security_policy(self):

    return ';    '.join(["frame-ancestors    'self'", ('report-uri    ' + self.csp_report_uri)])
