Content-Security-Policy

Hi,

The code stated below may work. Can you try it?

    when CLIENT_ACCEPTED {
        set host_exist 0
    }   

    when HTTP_REQUEST {
       set host [HTTP::host]
       if { [class match $host contains host_lookup_table] } {
          set host_exist 1        
       }
    } 

    when HTTP_RESPONSE {
       if { $host_exist equals 1 } {
           HTTP::header insert "X-Content-Security-Policy" "frame-ancestors 'self' $host"
           HTTP::header insert "X-Content-Security-Policy" "frame-scr 'self' '$host'"
       }
       else {
           HTTP::header insert "X-Content-Security-Policy" "frame-ancestors 'self'"
           HTTP::header insert "X-Content-Security-Policy" "frame-scr 'self'"
       }
    }