Revert "Merge branch 'csp-header' into 'develop'"

This reverts merge request !856 (merged)

This won't work. I thought Tae added everything but script-src was missing and we require unsafe-inline for the local development web server.

We will have to find a way to catch these issues in the CI/CD pipeline

no need to revert it if it works, we can just add script-src with another MR

My point is that we would need unsafe-inline for development but we deny that in production deployments so any unsafe-inline issues would not get caught by this method.

mentioned in commit bfc6f7b3

merged