Revert "Merge branch 'csp-header' into 'develop'"
This reverts merge request !856 (merged)
This won't work. I thought Tae added everything but script-src was missing and we require unsafe-inline for the local development web server.
We will have to find a way to catch these issues in the CI/CD pipeline