nextcloud-server/lib/private/security/csp
..
contentsecuritypolicy.php
contentsecuritypolicymanager.php