security.csp.enable:false

rustre

strip the `content-security-policy` header from web request responses