10038-2—Obsolete Content Security Policy (CSP) Header Found

The “X-Content-Security-Policy” and “X-WebKit-CSP” headers are no longer recommended.

Ensure that your web server, application server, load balancer, etc. is configured to set the Content-Security-Policy header.