Content Security Policy Yii2