The [documentation](https://django-csp.readthedocs.io/en/latest/configuration.html) has a lot of deprecated features. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy