Filtro para definir Header CSP

CSPFilter.java

@WebFilter("/*")
public class CSPFilter implements Filter {
	
	private static final String POLICY = "default-src 'none';"
			+ "base-uri 'self';"
			+ "font-src 'self';"
			+ "form-action 'self';"
			+ "img-src 'self';"
			+ "media-src 'none';"
			+ "object-src 'none';"
			+ "script-src 'self';"
			+ "style-src 'self' 'unsafe-inline'";

	public void destroy() {
	}

	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
		HttpServletResponse httpResponse = (HttpServletResponse) response;
		
		httpResponse.addHeader("Content-Security-Policy", POLICY);
		
		chain.doFilter(request, response);
	}

	public void init(FilterConfig fConfig) throws ServletException {
	}

}

web.xml

<!-- Caso o servidor nao suporte servlet 3.0 -->
<filter>
		<display-name>CSPFilter</display-name>
		<filter-name>CSPFilter</filter-name>
		<filter-class>br.com.epapum.home.CSPFilter</filter-class>
</filter>

<filter-mapping>
	<filter-name>CSPFilter</filter-name>
	<url-pattern>/CSPFilter</url-pattern>
</filter-mapping>