Use the enforcing header name (Content-Security-Policy).
Content-Security-Policy
Usage
Source
ContentSecurityPolicy.enforce()