Merge pull request #28444 from ffflorian/fix/helmet

fix: Add loose option for helmet-csp

types/helmet/helmet-tests.ts

@@ -58,6 +58,7 @@ function contentSecurityPolicyTest() {
         directives: {
             defaultSrc: ["'self'"]
         },
+        loose: false,
         setAllHeaders: true
     }));
 }

types/helmet/index.d.ts

@@ -60,6 +60,7 @@ declare namespace helmet {
         disableAndroid?: boolean;
         browserSniff?: boolean;
         directives?: IHelmetContentSecurityPolicyDirectives;
+        loose?: boolean;
     }
 
     export interface IHelmetDnsPrefetchControlConfiguration {