Revert CSP changes of WEBUI-1446

WEBUI-1446 was introduced by accident in the latest release. This change brings a stricter CSP header policy configuration which makes the application more secure by default, but could break existing Web UI applications.

Customers running into this problem may see errors when the nuxeo-filter expression is evaluated, such as:
 

TypeError: Cannot read property 'UI' of undefined in <nuxeo-filter> expression "user && user.properties && user.properties.groups && (user.isAdministrator || user.properties.groups.includes(window.Nuxeo.UI.config.props.exceptionmanagers))"

TypeError: Cannot read property 'href' of undefined in <nuxeo-filter> expression "window.location.href.includes('search')"

As part of our policy, breaking changes should not be introduced without sufficient notice and this change needs to be reverted.  

AC

• Revert WEBUI-1446