Content-Security-Policy header gets lowercased

[Joó Ádám]

Hi,

I noticed that when adding a `Content-Security-Policy` header to the
response, the header name gets lowercased. Neither
`Content-Security-Polic` or `Content-Security-Policyy`, or any other
header I came across gets lowercased. Is this a bug?


Ádám