Bruce i see inconsistency in this two .inc
NetAll.inc:
ContentSecurityPolicy string(256)
ContentSecurityPolicyReportOnly string(256)
NetWeb.inc
ContentSecurityPolicy string(1024)
ContentSecurityPolicyReportOnly string(256)
But after changing everything to 1024, it works for what I wanted.