[required_csp-header.html] [Test Required-CSP value on `csp` change: Sec-Required-CSP is not sent if `csp` attribute is not set on