ZK tabs displaying all at the same time when security headers set

Question

I have a zul page that is dispalying perfectly well when the headers Content-Security-Policy, X-Content-Security-Policy or X-WebKit-CSP are not set.

However when set,