I want to create an http-Configuration, which excludes the Content-Security-Policy-Header (framed red in the picture) for certain urls. For all other urls it should be the s