Hi Emond,it seems to me the CSPRequestCycleListener might add CSP headers prematurely.
What if a request comes in for one page and another page is rendered in response? The listener will already add the headers when the request handler is resolved for the former page.
What if the page streams back a resource? Setting the headers doesn't make sense then, does it?
Sven
