No Restrictions for CONTENT_SECURITY_POLICY

Set the CONTENT_SECURITY_POLICY in B2C Script class dw.system.Response to any string value. Previously, the only directive allowed was frame-ancestors.