Adding the default-src values to policies
so they work as usual on tests. Or other
environments without explicit CSP config.