[Enhancement]: Enable CSP 3 support in app config #4488

Overview

Now that all the keywords and directives are supported for CSP 3, we should look into and attempt to enable $CSPEnabled in app/Config/App.

Background

This was identified as a follow-up task from PR #4485 (Update to CodeIgniter 4.7.2). The $CSPEnabled property was previously disabled due to CSP 3 tag incompatibilities, but those limitations have since been addressed in the updated configuration.

Tasks

• Review the current CSP configuration in app/Config/ContentSecurityPolicy.php
• Verify that all CSP 3 keywords and directives are properly supported
• Enable $CSPEnabled = true in app/Config/App.php
• Test thoroughly to ensure no regressions

References

• PR: Update to CodeIgniter 4.7.2 #4485
• Requested by: @objecttothis