Security Content-Security-Policy header

Thanks for the heads up, I changed Feature policy to Permission policy header now Scan results for https://centminmod.com/. I don't use Content Security Policy (CSP) if I have ads running on the same as there's no way to properly implement CSP is you have 3rd party ads where you do not control or know what domain/hostnames these 3rd party ads are served from as you'd be playing catch up and CSP will be blocking all 3rd party domains until you catch up.

To read on CSP see Content Security Policy - An Introduction

The recommended way is to add the header to your Nginx vhost near the HSTS and other headers that are included by default for static HTML pages and also add a copy to your php.conf include file for dynamic sites.