This response should have a malformed CSP header (one leading and one trailing whitespace).