Content security policy header - excavate submodule to parse

[liquidsec]

CSP headers (and often, CORS headers) often have many domains, including often subdomains/domains for the same organization, making them potentially a great source of new and possibly in scope domains.

[liquidsec]

this was implemented a while ago