chore(image): add content-security-policy and content-disposition

chore(image): add content-security-policy and content-disposition #874