In https://github.com/Flowpack/Flowpack.ContentSecurityPolicy/pull/11 a new configuration pattern was implemented. The old one is still supported, but we should remove the support and release a new major version.