The directive name "font-src" was accidentally re-used for the "form-action" directive, leading to a duplicate font-src and no form-action directives in the header output.
The directive name "font-src" was accidentally re-used for the "form-action" directive, leading to a duplicate font-src and no form-action directives in the header output.

Peter-Juhasz/aspnetcoresecurity