STEP_050M07P27QRFIX_VM103_CSP_R02 access QR blob image CSP img-src self blob; accepted VM103 Caddy after postcheck