Documentation: Cannot add property with policy value filter

[kadamwhite]

The documentation for the main content_security_policies filter shows adding base-uri:

add_filter( 'altis.security.browser.content_security_policies', function ( array $policies ) : array {
	$policies['base-uri'] = 'self';
	// ...etc
	return $policies;
} );

However, because base-uri isn't in the base object of content security policy directives we pass into the CSP header logic, we never check for a base-uri filter and the filter below (which I believe you would logically conclude would work, reading the README) will never run:

altis.security.browser.filter_report_only_policy_value.base-uri

This is confusing, and we should clarify the list of CSP directives that will work as policy value filters out of the box, and note that further directives should be added using the first filter (or Altis config) prior to filtering.

Alternatively, we could expand our base list to include all supported directives.