fix: When render.scp is true, add csp.enabled to true

lib/common/options.js

@@ -128,7 +128,10 @@ Options.from = function (_options) {
 
   // Apply default hash to CSP option
   if (options.render.csp === true) {
-    options.render.csp = { hashAlgorithm: 'sha256' }
+    options.render.csp = {
+      enabled: true,
+      hashAlgorithm: 'sha256'
+    }
   }
 
   // cssSourceMap