fix: Use sets

http_csp/csp.py

@@ -2,31 +2,31 @@
 
 
 class CSP:
-    base_uri: list[str]
-    child_src: list[str]
-    connect_src: list[str]
-    default_src: list[str]
-    font_src: list[str]
-    form_action: list[str]
-    frame_ancestors: list[str]
-    frame_src: list[str]
-    img_src: list[str]
-    manifest_src: list[str]
-    media_src: list[str]
-    object_src: list[str]
-    report_sample: list[str]
-    report_to: list[str]
-    sandbox: list[str]
-    script_src: list[str]
-    script_src_attr: list[str]
-    script_src_elem: list[str]
-    strict_dynamic: list[str]
-    style_src: list[str]
-    style_src_attr: list[str]
-    style_src_elem: list[str]
-    unsafe_hashes: list[str]
-    upgrade_insecure_requests: list[str]
-    worker_src: list[str]
+    base_uri: set[str]
+    child_src: set[str]
+    connect_src: set[str]
+    default_src: set[str]
+    font_src: set[str]
+    form_action: set[str]
+    frame_ancestors: set[str]
+    frame_src: set[str]
+    img_src: set[str]
+    manifest_src: set[str]
+    media_src: set[str]
+    object_src: set[str]
+    report_sample: set[str]
+    report_to: set[str]
+    sandbox: set[str]
+    script_src: set[str]
+    script_src_attr: set[str]
+    script_src_elem: set[str]
+    strict_dynamic: set[str]
+    style_src: set[str]
+    style_src_attr: set[str]
+    style_src_elem: set[str]
+    unsafe_hashes: set[str]
+    upgrade_insecure_requests: set[str]
+    worker_src: set[str]
 
     def __init__(self, policy: Optional[str] = None):
         """