[WICKET-7028] move generation of CSP related header(s) to onRequestHandlerExecuted
diff --git a/wicket-core/src/main/java/org/apache/wicket/csp/CSPRequestCycleListener.java b/wicket-core/src/main/java/org/apache/wicket/csp/CSPRequestCycleListener.java
index 77853a9..cfd83f3 100644
--- a/wicket-core/src/main/java/org/apache/wicket/csp/CSPRequestCycleListener.java
+++ b/wicket-core/src/main/java/org/apache/wicket/csp/CSPRequestCycleListener.java
@@ -31,7 +31,7 @@
  */
 public class CSPRequestCycleListener implements IRequestCycleListener
 {
-	private ContentSecurityPolicySettings settings;
+	private final ContentSecurityPolicySettings settings;
 
 	public CSPRequestCycleListener(ContentSecurityPolicySettings settings)
 	{
@@ -39,7 +39,7 @@
 	}
 
 	@Override
-	public void onRequestHandlerResolved(RequestCycle cycle, IRequestHandler handler)
+	public void onRequestHandlerExecuted(RequestCycle cycle, IRequestHandler handler)
 	{
 		if (!mustProtect(handler) || !(cycle.getResponse() instanceof WebResponse))
 		{