Fix 363299ac failures: protect Safari 5.1 from CSP